VizKeeper Privacy Policy
VizKeeper (the "App") is made by YOMOO LLC ("we", "us"). This policy explains what the App keeps on your iPhone, what it sends to our servers and service providers, and the choices you have.
The short version
- Your saves (photos, screenshots, voice notes, links and notes) are stored on your iPhone. We do not keep a copy of your library on our servers. The one exception is a short travel-day schedule (flight numbers, times and cities, seats, hotel names and check-in times) used to show your next stop on the Lock Screen; you can turn it off, and it is deleted after the trip.
- Some features use cloud AI from third parties: Google (Gemini), and OpenRouter (which passes requests to Perplexity and Black Forest Labs). The App asks your permission before anything is sent to them. If you say no, or later turn on "Keep everything on device", nothing is sent to any AI service and saves are organized on your iPhone. When AI is allowed, only what each feature needs is sent, and private saves are sent with sensitive details hidden.
- Card numbers, ID numbers and passwords that the App detects are never sent to AI. Locked cards and IDs are encrypted on your iPhone and open with Face ID.
- We do not sell your data and we do not show ads.
What stays on your iPhone
- Your saves, their original photos and files, notes, titles, tags, reminders and conversations.
- The index of what each save holds (for example a flight's times and airports, a hotel stay's dates, a receipt's shop, amount and card's last four digits, an expiry date, and who it is for). Searching this index happens on your iPhone. Identity document numbers are never part of it.
- Your household members' names, and which one is you.
- Text read from photos, barcode and QR reading, and the detection of cards, IDs and passwords. These run on your iPhone.
- Locked items (payment cards and identity documents). Their full details are encrypted with a key kept in your iPhone's Keychain and are excluded from iCloud backup.
- Pictures you choose for a save.
What is sent to the cloud, and when
Organizing a save
Ordinary saves are organized with cloud AI: the photo or text of that save is sent to Google's Gemini models (through Google Firebase) to suggest a title, summary, tags, dates, reminders and the index described above. Free includes 30 cloud organizes a month, after which saves are organized on your iPhone; Plus organizes in the cloud without limit. Private saves are organized from their text only, with every number masked on your iPhone first; their photo is not sent. Locked saves, and every save while "Keep everything on device" is on, are organized on your iPhone.
Saves made before version 2.2 are indexed once in the background, a few a day, while the App is open: ordinary saves in the same way as above, everything else on your iPhone. Screenshots kept from version 1 are indexed on your iPhone only.
Questions and summaries
When you type or say a question, the question, your household members' names, today's date and, for a follow-up, the previous search are sent to Google's Gemini models to turn it into a search; the search itself runs on your iPhone and your saves are not sent. With "Keep everything on device" on, questions are matched by their words on your iPhone instead. When you ask for a written summary or a trip's day-by-day plan, the question and the saves most relevant to it are sent to write the answer. Private saves are included with sensitive details (such as passwords, codes and numbers) hidden. Locked cards and IDs are only described by a label such as "Locked card"; their numbers are never sent. If you turn on "Keep everything on device", new captures stay private and are kept out of summaries.
The home input box
When you type a sentence into the input box on the home screen, the App decides whether it is a new note, a search, or a request such as a reminder. To decide, the sentence alone is sent to Perplexity's Decider model through OpenRouter; nothing else from your library or account is included, and we do not store or log the sentence. Sentences that look sensitive (such as card numbers, ID numbers or passwords), sentences that start with "remind me" or "note:", and everything typed while "Keep everything on device" is on are decided on your iPhone and are not sent.
Cover images
Voice memos, text notes and links that have no picture of their own get a cover image, automatically when they are saved or when you choose "Make a cover". Covers are free. To make one, only the save's title and category are sent to Black Forest Labs' FLUX image model through OpenRouter; the summary, the text or recording, amounts, names and everything else in the save are not sent. Covers are never made for locked or private saves, for passes, cards, IDs, passports, travel authorizations or payment cards, for saves with their own photo, screenshot or PDF, or while "Keep everything on device" is on. The resulting image is stored for your account on Google Firebase so it can be delivered to you, and on your iPhone; removing a cover in the App removes it from the save. Free includes 30 covers a month.
Account and plan
The App creates an anonymous account (Firebase Authentication) so your plan, monthly limits and purchases can be tracked. If you choose to sign in with Apple or Google, we receive the account identifier and, if you share them, your name and email. Our servers (Google Firebase) store your plan, this month's count of summaries, plans and covers, and a record of each AI request (time, action and, for summaries, the answer that was returned) so a request is never counted twice. The number of saves and cloud organizes is counted on your iPhone.
Purchases
Subscriptions are processed by Apple. We use RevenueCat to manage them; RevenueCat receives your anonymous account identifier and your purchase history from Apple. We never see your payment details.
Fraud prevention
The App uses Firebase App Check, which relies on Apple's App Attest and DeviceCheck, to confirm that a request comes from a genuine copy of the App on a real device. We do not store a device identifier for this.
Voice notes
Voice notes are turned into text with Apple's speech recognition. Depending on your iPhone and language, Apple may process the audio on the device or on Apple's servers, under Apple's privacy policy. The recording of a voice note is kept with the save on your iPhone only, so you can play it back; it is never sent to us or to any AI provider. Deleting the save deletes its recording. If a voice note contains numbers the App protects (such as a card number), only the masked transcript is kept and the recording is deleted.
Live Activity on travel days
On the day of a trip the App can show your next stop (a flight, or a hotel check-in) on the Lock Screen and in the Dynamic Island, and keep it current through the day even while the App is closed. To do this, our servers need to know the day's stops ahead of time and send updates through Apple's push service. For each upcoming trip, the App sends only: the flight number, departure and arrival times, airport codes and cities, your seat and boarding group, the hotel's name and check-in time, the trip's city, and the links that open the trip or your boarding pass in the App. Booking codes, barcodes, ticket and document numbers, and passenger names are never sent, and our servers reject any other field. Locked and private saves are never sent, and nothing is sent while "Keep everything on device" is on (the Live Activity can still start on your iPhone when you open the App).
With the schedule, the App sends the push tokens Apple and Firebase Cloud Messaging need to reach this Live Activity on your iPhone. The schedule and tokens are stored with your account on Google Firebase, are readable only by our servers, and are deleted after the last travel day of your trips ends (usually within an hour), when you turn off "Live Activity on travel days" in You, or when you delete your account. No live flight status (delays or gate changes) is looked up.
Crash reports and anonymous usage
The App includes Google Firebase Crashlytics, which collects crash reports and basic device information (such as app version and iOS version) to help us fix problems.
With "Share anonymous usage" on (You), the App also sends Google Firebase Analytics a small set of usage events, such as that a save was made, that a question was answered or a reminder set, or that an offer was tapped, with counts and categories only. These events never contain the content of your saves, questions or answers, names, or numbers, and are not linked to your account; Firebase identifies them only by a random identifier for this installation of the App and an approximate location derived from the connection. Turning the switch off stops them; "Keep everything on device" turns it off as well.
Service providers
- Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Storage, Cloud Messaging, App Check, Crashlytics, Analytics, and Gemini AI models through Vertex AI and Firebase AI). Content sent for AI features is processed to return the result and is not used by us to train AI models.
- OpenRouter and Perplexity (deciding what a sentence typed in the home input box is for).
- OpenRouter and Black Forest Labs (drawing cover images from a save's title and category).
- RevenueCat (subscription and purchase management).
- Apple (purchases, Sign in with Apple, DeviceCheck, speech recognition, and the Apple Push Notification service for Live Activities).
These providers process data on our behalf and under their own privacy terms. We only use providers whose terms protect your data at least as well as this policy does: they may use it only to provide their service to us, not for advertising or to sell it. Data may be processed in the United States.
How long we keep data
Your library stays on your iPhone until you delete it or delete the App. Account, plan and request records stay on our servers while your account exists. Generated cover images are kept with your account until you delete it. A travel-day Live Activity schedule is deleted after your trip's last travel day, or as soon as you turn the feature off.
Your choices
- Choose whether to allow cloud AI when the App first asks. You can change your answer at any time with "Keep everything on device" in You → AI & privacy.
- Mark any save as private, or turn on "Keep everything on device" in You → AI & privacy.
- Turn off "Share anonymous usage" in You.
- Turn off "Live Activity on travel days" in You → AI & privacy. This also deletes the schedule from our servers.
- Delete any save at any time. Deleting a save also removes its reminders and its original file.
- Delete your account in You → Account → Delete account. This deletes your server records, generated covers, your RevenueCat customer record and your sign-in account. Subscriptions are billed by Apple; cancel them in Settings → Apple Account → Subscriptions.
- Deny or change camera, photos, microphone, speech and notification access in iOS Settings at any time.
Depending on where you live (for example under the GDPR or the CCPA), you may have rights to access, correct, delete or port your data, and to object to processing. Contact us to use them. We do not sell or share personal information for advertising.
Children
The App is not directed to children under 13, and we do not knowingly collect their personal information.
Changes
We will post any changes on this page and update the date above. Significant changes will also be shown in the App.
Contact
YOMOO LLC
Email: support@yomoo.net