Privacy Policy

Effective October 27, 2026

PactPin helps you keep track of your household's renewals, expiration dates, warranties and upkeep. It is built to keep your information on your phone. This policy explains what PactPin stores, what leaves your device and when, and the choices you have.

The short version

• Everything you add is stored on your device. You don't need an account.
• PactPin has no ads, no analytics and no tracking, and we never sell or share your data.
• The Vault (passwords, card and ID details, private notes and photos) is encrypted with a passphrase only you know and never leaves your device.
• Some optional features send limited data to a service so they can work. Each one is listed below, and all of them are off until you use them.

Information stored on your device

PactPin stores what you enter: subscriptions and prices, expiration and renewal dates, document types and labels, household member names, upkeep routines and shopping lists, places you save (such as your dentist's address), trips, notes, profile photos of household members and pets, and the photos you attach. Card and ID numbers are kept as the last 4 digits only. This data stays in the app's storage on your phone. If you delete the app, it is gone, unless you turned on Backup & sync.

Scanning documents and photos

When you scan a document, the photo is read on your device, including text and barcode reading. The photo is not uploaded. To do this, the app downloads the reading software (Tesseract and ZXing) once from the jsDelivr content network. That request includes your IP address but no personal data. If you choose to keep a copy of a photo, it goes into your encrypted Vault on this device.

Optional: if you add your own Anthropic (Claude) API key in Settings, photos that can't be fully read on the device are sent to Anthropic to fill in the remaining fields. That only happens when you add a key, and Anthropic's privacy policy applies to that request.

Optional features that send data

• Backup & sync (off by default): when you turn it on, a copy of your PactPin data, not including the Vault, is stored on our server so you can restore it or use it on another device. It is tied to a random ID created by the app, not to your name or email. Turning sync off stops uploads. To remove the server copy, use Settings → Backup & sync → Erase everything, or email us.
• Household sharing: items you choose to share with a household member are stored on our server so that member's app can see them. Leaving or ending the household removes the shared copy.
• Family calendar link: when you turn it on, the titles and dates of your items (for example, "Passport expires" or "Dental cleaning — Noa"), and the name and address of any place you attach to an appointment, are published at a private, hard-to-guess web address so calendar apps can subscribe. Numbers, notes and Vault contents are never included. Turning it off deletes the feed.
• Apple Calendar on your iPhone: when you turn it on, PactPin writes the same events into its own "PactPin" calendar on your phone, using Apple's calendar system. If your calendars sync through iCloud, Apple syncs that calendar too. PactPin only touches its own calendar, and turning the feature off removes it.
• Vehicle lookups and safety recalls: to fill in a car's year, make and model from its VIN, and to check for recalls, PactPin sends the VIN, or the vehicle's year, make and model, to the U.S. National Highway Traffic Safety Administration (NHTSA). It sends product brand and model details to the U.S. Consumer Product Safety Commission (CPSC). No names or personal details are sent.
• Prices, deals and travel rules: PactPin downloads public lists of subscription prices, student and household deals, and passport entry rules from GitHub. Nothing about you is sent.
• Service logos: logos for the services you track are loaded from Google's public favicon service, using the service's web address, such as netflix.com.

Purchases

PactPin Plus is sold through Apple's App Store. Apple handles payment, and we never see your card details. We use RevenueCat to confirm whether your subscription is active. RevenueCat receives a random app ID and your purchase status, and its privacy policy applies.

Notifications, widgets and Siri

Reminders are scheduled on your device as local notifications. Widgets and Siri read a small summary of upcoming dates that is stored on your device in an area only PactPin and its widget can access. None of this is sent to us.

Deal questions

If you answer the "deals that may apply to you" questions (for example, whether someone is a student or receives benefits), your answers are stored only on this device and are never synced or shared.

Children

PactPin is meant for adults managing household paperwork, which can include their children's documents. It is not directed at children under 13, and we do not knowingly collect information from them.

Security

Vault contents are encrypted on your device with AES-GCM, using a key derived from your passphrase. Optional Face ID unlock keeps that passphrase in the iOS Keychain on this device only. Data sent to our server travels over HTTPS. No system is perfectly secure, so please use a passphrase you don't use anywhere else.

Your choices

• Use PactPin entirely offline and on-device by leaving the optional features off.
• Export or erase your data at any time in Settings → Backup & sync.
• Ask us to delete any server copy by emailing support@beyondbetterstudio.com.

Changes

If this policy changes, we'll update the date above. If a change affects what leaves your device, we'll also say so in the app.

Contact

PactPin is made by Ben Sheerit (Beyond Better Studio). Questions: support@beyondbetterstudio.com.