Privacy Policy
Last updated: 13 July 2026 · Effective: 13 July 2026
This Privacy Policy explains what information the Contact Groups mobile app
and its backend service (“Contact Groups”, “we”, “us”)
collect, why, and the choices you have. We’ve tried to keep it plain.
Our purpose. Contact Groups helps a small, trusted circle
share a chosen set of contacts. We do not sell your data, show ads, run
third-party trackers, or build advertising or marketing profiles. Using the
app to harvest, scrape, or resell contact information is prohibited by our
Terms.
1. Information we collect
Account information
- Email address — used to sign in and to receive group invitations.
- Password — stored only as a one-way
bcrypt hash; we never store or see your actual password.
- Display name — the name shown to other members of your groups.
Content you create
- Groups you create (their names).
- Memberships — the email addresses you invite to a group and each member’s role.
- Shared contacts — the name, phone number and “source” label
of each contact that you or another member adds to a group.
Contacts from your device
With your permission, the app can read your phone’s contacts so you can
pick people to add to a group. Only the specific contacts you
select are sent to our servers. We do not read, upload, copy, or
store your entire address book, and we do not access your contacts in the
background.
Security & technical logs
- A limited audit log of security-relevant actions (e.g. sign-in,
creating a group, adding a contact). IP addresses in these logs are
masked before storage.
- Standard server logs needed to operate and protect the service.
We do not collect location data, device advertising
identifiers, or behavioural analytics.
2. How we use your information
- To provide the core feature: creating groups, inviting members, and
sharing the contacts you add.
- To authenticate you and keep your account secure.
- To detect, prevent and investigate abuse or security incidents.
- To comply with legal obligations.
We do not use your information for advertising, and we do not sell or rent
it to anyone.
3. How your information is protected
- In transit: all traffic between the app and our servers uses HTTPS/TLS.
- At rest: sensitive fields — contact names, phone numbers,
and email addresses — are encrypted in our database using
AES-256-GCM field-level encryption. Emails are additionally
indexed with a keyed one-way hash so we can look you up without storing
the address in readable form.
- Passwords are hashed with
bcrypt and are never stored in plain text.
- Access control: a group’s contacts and members are visible only to members of that group.
4. Sharing within a group
Contact Groups is a sharing tool. Contacts and member details you add to a
group are, by design, visible to the other members of
that group.
Only create or join groups with people you trust, and only add a contact if
you are allowed to share their details (see the
Terms).
5. Who we share data with
We share personal data only with the infrastructure providers needed to run the service:
- Hosting & database: our application server and PostgreSQL
database are hosted on Render, which processes data on our
behalf to operate the service.
We do not share data with advertisers, data brokers, or analytics networks.
We may disclose information if required by law or to protect the rights and
safety of our users.
6. Data retention
We keep your information for as long as your account is active. You can
remove a contact, leave or delete a group, or delete your entire account at
any time. Deleting your account erases your personal data from our active
systems; residual copies in encrypted backups are removed on our normal
backup rotation.
7. Your rights
Depending on where you live (including under India’s Digital Personal Data
Protection Act and the EU/UK GDPR), you may have the right to:
- Access & portability — export your data. The app provides a
one-tap export of your account and the contacts you’ve added.
- Correction — edit your details in the app.
- Erasure — delete individual items or your whole account.
- Withdraw consent — revoke the contacts permission in your device settings, or delete your account.
To exercise any right you can’t complete in the app, email
legal@tangiblespin.com.
8. Children
Contact Groups is intended for adults and is not directed to children.
We do not knowingly collect personal data from children. If you believe a
child has provided us data, contact us and we will delete it.
9. International use
Your data may be processed on servers located in regions supported by our
hosting provider. We apply the protections described here wherever your data
is processed.
10. Changes to this policy
We may update this policy from time to time. Material changes will be
reflected by the “Last updated” date above, and where appropriate we will
notify you in the app.
11. Contact
Questions or requests about your privacy:
legal@tangiblespin.com.