Security & compliance
Your data stays with you
Our apps keep what you create on your device. When an app syncs or backs up, it uses an account you own: your iCloud, your NAS, your S3 bucket or your own database server. We run no server that receives your app data, there are no accounts to create, and the apps contain no analytics, advertising or crash-reporting libraries.
Last reviewed: November 2026
How we checked
We read through the source code of our apps and looked at every third-party package, every place an app opens a network connection, all iCloud and other sync code, and each app's privacy manifest, the file Apple requires apps to ship that lists the data they collect.
We found no analytics, advertising or crash-reporting libraries, and no app's privacy manifest declares tracking. Every app we reviewed ships a privacy manifest.
A few older apps were not part of this review; their own privacy pages describe them. The exceptions we found are listed below, by name.
Apps that sync or back up, and where to
These apps send data only to a place you set up and own. We cannot see it.
- Tidyloop
Syncs your chores through your own iCloud private database.
- SnapPro
Keeps captures on your Mac. Only when you choose Share does it put that one capture in your iCloud and create a read-only link.
- PhotoBridge
Backs up photos to the destination you set up: your NAS over WebDAV, an S3-compatible bucket you own, or an external drive. Its Test connection button, only when you tap it, opens cloudflare.com to check your network.
- PlanScope
Connects only to the PostgreSQL server you enter, to read query plans.
Apps that use the network for their main feature
These apps contact a service because the feature you use needs it. They send only what that request needs; as with any request, the service sees your IP address. Apps that show a map use Apple Maps, which loads map data from Apple.
- Beamora
Sends files straight between your nearby devices over Wi-Fi. No server in between.
- SeoSnap
Fetches the web page you ask it to check, from your device.
- Quakescan
Reads the public earthquake feed of the US Geological Survey (earthquake.usgs.gov).
- Spinery
Looks up a book's title and author by ISBN at Open Library (openlibrary.org).
What the privacy manifests declare
Every reviewed app declares that it does not track you. One app declares collected data: SipNote lists precise location (not linked to you) and purchase history (linked to you), both for app functionality. The location is the place you attach to a drink so it can show on your own map; it is saved on your device and never sent to us. When you pick a place, Apple's map service draws the map and looks up the place name; the purchase history is your purchase in the app, which Apple handles.
Privacy laws and rules we follow
- EU and UK data protection (GDPR, UK GDPR)
- We do not receive the data you create in our apps, so we do not process, sell or share it. For the little the website handles, the privacy policy says what and why, and you can ask us to see or delete anything we hold.
- California (CCPA / CPRA)
- We do not sell or share personal information, and we do not use it for cross-context advertising.
- China (Personal Information Protection Law)
- App data stays on your device or in accounts you choose, so we make no transfer of your personal information, across borders or otherwise.
- Canada (PIPEDA)
- We collect no personal information through the apps. Questions about the website go to the contact below and are answered personally.
- Children's privacy (COPPA and similar laws)
- No accounts, no ads and no data collection by us, so the apps collect no personal information from children.
- Apple's App Store rules
- Each app has passed Apple's App Review, which checks the privacy section of the guidelines, and ships a privacy manifest. Because the apps do not track you, they never show the App Tracking Transparency prompt.
- Payments
- Purchases go through Apple's In-App Purchase. We never see your card or payment details.
We hold no third-party certification such as SOC 2 or ISO 27001. This page describes what the apps and the website actually do; it is not legal advice.
This website
- HTTPS everywhere, with HSTS so browsers never fall back to plain HTTP.
- An enforced Content Security Policy, plus frame, content-type and referrer protections on every page.
- No cookies for visitors and no analytics script.
- The browser tools run on your device: files you open in them are never uploaded.
Free tools for your own apps and sites
The same checks we use, as free tools that run in your browser. Nothing you open in them is uploaded.
Report a security issue
If you find a security or privacy problem in one of our apps or on this site, email obeliskclubclub@gmail.com with the app or page, what you found and how to reproduce it. We read every report and reply personally. The same contact is in our security.txt.
Questions
- Do your apps collect my data?
- No. What you create stays on your device, or in your own iCloud, NAS, S3 bucket or server if you turn on sync or backup. We run no server that receives it.
- Do the apps include analytics or ad SDKs?
- No. Reading the source of our apps found no analytics, advertising or crash-reporting libraries, and no privacy manifest declares tracking.
- Where is my data when an app syncs with iCloud?
- In the private database of your own iCloud account, which only you can read. It is covered by your agreement with Apple; we cannot open it.
- Are your apps GDPR compliant?
- We do not receive the data you create in the apps, so we do not process, sell or share it. For the website, the privacy policy explains what is handled, and you can ask us about anything we hold.
- How do I report a security problem?
- Email obeliskclubclub@gmail.com with the app or page, what you found and how to reproduce it. We reply personally.