Privacy Policy

Effective from: 1 November 2026
Version: 1

1. Who we are and how to contact us

The Avanento app (iPhone, Mac, Apple Watch, widgets and CarPlay) is published by:

Mário Tišťan, company ID (IČO) 51377667, e-mail: support@avanento.com

("we" or "the developer"). Please send questions about privacy to the e-mail above.

2. The short version

• We run no servers of our own. Avanento has no user accounts, no sign-in and no backend. Your contacts, calls, meetings, notes and other data are on your device and – if you use sync – in your private iCloud (Apple CloudKit private database). We have no access to them.
• No advertising, no tracking, no analytics. The app contains no third-party advertising or analytics tools and does not track you across apps or websites.
• AI is optional and off by default. If you switch it on, you use your own API key with Anthropic or OpenAI, and the data needed for an answer is sent directly from your device to that company – only with your consent and only when you ask a question, have a dictation processed or start a voice conversation.
• Crash diagnostics stay on the device. Only you can send them to us, if you choose to.

3. Your role regarding your clients' data

Avanento is a tool in which you keep your own contacts and clients. For the personal data of your clients and of other people you enter or import, you are the controller (or the company you work for). We do not receive, store or process this data on your behalf, so we are not its processor either.

You are responsible for the lawfulness of processing your clients' data (legal basis, informing clients, retention periods). The app helps you minimise data (sections 5 to 8) but does not replace your obligations under the GDPR.

4. What data the app processes and where it is stored

4.1 Data you enter or import

• Contacts and clients: first and last name, salutation, phone, e-mail, company, source and referrer, status, notes, a link to a documents folder.
• Call records (time, direction, result, note, sometimes duration), meetings, follow-ups, realizations and points, service dates, goals, tasks, your profile (name, message signature).

Where it is stored: in the app's database on your device. With iCloud sync switched on, also in your private
CloudKit database, accessible only to your Apple Account. Names, phone numbers, e-mail addresses, notes, links and
other sensitive fields are stored in iCloud as CloudKit encrypted fields (allowsCloudEncryption in the models
Contact, CallRecord, Meeting, FollowUp, Realization, DelegatedTask, ContactEvent, AdvisorProfile).
Sync is operated by Apple under its iCloud terms.

4.2 iPhone Contacts (Contacts permission)

If you allow it, the app imports and keeps taking over from the iPhone's Contacts only the first and last name, phone, e-mail and company. The sync is one-way – Avanento never writes anything to or deletes anything from the iPhone's Contacts. With limited access it works only with the people you shared. You switch the sync off in Settings › Advanced › Contacts from iPhone. The Mac app does not access Contacts.

4.3 Calendar (Calendar permission)

The app writes booked meetings to the calendar you choose and changes or removes only the events it created itself. It sends no calendar data off the device (apart from Apple's normal sync of your calendar).

4.4 Reminders (Reminders permission)

If you delegate tasks, the app writes the task to the Reminders list you choose and reads back only the tasks it created itself (completion, added lines). A task contains the client's name and phone number, the task text, your additional text and possibly a link to documents – never notes on the contact, call or meeting. Everyone the Reminders list is shared with will see the task – you decide on the sharing. The app never completes or deletes tasks in Reminders.

4.5 Microphone and speech recognition

• Dictating a call result: the audio is transcribed on the device (Apple Speech) and never leaves it. The transcript text is processed by AI only with the AI assistant switched on (section 5).
• Voice assistant: the sound of your voice is sent to OpenAI during a conversation you start yourself (section 5). The microphone is on only during the conversation.

4.6 Calls

• Standard mode (all countries): CALL opens the system dialer (tel:). You log the result of the call. Optionally (Settings › Advanced › Calls › "Recognise the state of my calls", off by default, with consent) the app observes whether a call is in progress and whether it connected (Apple's CallKit) – without the phone number and without the content of the call. Calls are never recorded or transcribed.
• Default calling app (EU only, optional): if you choose Avanento as the default calling app in the iPhone's Settings, iOS gives it the cellular call history from that moment on (number, direction, time, duration, status). The app processes it only on the device:
  • a call is saved only as a call record with a contact you already have in Avanento;
  • numbers you do not have in Avanento are not stored; for an unknown incoming number the app may offer to save it as a new contact (can be switched off: "Offer to save unknown incoming numbers") – it is saved only after you confirm;
  • the call history itself is not synced; only the resulting call record with the contact goes to iCloud (like any logged call);
  • the device keeps only technical state (identifiers of processed calls, notification timing), without numbers or names;
  • calls are never recorded or transcribed (iOS does not allow it). Before the first such call the app tells you that your carrier may charge for calls. You switch back to the Phone app in the iPhone's Settings.

4.7 Notifications

The app uses local notifications only, scheduled on the device (follow-ups, today's plan, meetings, meeting outcome, unlogged call, completed delegated task, production quality, and with the default calling app a call with a client). Client names are hidden by default in notifications, Watch complications and Home Screen widgets; you show them in Settings › Notifications. Lock Screen widgets never show names. A silent remote notification is used only by iCloud to announce changes in synced data (Apple).

4.8 Apple Watch, widgets, CarPlay, Mac, Handoff and Shortcuts

• Apple Watch: the iPhone sends the Watch an overview of the day (names, times, numbers, phone numbers only for contacts to call – never notes) through Apple's WatchConnectivity; the Watch sends the iPhone call logs. The Watch has no database or iCloud of its own.
• Voice assistant on the Watch (prototype): the Watch receives your OpenAI key from the iPhone (stored in the Watch's Keychain) and talks to OpenAI directly; it only reads data from the iPhone. When you switch it off on the iPhone, the key is deleted from the Watch. Connection diagnostics (no audio, transcript or key) go only to your iPhone.
• Widgets: receive a short overview (whom to call, next meeting) through the app's shared folder (App Group) on the device.
• CarPlay: shows only the voice assistant's state and buttons – never the text of answers. Section 5 (OpenAI) applies.
• Mac: the same data from your iCloud; the Mac writes to Calendar and Reminders on the Mac. It does not access Contacts.
• Handoff: only a contact's identifier travels between your devices, never a name. The activity is not indexed for search.
• Shortcuts / Siri: actions (Whom to call today, Today's meetings, Open contact, Log an incoming call) are started by you; the system shows the result on the device.

4.9 Backups, export and import

• Automatic backup: once a day, if the data have changed since the last backup, a JSON file is created in the app's folder (Files › On My iPhone › Avanento › Zálohy); the newest 14 are kept. The file is part of the device backup (iCloud or computer) if you use one.
• Export (JSON, contacts CSV): you create it and save or send it wherever you want through the system share sheet. You are responsible for what happens to the exported file.
• Client import (JSON): a file you pick; a prepared file in the Import folder is deleted after a successful import.

4.10 Messages to clients

SMS and e-mails are sent only through the system Messages and Mail apps after you confirm. Avanento stores only that you sent a message and from which template – not the message text.

4.11 Crash and hang diagnostics

When the app crashes or hangs, iOS/macOS delivers a technical report to it (MetricKit). The app keeps it on the device only (at most 20 reports from the last 30 days). It contains the place in the code, the app and system version and the device model – not your contacts, calls or notes. Nothing is sent automatically. If you send us a report yourself ("Send diagnostics" through the system share sheet), we use it only to fix the bug and delete it no later than 12 months after the fix. If you also share analytics with Apple ("Share with App Developers"), Apple may give us anonymised crash reports under its own rules.

4.12 Data kept on the device only

Settings (theme, notifications, chosen calendar and lists, AI settings), API keys (the device's Keychain, never iCloud), the installation identifier (Keychain, this device only), the address book sync state and recognised calls (at most 7 days).

5. Artificial intelligence (AI assistant and voice assistant)

The AI features are off by default. You switch them on in Settings › AI assistant and use them with your own API key from Anthropic (AI assistant and dictation processing, Claude model) or OpenAI (voice assistant, OpenAI Realtime). Both companies are based in the USA.

• When something is sent: only when you ask a question, have a dictation processed or start a voice conversation – never in the background.
• What is sent: the text of the question or dictation (including what you say in it, e.g. a new contact's number), for the voice assistant also the sound of your voice and its transcript, and from the app only the data needed for the answer – contact names, their statuses, dates, follow-ups, meetings, call results, short notes and summary statistics (e.g. numbers of calls, meetings, realizations and points). For dictation only the day, the contact's name and the result options (no phone number, no history).
• What is not sent: stored phone numbers and e-mail addresses of contacts (search by number runs on the device). Phone numbers, e-mail addresses, birth numbers, IBANs and card numbers are hidden from notes on the device before sending (replaced by "[skryté]"). The hiding is automatic and may not catch every notation – do not put birth numbers, health data or contract numbers in notes.
• Consent: before the first use the app asks for your consent separately for each provider and tells you who receives what. When what is sent changes, it asks again. You withdraw consent in Settings › AI assistant ("Withdraw consent", "Withdraw consent (OpenAI)"); you remove a key with "Remove key".
• Nothing is saved without confirmation. You confirm every change the AI proposes and can undo it. The AI never deletes, calls or sends.
• The app does not store conversations and we have no access to them. Processing by the provider (including any temporary retention, safety review and transfer to the USA) is governed by the contract between you and the provider – its API terms and privacy policy (Anthropic: https://www.anthropic.com/legal/privacy; OpenAI: https://openai.com/policies/privacy-policy). The provider charges you for API use.
• We do not use this data for advertising or tracking.
• Apple Intelligence (on-device model): the screen Settings › Advanced › "Artificial intelligence – test" can run test tasks with Apple's on-device model. It uses invented texts and two summary numbers of the day, not client data; the app does not use Private Cloud Compute. The app's regular features do not use Apple's model.

6. Purposes and legal bases (where we are the controller)

We process personal data only in these cases:

We do not process the data you keep in the app (section 4) – we have no access to it.

7. Who receives data

• Apple – as the provider of iOS, iCloud (CloudKit), Calendar, Reminders, Contacts, notifications, the App Store and possibly analytics sharing; under your agreement with Apple.
• Anthropic, OpenAI – only if you switch on AI and give consent (section 5), under your own agreement with them.
• People you share a Reminders list, a documents folder or an exported file with – as you decide.
• Us – only diagnostics or a message you send us yourself.

We do not sell data and do not share it with data brokers or advertisers.

8. Transfers outside the EU

If you use AI, the data in section 5 goes to Anthropic or OpenAI in the USA. If you use iCloud, Apple stores data under its terms (possibly also outside the EU).

9. How long data is kept and how to delete it

• In the app: until you delete it. A deleted contact stays 30 days in "Recently deleted contacts" (restorable) and is then removed permanently together with its history. Deletion propagates through iCloud to all your devices.
• Anonymised statistics: so that your statistics (numbers of calls, meetings, realizations, points, goals and the bonus) stay correct, once a contact is deleted permanently the app keeps only the anonymous numbers of its calls, held meetings and realizations – date, kind and result, duration, points and value – without the name, phone number, e-mail, notes, place or source of the contact and without any link to the deleted person. They are kept together with the app's other data (on the device, in iCloud, in backups and exports) until you remove them with it.
• All data on the device: deleting the app from the iPhone (and the Mac) deletes its database, settings, the backups in its folder and the diagnostics.
• Data in iCloud: iPhone Settings › [your name] › iCloud › Manage Storage (Account Storage) › Avanento › Delete Data, or on the Mac in System Settings › Apple Account › iCloud. The app does not yet have a "Delete all data" button.
• Backups and exports: you delete the files in Files › On My iPhone › Avanento and any files you exported.
• AI keys and consents: Settings › AI assistant › "Remove key" / "Withdraw consent". Data at the AI provider is governed by its rules.
• Diagnostics: Settings › Advanced › Crash and hang diagnostics › "Delete"; otherwise removed automatically after 30 days.
• Reminders and Calendar events the app created stay in those apps until you delete them.

The app has no user account, so there is nothing to "close" (App Store guideline 5.1.1(v) does not apply).

10. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, portability, the right to object and the right to withdraw consent (withdrawal does not affect processing before it). Since you control the data in the app, you exercise most rights directly in the app (edit, delete, JSON/CSV export). For data we hold (section 6), write to support@avanento.com; we answer within one month.

You have the right to lodge a complaint with a supervisory authority – in Slovakia the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk, or the authority of the state where you live or work.

If you are a client of an advisor who uses Avanento and want to exercise your rights against them, contact the advisor directly – we have no access to their data.

11. Security

Data is protected by the device's and iCloud's encryption (Apple), sensitive fields are stored in CloudKit as encrypted fields, API keys are only in the device's Keychain, connections to the AI providers are encrypted (HTTPS / WSS). When you leave the app, the app switcher shows a logo instead of your data. We recommend protecting your device with a passcode and enabling two-factor authentication for your Apple Account.

12. Children

Avanento is a work tool for adult professionals and is not directed at children.

13. Changes to this policy

We publish changes on this page with a new effective date. If what is sent to the AI providers changes, the app asks for your consent again.