Purlo — Privacy Policy

Last updated: 12 November 2026

Purlo is made by Yoni Kalifi, an independent developer ("we"). This policy is short because the app has no account and no server of ours. Two things leave the app to services we use: anonymous usage counts, which you can turn off, and the record of what you bought. Both are described below.

What stays with you. Your projects, their rows and counters, your notes and your patterns (the text you paste and the PDF files you open) are stored only on your device. They are included in your device's own backups (iCloud or your computer) if you have those turned on, under your Apple Account. We never receive them, and the app reads your patterns on the device itself: nothing is uploaded to be processed. When you put a counter on the Lock Screen, the project's name and the current row's instruction are shown there by iOS.

Purchases. Subscriptions are sold through Apple. Apple processes the payment; we never receive your card or Apple Account details. Apple tells the app only what you are entitled to.

Purchase records (RevenueCat). We use RevenueCat, a subscription service, to see how subscriptions are doing: trials started, renewals, cancellations and refunds. When you buy something, the app sends RevenueCat the App Store's record of that purchase (product, price, dates, transaction ID) with a random ID created for this installation and the device's identifier for vendor, which Apple gives each developer and which is the same only across our own apps. While usage data is on, RevenueCat also receives the random usage-data ID described below, so that purchases can be counted together with the anonymous usage figures. RevenueCat never receives your name, email, Apple Account or content, and we do not use it to identify you. RevenueCat is based in the United States. Its privacy policy: https://www.revenuecat.com/privacy

Anonymous usage data (PostHog). To learn which parts of the app help and where people get stuck, the app sends anonymous usage events to PostHog, hosted in the European Union (eu.i.posthog.com). An event says that something happened, for example "project created" or "pattern imported" with the number of rows found (never the pattern itself), together with the app's language and version, the iOS version, the device model and screen size, the device's language and time zone, whether it is on Wi-Fi, the country of the App Store it was downloaded from, and a random ID created for this installation. Events never include your content or your name. We never connect this ID to who you are, we turn off location lookup from your IP address, and there are no screen recordings. PostHog's privacy policy: https://posthog.com/privacy

Turning usage data off. In the app, Settings ▸ Share anonymous usage data turns it off at once, and it stays off on this device until you turn it back on. Purchase records still reach RevenueCat, because they are part of how purchases work; they are not used for anything else.

Asking first, keeping it short. The app asks before it sends any usage data, on one screen during setup; until you answer, nothing is sent. PostHog and RevenueCat process this data only on our behalf, under data processing agreements that require protection equal to this policy. Usage events are kept for at most 12 months and then deleted; purchase records are kept as long as they are needed to run your subscription and meet tax and accounting law.

No tracking, no ads. The app contains no advertising and no advertising SDKs. It never tracks you across other companies' apps or websites, never reads the advertising identifier (IDFA), and never shares data with data brokers. If you share usage data and installed the app from an ad in App Store search, Apple's privacy-preserving attribution tells RevenueCat which ad campaign, ad group and keyword it was (no advertising identifier, nothing about you); we use it only to see which ads are worth paying for.

Your data and your rights. Deleting the app removes what it stored on the device, including its random IDs. Purchases stay with your Apple Account and can be restored. We process usage data on the basis of our legitimate interest in improving the app (you can object by turning it off) and purchase records to provide what you bought. Depending on where you live (for example under the GDPR, Brazil's LGPD or Mexico's data-protection law), you may have the right to access, correct, delete or object to the processing of your data, and to complain to your data-protection authority. Because the data we hold is anonymous, we cannot look it up by your name; write to us and we will help however we can.

Children. The app is not directed to children under 13.

Changes. If this policy changes, the new version will be published at this address with a new date.

Contact. yoni@kalifi.ai