Privacy
Your client list is the most valuable thing you own. Here is exactly where it lives, what leaves your device, and what never does.
Where your data lives
Your file — every contact, note, and log entry — is stored on your device. Ask works fully offline. Nothing about using the core app requires a server at all.
If you sign in
Signing in syncs a copy of your file to your account so your phone and desktop stay in step. That copy lives in our database (hosted by Supabase), protected by row-level security: your account can only ever read its own row.
Turn on the passcode lock and sync becomes end-to-end encrypted. Your file is encrypted on your device with AES-256 before it leaves; the server stores ciphertext it cannot read — and neither can we. The passcode and recovery code never leave your device. There is no reset, which is the point: nobody but you can open it.
Without the passcode, the synced copy is readable by the database — Ask tells you this in Settings, plainly, and offers the lock during setup.
What we collect
| Data | When | What it contains |
|---|---|---|
| Account email | If you create an account | Sign-in and password resets. Nothing else. |
| Usage counts | Signed-in devices, daily | Opens, reach-out and name counts, missions done, streak, app version. Numbers only — never a contact, a name, or a note. |
| Synced file | Signed in, lock off | Your file, readable, in your private row. |
| Synced file | Signed in, lock on | Ciphertext we cannot decrypt. |
What never happens
Your contacts are never sold, never shared, never used for advertising, and never used to train anything. There is no analytics SDK, no ad pixel, and no tracker in the app. The browser is instructed, via security policy headers, to refuse network connections to anywhere except our own origin and our own database — even injected code would have nowhere to send your data.
Who we rely on
Three infrastructure providers, each seeing the minimum: Netlify serves the app's static files and sees standard web logs. Supabase hosts the database described above. Loops sends account email (sign-up confirmations, password resets) and sees your email address only.
Your controls
Export your full file anytime (Settings → export backup). Erase everything with one action (Settings → start over), which clears the device — including local backups and caches — and, if signed in, the synced copy. Delete your account by emailing us and we remove the row entirely.
Questions
trent@trentgrzegorczyk.com — you'll get an answer from the person who built it.