What we hold, and why
apreet shows you which of your contacts will be where you are going. To do that we hold:
- Your phone number, verified by SMS.
- Your contacts, synced from your phone: names, phone numbers, emails, postal addresses, job titles and companies. These include people who do not use apreet. We never contact them, and anyone can ask us to remove them.
- Your calendar events: title, location text and times. We read them; we never edit or delete them.
- Trade fairs and offices: the fairs you mark in your calendar, and, if you switch on Office Matching, the offices you add and your office days. Fairs are deleted 30 days after they end, office days once their date is over everywhere.
- Optional: your latest position, only while the app is open, and a profile photo.
The text of the notes on your contacts and the descriptions of your calendar events never leave your phone. The full list, with sign-in details, server logs and invitations, is in our privacy policy.
Where it lives
The app's data lives on our own server in the EU. Profile photos and the encrypted backups are stored in the EU. A few named providers handle specific jobs, such as Cloudflare (network), Vonage (SMS), Google and LinkedIn (sign-in), and Firebase (crash reports, push notifications and, in the Android app, usage statistics). Some of these providers are based in the USA, so data they process may be transferred there. The privacy policy says what each one receives.
How it is protected
- In transit: every connection from the apps to our servers is encrypted. It passes through Cloudflare, which decrypts it at its edge and forwards it to us through a second encrypted tunnel. apreet's services publish no port to the internet: their traffic arrives only through that tunnel.
- At rest: backups are encrypted before they leave the server, with the key kept off the server, and they expire within 30 days. We have tested restoring the app's database from them. The live database is not disk-encrypted.
- Access: the server is managed only by us. Signing in to it takes a personal key plus a one-time code, and repeated failures get blocked automatically. Our admin tools sit behind Cloudflare Access, an extra login in front of their own.
- AI assistants: an assistant can read your account only if you connect one, and only the categories you approve. It can read but not change anything, and you can disconnect it at any time. If one of your connections links an assistant, it may receive some of what that person sees about you: your name, number, photo, the cities and dates where your trips overlap, and your days at a trade fair you both attend. Details: Agent Gateway security.
- Deletion: you can delete your account in the app or ask us by email. After that we make reasonable efforts to remove your data within 30 days. What stays longer, and why, is in our privacy policy. How deletion works.
How we build it
- Automated scans look for security flaws and leaked secrets in the backend, the Agent Gateway and the iOS app, and for leaked secrets in the Android app. A finding fails the build.
- Since July 2026 we have reviewed the system's security several times. The latest code review, on 22 October 2026, covered the backend, the Agent Gateway, the location service and both apps, plus the libraries they use. We track what we find by severity.
- We have not had an independent penetration test.
Questions
Security and privacy questions: support [at] apreet [dot] com.