Clanda · Legal

Privacy Policy

App: Clanda·Developer: AnchorKite LLC·Effective: October 29, 2026

Contact for privacy inquiries: legal@anchorkite.com. This policy covers the Clanda mobile app. For the website at anchorkite.com, see the AnchorKite site privacy policy. The app's terms are in the Clanda Terms of Use.

---

Plain-language summary

Clanda is an encrypted contact manager. Your contacts (names, phone numbers, emails, notes, photos, and favorites) live only on your device, encrypted with AES-256. There are no accounts, no sign-in, no cloud sync, no ads, no analytics, and no crash reporting. AnchorKite never receives your contacts, cannot see them, and cannot recover them.

The only time Clanda talks to a server is when you start a trial or make a purchase: Google Play and our purchase provider confirm it (see §1.4). Nothing else leaves your device unless you choose to export a backup.

If you uninstall the app or use Reset App in Settings, all of Clanda's data on your device is deleted.

1. Information we collect

1.1 Information stored only on your device

When you use Clanda, you create the following data, all of which is stored only on your device, encrypted with AES-256:

• Your contacts: names, phone numbers, email addresses, notes, and contact photos
• Which contacts you mark as favorites
• App preferences (such as the auto-lock timeout)

This data is never transmitted to AnchorKite LLC. It is not backed up to any cloud service by Clanda. AnchorKite has no copy of it and no way to read it.

1.2 PIN and vault

Access to Clanda is protected by a 6-digit PIN that you choose. The PIN is not stored in readable form: Clanda stores a salted hash of it in your device's secure keychain, together with the key that encrypts your data.

You can optionally set a second "vault" PIN that unlocks a separate, hidden set of contacts. Vault contacts are sealed with AES-256-GCM using a key derived from the vault PIN, and that PIN is not stored on the device.

If you forget your PIN or vault PIN, AnchorKite cannot recover it or the data it protects. Because nothing is held on our side, that data is unrecoverable.

1.3 Device permissions

Clanda asks only for the permissions a feature needs, at the moment you use that feature:

• Contacts (read only). Requested only when you tap Import. Clanda copies the device contacts you import into its own encrypted storage. Imported contacts are never sent anywhere. Clanda does not write to or change your device's contacts.
• Camera and photo picker. Used only when you choose a photo for a contact. Clanda uses images only, and the chosen photo is stored encrypted on your device.

Clanda does not use the microphone or your location.

1.4 Purchases

Clanda requires Clanda Pro, available as a subscription (monthly or yearly, each with a 7-day free trial for new customers) or a one-time lifetime purchase. Payments are processed by Google Play. To confirm your purchase, our purchase provider, RevenueCat, receives:

• A randomly generated, anonymous app-user ID. It is not linked to your name, email, device ID, advertising ID, or any other personally identifying information.
• Purchase and subscription data from Google Play: the product you bought, its price, transaction details, and your country.

RevenueCat never receives any contact data. AnchorKite does not receive your payment card details. Details on these providers are in §3.

1.5 Backups and exports

You can export your contacts as a JSON backup file or a CSV spreadsheet file, and share or save it wherever you choose. An exported file is not encrypted by Clanda. Once it leaves the app, you are responsible for where it goes and who can read it. You can restore your contacts in Clanda from a backup file.

1.6 Information we do not collect

Clanda does not collect, transmit, or process:

• Accounts, sign-in details, or email addresses
• Your contacts, in any form, on AnchorKite or third-party servers
• Analytics or telemetry
• Crash reports or device fingerprints
• Advertising identifiers (no ads, no ad networks)
• Location data or microphone audio

2. How information is used

Information stored on your device is used solely to operate the app for you (show, search, and edit your contacts, and protect them with your PIN).

The purchase data described in §1.4 is used solely to determine whether your trial, subscription, or lifetime purchase is active, so the app can unlock Clanda Pro. It is not used for marketing, profiling, or any other purpose.

3. Third-party services

We use a minimal set of third parties, both only for purchases:

• RevenueCat (revenuecat.com) is our purchase and entitlement service provider. It receives the anonymous app-user ID and the purchase and subscription data described in §1.4, and reports whether your entitlement is active. Their privacy policy: revenuecat.com/privacy
• Google Play Billing processes your payment under Google's own terms and privacy policy. We do not see your payment details. Google's privacy policy: policies.google.com/privacy

We do not use Google Analytics, Firebase Analytics, Crashlytics, Sentry, or any other analytics, advertising, or crash-reporting service in Clanda.

4. Children's privacy

Clanda is not directed at children under 13.

5. Data deletion and your rights

5.1 Local data

Because your contacts live on your device, you control them directly. Delete individual contacts in the app, use Reset App in Settings to wipe all of Clanda's data on the device, or uninstall the app. Any backup or export files you saved elsewhere are not affected; delete those yourself.

5.2 Purchase records

To request deletion of the purchase records held by RevenueCat, email legal@anchorkite.com.

5.3 Other rights

Depending on where you live, you may have additional rights under privacy laws such as the EU GDPR or California's CCPA, including the right to access, correct, or receive a copy of personal information associated with you. AnchorKite holds no contact data, so these rights apply in practice to the purchase records described in §1.4. To exercise them, contact legal@anchorkite.com.

6. Security

Your contacts are encrypted at rest with AES-256 in the app's private storage, and the encryption key and PIN hash are kept in your device's secure keychain. Vault contacts are additionally sealed with AES-256-GCM under a key derived from the vault PIN. Purchase validation (§1.4) is sent over HTTPS, so it is encrypted in transit.

No system is perfectly secure. Anyone who knows your PIN and has your unlocked device can see your contacts, and exported files (§1.5) are not encrypted. We make commercially reasonable efforts to protect the data we process.

7. Changes to this policy

We may update this policy from time to time. The "Effective date" at the top reflects the most recent revision. Material changes will be communicated via the app.

8. Contact

AnchorKite LLC
Email: legal@anchorkite.com