Privacy Policy
Short version: GrammyFone has no account, no server of its own, no ads and no tracking. It counts anonymous feature usage (like "a person was added") to improve the app. The contacts, photos and emergency number you add are stored on the iPhone. If you send a setup to another phone, it travels through Apple's iCloud (CloudKit), between the people you invited. We cannot see any of it.
What GrammyFone stores
What you enter: the name shown on the phone, the people to call (name, phone number, optional photo, group and call style), the emergency number, and a short history of Emergency button presses (time and, if allowed, location). This is stored on the device.
Sharing a phone setup
When you use "Send to their phone", GrammyFone stores that setup in your private iCloud database using Apple's CloudKit and creates an invite link. Anyone who opens the link gets access to that setup and can view and change it, so send it only to family. Data shared this way stays in Apple's iCloud and is visible only to you and the people who accepted the link. You can stop sharing at any time, which removes it from their phones.
Emergency alerts and location
If the person using GrammyFone allows location access, pressing Emergency records the approximate location at that moment and shares it, through the same iCloud setup, with the family members connected to that phone. Location is only read when Emergency is pressed. It is never used for anything else and never sent to us.
What we don't do
- No advertising or tracking frameworks, and no identified analytics.
- No advertising identifiers.
- No GrammyFone account, sign-in or email collection.
- No GrammyFone server. We cannot read your contacts, photos, alerts or iCloud data.
- No selling or sharing of data with anyone.
Anonymous usage statistics
The app counts how its features are used through TelemetryDeck, a privacy-first analytics service. What is sent is strictly bounded: event names like "person added", "emergency pressed" or "invite link created", with values drawn from fixed lists (for example phone call or FaceTime, yes or no, a rounded count). It never includes names, phone numbers, photos, locations, typed text, or any identifier that could single you out; signals are anonymized before they reach TelemetryDeck's servers. This is "Usage Data, not linked to you" in the App Store privacy label.
Permissions GrammyFone may ask for
- Contacts: only the contact you pick in Apple's contact picker is read, to fill in a name, number and photo.
- Photos: only the photo you pick.
- Location: on the big-button phone, for emergency alerts, as described above.
- Notifications: on a family helper's phone, to show emergency alerts.
Purchases
GrammyFone Family is sold through Apple's App Store. Apple processes the payment; GrammyFone only learns whether the purchase is active.
Deleting your data
Delete a person or a whole phone setup inside the app, or delete the app. Shared setups you created are removed from iCloud and from every phone they were sent to when you delete them.
Children
GrammyFone is not directed at children and does not knowingly collect information from them.
Changes
If these practices change, this page will be updated and the date above will change.
Contact
Questions: zbencz3@protonmail.com
Back to GrammyFone