Carri privacy policy

Updated 7 November 2026. This is the whole policy. There is no longer version in small print.

The short version

Your notes are yours. They live on your iPhone. When you put one down, its words go to an AI service for a few seconds to be sorted, then come back. Carri's server passes them along and keeps none of them. If you sign in, your backup is locked on your iPhone before it leaves, and only you can open it, not even Carri. We don't sell data and we don't show ads.

What Carri does with a note

When you say or type a note, Carri sends:

• The words of the note, so they can be sorted into a reminder, a list, money or a kept note.
• Your voice, if you spoke it, only to turn it into words.
• A few of your recent notes that look related (up to 15), so the sorting knows that "Bu Rina" is the same Bu Rina as last week.
• Text from a photo or PDF you attached, if you attached one. The image itself isn't sent to be sorted.

This goes through Carri's server to an AI service. The server passes it along and keeps none of it, not even in its logs. The AI service keeps it for up to 30 days to run its systems, then deletes it. It does not use your notes to train its models.

Carri never sends your contacts, your location, or anything you didn't put into a note.

Where your notes live

On your iPhone, in a database only Carri can open. Recordings and receipt photos are locked while your phone is locked.

If you sign in, a copy of your notes, recordings and receipt photos is backed up to Carri's server. Each piece is locked on your iPhone before it leaves. The key stays with you: in your iCloud Keychain, so a new iPhone signed in to your Apple ID can open your backup, and in your recovery key, if you save one. The server stores only the locked copy and can't open it. Neither can we. Only you can open your backup. If you lose every device, your iCloud Keychain and your recovery key, nobody can recover your backup, including Carri.

What Carri keeps about you

Without an account: a random device ID and how many notes you've put down, so we can run the free plan.

With an account: your account ID from Google, your plan, how much you use Carri each week, and the size of your locked backup. Your name stays on your iPhone, and we don't keep your email address. Never your notes, never their words, never the names of people in them.

To stop misuse, Carri asks Apple to confirm that requests come from the real Carri app on a real iPhone (App Attest). This identifies the app on your iPhone, not you.

We keep an anonymous count of events like "a note was sorted" or "a reminder came back" to see what works. These counts contain no note text.

What we never do

• Sell or share your data with anyone for their own use.
• Show you ads or let others target you.
• Read your notes. Your backup is locked so we can't, and the words passing through to be sorted are never kept.
• Use your notes to train AI.

Who Carri works with

• An AI service that sorts notes and turns voice into words. It processes your words on our instructions and keeps nothing beyond 30 days.
• Google, only to sign you in, if you choose to. Sign in with Apple comes in a later version.
• Apple, to confirm requests come from the real Carri app (App Attest).
• Cloudflare, which runs Carri's server and stores locked backups. It cannot open them.

Each works under a written data agreement with Carri.

Your choices

• Use Carri without an account. Everything works. Nothing about you reaches a server except the count above.
• Export your notes as a file at any time, from Settings. Exports are not locked: keep the file somewhere safe.
• Erase all notes, in Settings. If you're signed in, this empties your backup too.
• Delete account, at the bottom of Settings. Your account, backup and usage records are gone from the server within a day. Notes on your iPhone stay unless you also erase them.
• Ask us what we hold about you, or to delete it: privacy@catat.app. We answer within 30 days.

Children

Carri is not for children under 13 (under 16 in the EU). We don't knowingly keep data about them.

Where data is handled

Carri's server runs on Cloudflare, which may process data in the US and other countries. Your locked backup is unreadable wherever it is stored. If you are in the EU, UK or Australia, you have the rights those laws give you, including access, correction and deletion. Use the choices above or email us.

Changes

If this policy changes in a way that matters, Carri tells you in the app before it takes effect. The date at the top always shows the current version.

The waitlist on this website

If you join the waitlist, we keep the email address or phone number you type, the page language, the country your connection came from, and when you joined. To stop spam sign-ups we also keep a scrambled code made from your network address, which can't be turned back into it. We use this only to tell you when Carri launches, keep it in a Cloudflare database only the Carri team can open, and delete it one month after launch. To be removed sooner, email privacy@catat.app from the address you signed up with, or tell us the number. We delete it within 7 days.

Contact

Carri · privacy@catat.app