Last updated: 15 October 2026
1. Summary
Estratum’s main database lives on the iPhone. We do not sell personal data or use saved information to display advertising. Some optional features may communicate with Apple or the AI provider selected by the user.
2. Information stored on the device
- Notes, text, classifications, tags, dates, statuses and relationships.
- Photos or scans selected by the user and text extracted through OCR.
- Preferences, settings and Home/Work contexts.
- Locations the user chooses to save as Home or Work.
- Local AI models and search vectors.
- External-provider keys, stored in the encrypted iOS Keychain.
The user can view, correct and delete content from the app.
2.1. Website waiting list
If someone voluntarily enters an email address in the getestratum.com form, it is stored in Cloudflare infrastructure only to notify them about the launch. It is not sold or used for third-party advertising and can be deleted by emailing support@getestratum.com. The legal basis is consent. The address is deleted when it is no longer needed for that notice or when the person asks for deletion. The hosting provider may produce technical access logs.
3. Local AI
When Qwen local or Apple local is selected, classification, search and answers are processed on the device. Some components require an initial download. The hosting service may receive standard connection data, but notes are not part of that download. Afterwards, local features can be used without sending notes to an AI server.
4. Optional external providers
The user can select External server and configure OpenAI or OpenRouter with their own key. Estratum then sends the instruction and necessary context to that provider. This processing is subject to the provider’s policy:
Document photographs are never sent to the external provider. They are read on the iPhone. If the user confirms a document while that engine is active, the detected text may be sent to organize the note.
4.1. Optional Apple Private Cloud Compute (PCC)
On compatible app versions and devices, users can choose Apple PCC in Settings and explicitly authorize it before use. Updating the app, purchasing Pro or a local engine failing does not enable it. When saving or asking with PCC selected, the necessary text is processed on Apple's servers: this is not a fully on-device mode and requires internet.
A request may include a note or question, instructions, retrieved notes used as context, and confirmed document text. That text can contain sensitive information such as health details, names, addresses or passwords. The full database, photos, recordings and Home/Work location-manager coordinates are not uploaded; a location written in a note may still be included in its text. Images, OCR and note retrieval remain on the iPhone.
Apple describes PCC as encrypted, verifiable processing without retaining request content beyond what is needed to fulfill the request. This does not mean zero risk. See Apple's technical explanation of PCC and its privacy policy. Estratum does not receive a copy of requests on a developer-operated server.
PCC has an Apple-managed quota independent of Free/Pro. Users can switch to a local engine and revoke consent in Settings. If PCC fails or reaches its quota, notes remain saved and are not automatically sent to another provider. Revoking consent stops future requests; it cannot undo requests already processed.
5. Apple Calendar
Synchronization is optional. Estratum creates a separate calendar and copies its schedule there; it does not import appointments from other calendars. The calendar may be stored locally or synchronized through iCloud, depending on device settings.
6. Location and WeatherKit
Location is optional and allows automatic switching between Home and Work. Saved coordinates remain on the device. Once permission has been granted, the TODAY header may send Apple a previously rounded location to obtain a WeatherKit forecast. Estratum does not keep a history of those requests.
7. Voice
Dictation is optional and requires microphone and speech-recognition permission. Estratum requests on-device recognition when iOS and the language support it. Audio is used to turn speech into text and is not stored as a recording in the database.
7.1. Camera, Photos and documents
The camera and Photos picker are used only when the user chooses to scan or select a document. The image and OCR are processed on the device, an editable review is shown and no appointment or notification is created until confirmation. Confirmed originals are stored with file protection inside the app; deleting their note also physically removes those images.
8. Notifications
Estratum schedules local notifications for schedulable items. Their content may appear on the lock screen depending on iPhone privacy settings.
9. Purchases
Estratum Pro purchases are processed through the App Store and StoreKit. Apple manages payment and financial information. Estratum only receives the status needed to verify the purchase. See Apple’s privacy policy.
10. Analytics, advertising and sale
Estratum contains no advertising, does not sell personal data and includes no proprietary behavioral analytics system in the version described. Apple may provide the developer with aggregated App Store Connect metrics.
11. Retention and deletion
Local content is retained while it remains in the app or in backups managed by the user
and Apple. “Save a backup” creates an .estratumbackup file containing notes
and original documents. Estratum does not upload it on its own: the user selects a
destination and should treat it as private information.
From Settings you can delete individual entries and also delete in bulk, through two separate actions, each with explicit confirmation:
- Delete my notes and documents — permanently removes notes, scanned documents and habit history, including their search vectors and the image files on the device. This is not a “marked as deleted” flag: the rows are removed from the database and the space is reclaimed. App settings are kept.
- Delete all my Estratum data — everything above plus API keys stored in the keychain, Home and Work coordinates, preferences, the app's internal log and any downloaded models. The app is left as a fresh install.
Neither action can be undone, and neither affects .estratumbackup files you
have already saved outside the app, nor information you yourself sent to an external
provider. The Pro purchase is not removed: it is an entitlement verified by Apple, not data
held by Estratum. When the app is uninstalled, iOS removes the
local container, except for information retained in a system backup, the dedicated calendar
or enabled external services.
12. Rights and contact
To exercise applicable rights under the GDPR, email support@getestratum.com. Because most information exists only on the device, the controller may not hold a remote copy that can be identified, provided or deleted.
13. Children
Estratum is not specifically directed at children and does not knowingly seek to collect children’s information.
14. Changes
This policy may be updated to reflect changes to the product, providers or law. The review date appears at the beginning.