# Apple App Privacy Nutrition Label — SafeCircle > **Reference:** App Store Connect → App Privacy → Data Types > **Architecture note:** SafeCircle encrypts all photo/video content client-side (AES-256-GCM) before upload. The server stores only ciphertext and never holds decryption keys. This fundamentally changes answers compared to a standard photo-sharing app. --- ## Summary answer: Data Not Collected vs. Data Collected | Apple Data Type Category | Collected? | Linked to Identity? | Used for Tracking? | |---|---|---|---| | Contact Info — Email Address | **Yes — Collected** | Yes | No | | Contact Info — Name | **Yes — Collected** | Yes | No | | Contact Info — Phone Number | No — Not Collected | — | — | | Contact Info — Physical Address | No — Not Collected | — | — | | Contact Info — Other Contact Info | No — Not Collected | — | — | | Health & Fitness | No — Not Collected | — | — | | Financial Info | No — Not Collected | — | — | | Location — Precise Location | No — Not Collected | — | — | | Location — Coarse Location | No — Not Collected | — | — | | Sensitive Info | No — Not Collected | — | — | | Contacts | No — Not Collected | — | — | | User Content — Photos or Videos | No — Not Collected | — | — | | User Content — Audio Data | No — Not Collected | — | — | | User Content — Gameplay Content | No — Not Collected | — | — | | User Content — Customer Support | No — Not Collected | — | — | | User Content — Other User Content | No — Not Collected | — | — | | Browsing History | No — Not Collected | — | — | | Search History | No — Not Collected | — | — | | Identifiers — User ID | **Yes — Collected** | Yes | No | | Identifiers — Device ID | No — Not Collected | — | — | | Purchases | No — Not Collected | — | — | | Usage Data — Product Interaction | No — Not Collected | — | — | | Usage Data — Advertising Data | No — Not Collected | — | — | | Usage Data — Other Usage Data | No — Not Collected | — | — | | Diagnostics — Crash Data | No — Not Collected | — | — | | Diagnostics — Performance Data | No — Not Collected | — | — | | Diagnostics — Other Diagnostic Data | No — Not Collected | — | — | | Other Data | No — Not Collected | — | — | --- ## Detailed Answers by Apple Category ### 1. Contact Info #### Email Address - **Collected:** Yes - **Linked to identity:** Yes - **Used for tracking:** No - **Rationale:** An email address is required to create an account and receive circle invitations. It is stored server-side linked to the user account. It is never shared with third parties or used for advertising. - **Purposes:** App Functionality (account creation, invite delivery, password reset) #### Name - **Collected:** Yes - **Linked to identity:** Yes - **Used for tracking:** No - **Rationale:** Users provide a display name visible to circle members. Stored server-side linked to the account. - **Purposes:** App Functionality (display within circles) #### Phone Number / Physical Address / Other Contact Info - **Collected:** No - **Rationale:** SafeCircle does not request or store phone numbers or physical addresses at any point in the user flow. --- ### 2. Health & Fitness - **Collected:** No - **Rationale:** No health or fitness data is requested or inferred. --- ### 3. Financial Info - **Collected:** No - **Rationale:** Subscription billing (if applicable) is handled entirely by the App Store via StoreKit / RevenueCat. SafeCircle never sees or stores raw payment card data. --- ### 4. Location - **Precise Location:** No - **Coarse Location:** No - **Rationale:** SafeCircle does not request location permissions. No geolocation data is attached to uploaded photos (EXIF stripping occurs before upload). --- ### 5. Sensitive Info - **Collected:** No - **Rationale:** No racial, ethnic, religious, political, biometric, or health data is collected. --- ### 6. Contacts - **Collected:** No - **Rationale:** Circle invitations are sent via email address typed by the user. SafeCircle never requests access to the device address book. --- ### 7. User Content — Photos or Videos - **Collected:** No — **Data Not Collected** - **Rationale:** This is the core privacy differentiator of SafeCircle. Photos and videos are encrypted on-device using AES-256-GCM before any bytes leave the device. The server receives and stores only ciphertext. SafeCircle's servers cannot read, view, or reconstruct any photo or video. Because the provider cannot access the content, it does not meet Apple's definition of "collected" — the data is not used for any purpose by the developer. - **Apple guidance alignment:** Apple defines data as "collected" when it "leaves the device and is sent to you or a third party." SafeCircle transmits only encrypted blobs the developer cannot decrypt; the plaintext photo never leaves the device in readable form. --- ### 8. Audio Data - **Collected:** No - **Rationale:** SafeCircle does not record or transmit audio. --- ### 9. Browsing History / Search History - **Collected:** No - **Rationale:** SafeCircle does not track which photos users view or search queries within circles. No analytics SDK is embedded. --- ### 10. Identifiers #### User ID - **Collected:** Yes - **Linked to identity:** Yes - **Used for tracking:** No - **Rationale:** An internal UUID is assigned at account creation and is used to associate content with circle membership server-side. It is not used for cross-app or cross-site tracking and is not shared with advertising networks. - **Purposes:** App Functionality #### Device ID - **Collected:** No - **Rationale:** SafeCircle does not read IDFA, IDFV, or any hardware identifier. No advertising SDK or fingerprinting library is present. --- ### 11. Purchases - **Collected:** No - **Rationale:** Purchase transactions are handled by Apple's StoreKit and RevenueCat. SafeCircle only receives a subscription status token — not transaction amounts, payment method, or purchase history — and does not store it as a purchasable product record linked to the user profile. --- ### 12. Usage Data - **Product Interaction / Advertising Data / Other Usage Data:** No - **Rationale:** SafeCircle contains no analytics SDK (no Firebase Analytics, Amplitude, Mixpanel, or equivalent). No interaction events are sent to a third party. Server-side logs contain only standard web-server access logs (method, path, status code, timestamp) retained for 30 days for security purposes — they do not include per-user behavioral analytics. --- ### 13. Diagnostics - **Crash Data / Performance Data / Other:** No - **Rationale:** No crash reporting SDK (e.g. Sentry, Crashlytics) is currently integrated. If added in the future, this section must be updated before submission. --- ### 14. Tracking - **Does the app use data to track users across other companies' apps or websites?** No - **Rationale:** SafeCircle contains no advertising network integrations, no cross-app tracking, and does not share any identifier with third parties for advertising purposes. The app qualifies to answer "No" to Apple's tracking question and does not need to display an App Tracking Transparency prompt. --- ## Certification Statement > "SafeCircle uses end-to-end encryption for all photo and video content. Plaintext media never leaves the user's device. The developer cannot read or access any uploaded photo or video. Collected data (email, display name, user ID) is used exclusively for app functionality — account management and circle membership — and is never shared with third parties or used for advertising or tracking."