Privacy policy

Last updated: October 23, 2026

atHand is built so that your personal information stays on your iPhone. The developer runs no server, offers no account, and cannot see anything you store in the app.

Who this applies to

atHand is published by Jacob Davis, an individual developer in New York, United States. In this policy, “I” and “the developer” mean Jacob Davis.

In short

  • The information you enter or scan is stored only on your iPhone. The app never sends it to the developer or anyone else.
  • There is no account and no sign-in.
  • The developer added no advertising, tracking, analytics, or crash-reporting tools to atHand.
  • atHand connects to outside services only to verify your purchase, to send anonymous diagnostics from its scanning library, and, if you allow location, to look up the name of a nearby place. Each one is described below.

What the developer receives

I do not receive any of the information you store in atHand. I operate no server, so there is nowhere for the app to send it to me. I do receive:

  • Email you send to support. I use your address and message only to reply to you.
  • Sales and app reports that Apple provides to every developer through App Store Connect. These are aggregated and do not identify you.

What stays on your iPhone

The information you add to atHand, such as people, vehicles, pets, homes, financial accounts, contacts, and photos, is stored only on your iPhone, in app-private storage that other apps cannot read. The only way it leaves your iPhone is inside an encrypted backup file that you choose to export and share.

Document scanning

You can scan documents such as driver’s licenses, passports, insurance cards, VINs, vaccine records, utility bills, payment cards, and business cards. Text and barcode recognition runs entirely on your iPhone using Google ML Kit. Your images and the text read from them are never sent anywhere.

Connections to outside services

Purchases (Apple and RevenueCat)

When you buy or restore the one-time unlock, Apple processes the transaction. RevenueCat, a purchase service, then confirms it with Apple so the app can unlock. RevenueCat receives your purchase history, tied to a random identifier the app creates. It does not receive your name, email address, Apple ID, or anything you store in atHand. RevenueCat uses this data to provide the purchase service and the purchase reports it shows the developer.

Scanning diagnostics (Google)

The ML Kit scanning library sends Google anonymous diagnostic information: your iPhone model and iOS version, the app’s identifier and version, a random per-installation identifier, performance measurements, and settings for the scanning features. Google states that it uses this information for diagnostics and usage analytics, sends it over an encrypted connection, and does not share it with third parties. No images, recognized text, or information you enter is included.

Place lookup (Apple)

If you allow location access, atHand asks Apple’s location service for the name of the place you are near, then sorts that name into a general category, such as a medical office, on your iPhone. Apple receives your location coordinates to answer the request, under Apple’s privacy policy. The developer never receives them. atHand discards the coordinates and the place name once the category is found, and never stores either one.

As with any internet connection, these services can see your device’s IP address.

Optional permissions

atHand works without these permissions. You can turn each one on or off at any time in iPhone Settings.

Camera and photos

Used to scan documents and attach photos to your records. Images stay on your iPhone.

Calendar

If you allow it, atHand compares upcoming event titles with a keyword list on your iPhone to suggest relevant records. Event data is not stored or sent anywhere.

Location

Used only for the place lookup described above.

Face ID or device passcode

You can lock the app with Face ID, Touch ID, or your device passcode. Your biometric data stays in Apple’s secure hardware and is never seen by the app.

Backups

You can export an encrypted backup file protected by a passphrase you choose, and share it wherever you like. The file never includes your purchase, your settings, or your app lock setting. I have no access to the file or to your passphrase, and I cannot recover either one. If you lose the passphrase, the backup cannot be opened.

Outside services and their policies

Retention and deletion

Your information exists only on your iPhone, so you control how long it is kept. Deleting the app deletes all of its data from your iPhone. Backup files you exported are separate; delete those yourself from wherever you saved them. Apple, RevenueCat, and Google keep the data they receive under their own policies.

Children

atHand is not directed at children under 13. The developer does not knowingly receive personal information from anyone, including children.

Changes to this policy

If this policy changes, I will update this page and the date at the top. Any change to how your data is handled will be described here.

Contact

Questions about this policy? Email support@athandapp.com.