1. Who processes your data
Data controller: Manuel Minelle, independent developer of the Garzone app. Contact: manuel.minelle@icloud.com.
No other party is involved in processing the data you enter into Garzone: there is no proprietary server, no backend, no shared database. The only external infrastructures involved are both Apple's and beyond our reach: your private iCloud space for backup and sync (see the dedicated section) and, when you dictate text your device cannot process locally, Apple's speech-recognition servers (section 4).
2. What data you enter and where it stays
While using Garzone you may enter: client records (name, phone, address, access notes), quotes and price-list items, job reports (description, materials, hours, photos, customer signature), appointments, parts to order, maintenance due dates, payments/installments, and your business details used to generate PDFs.
All of this data is stored on your device using SwiftData (Apple's persistence framework) and synced to your private iCloud space via CloudKit, so it survives reinstalls and phone upgrades. It never transits any server we operate and is never accessible to us in any way — we have no dashboard, database, or log where we could view it even if we wanted to.
If your device has iCloud Backup enabled at the operating-system level, iOS may include the app's data in your encrypted Apple account backup — this is a system-level Apple behavior, not something Garzone enables, requires, or controls. You can turn it off anytime in iOS Settings.
3. Sharing data: only when you initiate it
iCloud backup and sync
App data is also stored in the private iCloud database of your Apple account (Apple CloudKit), so you can get it back if you reinstall the app or switch phones. That space belongs to you alone: it is protected by your Apple ID, encrypted by Apple in transit and at rest, and not accessible to the developer or to third parties. You can turn iCloud off for Garzone at any time in iOS Settings (the app keeps working locally) and manage or delete the iCloud data from Settings > [your name] > iCloud.
Garzone never automatically sends anything to anyone. The only way data leaves the device is when you explicitly tap a share action (e.g. sending a quote or job-report PDF via WhatsApp, email, AirDrop, or any other app on your phone). This opens iOS's native share sheet: you choose the recipient and channel, and it is that third-party app (e.g. WhatsApp) — not Garzone — that receives and handles the file under its own privacy policy.
The same applies to "call," "navigate," or "message on WhatsApp" shortcuts in client records: they simply open the phone/maps/messaging app already installed on your device with the client's number/address pre-filled; nothing passes through any Garzone server.
4. Permissions used by the app
Garzone requests a few system permissions, only for the features that need them. You can review and revoke them anytime in iOS Settings > Garzone.
Contacts
Garzone uses Apple's native contact picker (CNContactPickerViewController) to import a client's name, phone, and address in two taps. This picker is provided directly by iOS: Garzone never gets access to your full address book, only to the single contact you choose to import, and even that never leaves the device — it's saved locally in the client record.
Microphone and Speech Recognition (dictation)
Longer text fields (job description, notes) include a microphone button for voice dictation instead of typing. When you use dictation:
- If your device and selected language support it, speech recognition happens entirely on-device: the audio never leaves your phone.
- If on-device recognition is not available (older device, language not supported offline, or a temporary technical limitation), iOSsends the audio to Apple's speech-recognition servers (the system
Speechframework) for transcription and returns only the resulting text. In this case, Apple, as the provider of this system-level service, temporarily processes the audio under its own privacy policy (Garzone has no visibility into or control over this step, does not receive or retain the audio, and would not use it for any other purpose regardless). Apple's Siri & Dictation privacy information:apple.com/legal/privacy/data/en/siri-dictation. - Either way, the resulting transcribed text is saved only locally in the relevant client/job-report record, like every other piece of data in Garzone.
Camera
Used to attach job photos to a job entry/report. Photos are stored only in the app's local database (resized to save space) and are never uploaded anywhere unless you explicitly include them in a PDF you choose to share.
Notifications
Garzone schedules local notifications (handled entirely by iOS on your device) to remind you of upcoming appointments, parts to prepare, installments due, and maintenance due dates. There are no visible remote push notifications: no server of ours knows when or whether you receive a notification, because no server of ours exists. (iCloud uses silent system notifications, invisible to you and to us, solely to keep your devices in sync.)
5. No tracking, no data collection, no third parties
Garzone does not include:
- Analytics or measurement SDKs (no Firebase, Google Analytics, Mixpanel, Amplitude, or similar)
- Advertising or attribution SDKs
- Third-party crash-reporting systems that transmit data
- Any cross-app/cross-site tracking mechanism (Garzone does not request or use App Tracking Transparency because it does not track anything)
- Any user account, login, password, or identifier that could link your data to your identity on an external server
The only possible "data sent to a third party" is the one described in section 4 for dictation (Apple's servers, only when on-device recognition is unavailable) — an operating-system service, not a data-collection choice we make.
6. Subscription and payments
Garzone.pro (the in-app subscription) is handled entirely by Applevia the App Store/StoreKit. We never see, receive, or store any payment data (card number, billing address, etc.): this is processed by Apple underApple's own privacy policy. Our code only receives a technical confirmation ("subscription active: yes/no") needed to unlock app features, verified locally via StoreKit 2.
7. Children
Garzone is a professional app aimed at adult tradespeople who own or work for a business. It is not designed for, or directed at, children, and does not knowingly collect data from children (it does not collect data from anyone — see above).
8. Security and data retention
Since data stays on the device, its security depends on your iPhone/iPad's protections (passcode, Face ID/Touch ID, iOS encryption) and your iCloud backup choices. We recommend keeping your device's screen lock enabled. Data remains on the device until you uninstall the app or delete it manually within Garzone; uninstalling the app removes all local data along with it (except for any iCloud device backup, managed by Apple).
9. Changes to this policy
If Garzone changes in a way that affects this processing (e.g. introducing an optional cloud-sync feature), this page will be updated with a revision date, and — if required by law or Apple's guidelines — we will notify you clearly before the change takes effect.
10. Contact
For any question about this policy or how your data is handled:manuel.minelle@icloud.com.