Privacy Policy

Last updated: July 9, 2026

Undryft (“Undryft”, “we”, “us”) is a relationship intelligence app — it helps you remember what matters about the people in your life and nudges you to stay in touch. That means you trust us with unusually personal information, and this policy explains exactly what we collect, why, who processes it, and how you can delete it. If anything here is unclear, email support@undryft.com.

The short version

• Your data exists so the app can work for you. We don’t sell it, we don’t show ads, and we don’t use third-party advertising trackers.
• Notes, recordings, and contact details are private to your account. No other user can see them.
• AI features send the relevant content to our AI providers to generate output for you. Under our agreements with them, they do not use your content to train their models.
• You can export your data and permanently delete your account — with everything in it — at any time, from inside the iOS app or from the web.

Information you provide

Your account

When you sign up — with email and password, Google, or Apple — our authentication provider (Clerk) shares your name, email address, and profile photo with us. If you sign in with Apple you may choose to hide your email address; the relay address works normally.

Information about your contacts

The core of Undryft is information you record about your contacts: names, photos, email addresses, phone numbers, birthdays and anniversaries, family details, employer and role, how you met, tags, check-in cadence, and free-form notes. If you import from your phone’s address book, we receive only the contacts you explicitly select, and only the fields shown on the review screen (name, photo, email, phone, company). We never upload your whole address book.

You are responsible for the information you save about other people. Use Undryft the way you’d use a private notebook: record what you’d be comfortable having written down.

Notes, recordings, and transcripts

Notes you write, audio you record, and transcripts you upload are stored against the contact you attach them to. Audio recordings are transcribed automatically (see AI processing below). You can mark any note, recording, or transcript as excluded from AI features.

Email-in

If you use your private email-in address (u-…@in.undryft.com), emails sent to it are received by our email provider and stored. When the sender’s address matches a contact’s stored email, the message becomes a note on that contact; otherwise it is held unattached. Only share your email-in address with people and tools you trust.

Information collected with your permission (iOS app)

• Contacts access — used only when you run an import, only for the people you select.
• Microphone — used only while you record an audio note.
• Photos — used only when you pick a photo for a contact.
• Calendar — if you turn on meeting briefings, the app scans your next seven days of events on your device and uploads only the matches: the event title, start time, and which of your contacts it matched. Full calendar contents never leave your phone.
• Notifications — if you enable push reminders, we store your device’s push token so we can send them.

Each of these is optional; the app works without them.

Information collected automatically

• Basic usage metering (for example, how many AI preps you’ve generated this month) to enforce plan limits.
• Subscription status from Apple / RevenueCat if you purchase a plan. We never see your payment card details — Apple handles billing.
• Crash and error reports (via Sentry) when enabled, to fix bugs. These may include device model and OS version; we do not intentionally include the contents of your notes.
• Standard server logs (IP address, request time) kept briefly for security and debugging.

We do not use advertising identifiers, cross-app tracking, or analytics SDKs that profile you.

How we use your information

• To provide the product: reminders, agendas, notes, recordings, search, and sync across your devices.
• To generate AI output for you: conversation prep questions, note digests, suggested follow-ups, and your monthly recap.
• To send the notifications you’ve enabled: push check-in reminders, meeting briefings, and email digests. Every notification type can be turned off.
• To enforce plan limits, prevent abuse, and keep the service secure.
• To respond when you contact support.

AI processing

Undryft’s intelligence features work by sending the relevant content to specialized AI providers and returning the result to you:

• Anthropic (Claude) — generates prep questions, summarizes transcripts into notes, extracts follow-up dates from notes, and writes your monthly recap. Receives the contact details and recent notes/transcripts needed for each request.
• AssemblyAI — transcribes your audio recordings. Receives the audio file via a time-limited link.
• OpenAI — creates text embeddings that power semantic search. Receives the text of notes and transcripts being indexed.

We use these providers via their business APIs, under terms that prohibit using your content to train their models. Content you mark “excluded from AI” is never sent to them.

Service providers

These are the companies that process data on our behalf to run Undryft:

We share data with no one else, except if required by law or to protect the safety and integrity of the service. If Undryft is ever acquired, your data would transfer under this policy’s protections and you would be notified.

Data retention and deletion

• Your data is kept for as long as your account exists.
• Deleting a contact, note, recording, or transcript removes it from the product immediately.
• Deleting your account — in the iOS app under Profile → Delete account, or on the web under Profile — permanently deletes your account and everything in it: contacts, notes, recordings, transcripts, agendas, reminders, and settings. This is not a deactivation; it cannot be undone.
• Residual copies in encrypted backups expire on the backup rotation schedule (up to 30 days).

Your rights

Depending on where you live (for example under GDPR or the CCPA), you have rights to access, correct, export, delete, and restrict processing of your personal data. Most of these are built into the product — you can view and edit everything, export your contacts as CSV from the web app, and delete your account yourself. For anything else, email support@undryft.com and we’ll respond within 30 days. We do not sell personal information, and we do not discriminate against you for exercising your rights.

Security

Data is encrypted in transit (TLS) and at rest. Audio files and photos live in private storage buckets accessible only through short-lived signed links. Access to production systems is restricted and credentialed. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

Children

Undryft is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

International transfers

Undryft is operated from the United States and data is stored on US-based infrastructure. If you use Undryft from outside the US, your data is transferred to and processed in the US under the safeguards described in this policy.

Changes to this policy

If we make material changes, we’ll update the date at the top and notify you in the app or by email before the changes take effect. Continued use after that means you accept the updated policy.

Contact

Questions, requests, or complaints: support@undryft.com. See also our Terms of Service.