noapps Get the app

Privacy

Everything stays on your phone.

Last updated: 2 October 2026 · noapps.app/privacy

noapps has no account, no sign in, no server, no cloud, no sync, no analytics, no ads and no tracking. What you create stays on your phone. We cannot read it, and we cannot restore it.

1. Who is responsible

The controller for everything described here is:

Secure Standards GmbH
Am Dornbusch 61
63225 Langen, Germany
info@secure-standards.com

2. How the app works

noapps opens directly. There is no registration, no email address, no password and no session. Everything you create in the app is stored on your phone and only there. We operate no server that holds your content. There is no sync and no cloud. What you keep works in airplane mode.

Because your data never reaches us, we cannot read it, and we cannot restore it.

3. Every connection the app makes

noapps goes online only when you ask it to: to buy, to restore, or to check for an update. Nothing of yours is ever sent. This is the complete list of what can happen, who starts it, and what is transmitted.

Purchases, when you open the purchase page

When you open the purchase page, the app asks the store for the products and their prices: Apple's StoreKit on iPhone, Google Play Billing on Android. When you buy or restore a purchase, the store handles it. See section 7.

Update check, only when you ask for it

When you tap Check for updates in Settings, the app asks our update service, Expo (u.expo.dev), whether a newer version exists. The request carries the platform (iPhone or Android), the app's runtime version and update channel, the identifiers of the app update it is running and of the one it was built with, and a random identifier that the update library creates once for each installation. If an update recently failed to start, its identifier is included. If the app's last launch ended in a fatal error, the text of that error message is included, at most 1,024 characters. The phone adds the usual request header, which on iPhone names the app, its build number and the version of the phone's system. The server sees your IP address, as with any request on the internet. None of your notes, files, pictures or other content is part of the request. The legal basis is our legitimate interest in keeping the app current (Art. 6(1)(f) GDPR).

Sharing, when you share

When you share something, the system share sheet takes over and sends it where you decide. The app sends nothing on its own.

Contact actions

Tapping a phone number, email address or street address in a contact opens the system app responsible for it. From that point on, that app's rules apply.

Reminders

The reminders you set are made by your phone and shown by your phone. Nothing is sent, and no server is involved.

Dictation

Speech recognition runs on the device.

Location

Sun, Compass, Run and Cycle use your location to work. The location stays on your phone and is never sent.

That is the whole list.

4. Letters

Letters lets two people write to each other. They connect in person, by scanning each other's code. The code shows only your name.

What a sealed letter contains. What you put in it: the subject, the message and any photo, file or scan you attach. When you send your card, it contains the details you choose to share. Each letter is sealed on your phone so that only the recipient's phone can open it.

How it travels. A sealed letter leaves your phone as a file, through the app you choose, for example a messenger or email. That app carries the file under its own terms. It cannot open it. We run no server for Letters and never see a letter.

No recovery. We hold no key, so we cannot open, restore or resend a letter. If the keys on a phone are lost, letters sealed for them cannot be opened any more.

Letters is on iPhone only, for now.

5. Pictures and location

Pictures leave noapps without their location data: when you share them, when you export them, and when you send them in a letter.

6. Your backup

The backup is one file, sealed with a sentence of your own. You decide where it goes; noapps sends it nowhere by itself. Without the sentence, nobody opens the file. A lost sentence cannot be recovered by anyone, including us.

7. Purchases

The paid parts of noapps are bought once. There is no subscription. Purchases are processed by Apple (App Store) or Google (Google Play) under their terms and privacy policies. Payment details never reach us. Restoring a purchase on a new phone also runs through the store.

8. What the app does not contain

noapps contains no analytics, no crash reporting service, no advertising SDKs and no tracking of any kind. It builds no profile of you.

One thing about errors can leave the phone: if the app's last launch ended in a fatal error, the next update check carries that error message to Expo, as described in section 3. Nothing else about errors is sent.

9. Deleting your data

Your data sits on your phone, so deleting it is in your hands: delete content in the app, or delete the app and its local data goes with it. There is no copy on our side that could remain.

10. This website

noapps.app sets no cookies and uses no tracking or analytics. Fonts and images are served from our own domain; apart from delivering the pages, opening this site sends no request to anyone else. There is nothing to consent to, so there is no cookie banner.

The site remembers your light or dark choice in your browser; nothing is sent.

Our profiles on Instagram, X and LinkedIn are plain links. Nothing is loaded from those services until you open one; from then on, their privacy policies apply.

Hosting

This website is hosted and delivered by Netlify, Inc., San Francisco, USA. When you open a page, your browser sends your IP address and the usual technical details of the request to Netlify's servers, for example the page requested, the time, and your browser and operating system. Netlify needs these to deliver the page, and they appear in its server logs. Netlify processes this data on our behalf under its data processing agreement.

Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework. According to Netlify's data processing agreement, personal data is transferred to Netlify on that basis, and otherwise on the basis of the EU standard contractual clauses. The legal basis for hosting is our legitimate interest in delivering this website reliably and securely (Art. 6(1)(f) GDPR).

11. Encryption

noapps uses only the operating system's own cryptography, with standard algorithms and none of our own. A plain summary is on the encryption page.

12. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Since we hold no personal data about you, there is usually nothing on our side these rights could attach to: your data is on your phone, under your control. You can still contact us at any time at info@secure-standards.com.

You also have the right to lodge a complaint with a supervisory authority. For us that is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI).

13. Changes to this policy

If we change how the app or this website handles data, we will update this page and the date at the top before the change ships.

14. Contact

info@secure-standards.com
Secure Standards GmbH
Am Dornbusch 61
63225 Langen, Germany