Last updated: 2 September 2026
That Friend has no accounts and no servers holding your address book. The people you save are stored on your iPhone and, if you keep iCloud sync on, in your own iCloud, where we cannot see them. We don't import photos, we don't run face recognition, we don't show ads, and we don't sell anything about you.
That Friend ("the app", "we", "us") is published by Contra Frumentum Inc., 8R The Grn, Dover, DE 19901-3618, United States. Questions: privacy@thatfriend.app.
Everything you create in That Friend — the people you save, their descriptions, your notes, generated portraits, tags, dates, and any places you attach — is stored locally on your device. We do not operate an account system, and we do not maintain a copy of your saved people on our servers.
iCloud sync. From version 1.0.5, the app can keep a copy of your people in the private iCloud storage that belongs to the Apple Account signed in on your iPhone. This is on by default and can be turned off in Settings under Backup. The copy lives in Apple's iCloud under Apple's terms; it is encrypted in transit and at rest by Apple, it does not appear in the Files app, and it is not readable by us. It exists so that deleting the app, losing a phone or getting a new one does not lose the people you saved: reinstall on the same Apple Account and they come back.
If you delete the app with iCloud sync off, that data is removed with it. With sync on, the copy in your iCloud remains until you turn sync off and delete the app's data from iCloud in iPhone Settings, or delete the people from within the app. You can export your data at any time from Settings, import that file back, and delete any person or all data from within the app.
When you tap the microphone, the app records audio in order to transcribe what you say. Transcription may be performed on your device or, where on-device transcription is unavailable, by sending the audio to a third-party speech-to-text provider for the sole purpose of returning text. Audio sent for transcription is processed transiently and is not used to build a profile of you.
The resulting transcript is stored on your device as part of the person's card.
Portraits in That Friend are illustrations generated from the words you speak or type — for example "red beard, glasses, round face". To be explicit about what the app does not do:
To generate a portrait, the text description is sent to a third-party AI image provider, which returns an image. The description is processed for that purpose only.
Location is optional. If you grant permission, the app records the approximate place where you met someone so it can label the person card and show it on your map. Location is only read while you are using the app — never in the background — and the app works fully without it. You can decline or revoke this permission at any time in iOS Settings.
That Friend is a memory aid, so the information you save is largely about other people — people who have not themselves agreed to anything with us. This matters, so please read this section.
Subscriptions are billed by Apple through your Apple Account. We use RevenueCat to manage subscription status. RevenueCat receives an anonymous identifier and your purchase status; it does not receive the people you have saved. We never see your payment details — Apple handles payment.
If you add a birthday and enable reminders, the app schedules a local notification on your device. No birthday data is sent to us, and we do not operate a push server.
That Friend does not display advertising, does not use third-party advertising SDKs, and does not track you across other companies' apps or websites. We do not sell or share personal information for cross-context behavioral advertising.
When you tap one of our own links — for example thatfriend.app/ig from our Instagram bio — our server records that a tap happened, which link it was, the time, your approximate country, your browser's user-agent string, and a one-way hash of your IP address. That hash is salted with a value that changes every day, so it cannot be reversed into your address, and a hash from one day cannot be matched against another.
The first time the app is opened, it asks our server once whether a tap came from the same network in the previous few hours. If one did, we record that this installation came from that link. That is the whole mechanism, and it connects our own website to our own app and nothing else: no advertising identifier is read, no third-party attribution SDK is involved, and none of it is shared with advertising networks or used to follow you around other companies' apps and websites. This is why the app does not ask for App Tracking Transparency permission — it is not doing the thing that permission governs.
We keep click records for 12 months so we can tell which posts brought people in. If you would rather not be counted at all, search for "That Friend" in the App Store instead of tapping one of our links.
The app contains no analytics, crash-reporting, telemetry or advertising SDKs, and no third-party attribution SDK. The one measurement request it makes is the first-party one described under Measuring our own marketing. Notifications are scheduled entirely on your device — there is no push server and no push token.
That Friend is not directed to children under 13, and we do not knowingly collect personal information from them.
Because your content lives on your device, you exercise most rights directly: view, edit, export, or delete any person or all data from within the app. If you are in the EEA, UK, or a US state with a comprehensive privacy law and would like to make a request about data we hold (for example, support correspondence), contact privacy@thatfriend.app.
If we change this policy we will update the date above and, for material changes, notify you in the app.