Effective date: October 7, 2026
This policy explains what personal data the Pact app (“Pact”, formerly “Contract Analyze & Compare”) handles, why, where it goes, how long it is kept, and what you can do about it. Pact is published by ShepherdStack LLC (“we”, “us”), the controller of the personal data described here.
Contact for anything in this policy, including requests to exercise your rights: [email protected].
Summary
- Your documents and analyses are stored on your device and, if you use iCloud, in your own iCloud account. We cannot see either.
- When you analyze, compare or chat, the content you submit is sent through our servers to a third-party AI provider to produce the answer. Pact asks for your permission before it sends anything the first time.
- Our servers delete analysis data within 48 hours. The AI provider does not use it to train models and may keep it for up to 30 days to monitor abuse.
- Pact does not require an account and does not ask for your name or email address. It uses an anonymous identifier.
- No advertising, no tracking across other companies' apps or websites, and no selling of personal data.
- You can delete your account and all server-side data from Settings → Delete Account.
The Delete Account option, the AI permission prompt and the analytics setting are in the latest version of Pact. If your version does not have them, update the app or email us.
1. Data we handle
Content you submit
- Documents: text and images of the contracts and other documents you scan, import, analyze or compare. Documents can contain personal data about you and about other people named in them.
- Chat messages: the questions you ask and the answers you receive.
- Onboarding answers: your role, situation, country, state or region, and preferred language. These are stored on your device and sent with your chat requests so answers fit your jurisdiction and language.
Analyses, comparisons and chat history are saved on your device. If iCloud is enabled, they are also saved in your private iCloud storage, which Apple operates and we cannot access. Original document files are not synced to iCloud.
Account and purchase data
- Anonymous identifier: a random user ID created on first launch, used to keep track of your token balance and purchases.
- Sign in with Apple (earlier versions, optional): if you linked it, we keep the identifier Apple provides and the email address Apple shared, which is usually an Apple private relay address, with your account until you delete it. Pact no longer asks Apple for your name or email address.
- Purchases: your subscription status, token balance and a record of token purchases and use. Apple processes payments; we never receive your card details.
Technical and usage data
- Usage analytics: which screens and features you use, app version, device model, operating system, language, approximate country (derived from your IP address by our analytics provider), subscription tier and your onboarding answers as segments. Analytics never include document or chat content. See section 4 for how consent works.
- Ad attribution: if you installed Pact from an Apple Search Ads ad, Apple tells the app which campaign, ad group and keyword led to the install. We store this with your user ID to measure which campaigns work. This uses Apple's AdServices framework and is not cross-app tracking.
- Notifications: a push token and, while an analysis runs, a Live Activity token, used only to tell you when the analysis is done.
- App integrity: Apple's App Attest and DeviceCheck services confirm that requests come from a genuine copy of Pact, which protects the service from abuse.
- Server logs: request records containing your user ID, timestamps and errors.
2. Why we use it, and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Analyzing and comparing documents, answering chat questions | Content you submit, onboarding answers | Performing our contract with you (Art. 6(1)(b)) |
| Providing your token balance, subscription and purchases | Account and purchase data | Performing our contract with you (Art. 6(1)(b)) |
| Notifying you when an analysis finishes | Push and Live Activity tokens | Performing our contract with you (Art. 6(1)(b)) |
| Protecting the service from fraud and abuse | App integrity data, server logs | Legitimate interests (Art. 6(1)(f)) |
| Measuring which ad campaigns lead to installs | Ad attribution | Legitimate interests (Art. 6(1)(f)) |
| Understanding how Pact is used so we can improve it | Usage analytics | Consent in the EEA, UK and Switzerland (Art. 6(1)(a)); legitimate interests elsewhere |
| Meeting legal obligations | Purchase records, as required | Legal obligation (Art. 6(1)(c)) |
Pact's analyses are information for you to read. Pact makes no decisions about you that have legal or similarly significant effects. Pact is not a law firm, and its output is not legal advice.
3. Who processes your data for us
We use the following service providers. Each processes data only on our instructions and under a data processing agreement.
- A third-party AI provider (United States): processes the documents, chat messages and onboarding answers you submit to generate analyses, comparisons and answers. Under its terms, it does not use this data to train its models and may retain it for up to 30 days to monitor for abuse, after which it is deleted.
- Google LLC, Firebase (United States): hosting, server functions, temporary storage of submitted documents during analysis, the database for accounts and token balances, anonymous authentication, push notifications and usage analytics.
- RevenueCat, Inc. (United States): manages subscriptions and in-app purchases, using your anonymous user ID and your App Store transaction records.
- Apple Inc.: App Store payments, Sign in with Apple (earlier versions), iCloud storage, push notifications, App Attest and Search Ads attribution, under Apple's own privacy policy.
On request, we will tell you the names of the specific providers that process your data. We do not sell or rent personal data, we do not show ads, and we do not share data with data brokers. We disclose data to authorities only when the law requires it.
International transfers
ShepherdStack LLC and our providers process data in the United States. Transfers of personal data from the EEA, UK and Switzerland rely on the European Commission's Standard Contractual Clauses (with the UK and Swiss addenda) or on the EU-US Data Privacy Framework where the provider is certified.
4. Analytics consent
If your device's region or your App Store country is in the European Economic Area, the United Kingdom or Switzerland, Pact collects no usage analytics until you agree. Pact asks once when you first open it, and you can change your choice at any time in Settings → Share usage analytics. Everywhere else, analytics are on by default and you can turn them off with the same setting.
The consent prompt appears in the latest version of the app. Earlier versions collect analytics by default; updating the app applies your choice.
5. How long we keep data
- Documents and analysis data on our servers: deleted automatically within 48 hours of the analysis, and usually as soon as it completes.
- Chat messages: passed through our servers to the AI provider without being stored by us.
- AI provider: up to 30 days for abuse monitoring, as described in section 3.
- Your device and iCloud: until you delete the analyses or chats, or delete your account.
- Account, token balance, purchase records, ad attribution, push tokens: until you delete your account. Push tokens that stop working are removed automatically.
- Usage analytics: up to 14 months, then deleted.
- Server logs: up to 30 days.
6. Your rights
Depending on where you live, including under the GDPR and UK GDPR, you have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting processing that happened before.
- Delete your account: Settings → Delete Account. This deletes your account, your token balance, your purchase and attribution records, any documents still on our servers, and the analyses and chats stored on your device and in iCloud. An active Pact Pro subscription is billed by Apple and must be cancelled separately in your Apple account settings. If your version of the app has no Delete Account option, email us and we will delete your data within 30 days.
- Analytics: Settings → Share usage analytics.
- AI processing permission: you can withdraw it in Settings. Pact will then ask again before it sends anything else.
- Everything else: email [email protected]. Because Pact has no usernames, we may ask for the user ID shown in the app so we can find your data. We reply within one month.
If you are in the EEA, UK or Switzerland, you can also complain to your local data protection authority.
7. Security
Data is encrypted in transit (HTTPS/TLS) and at rest on our providers' infrastructure. Server data is accessible only to the account it belongs to, enforced by database rules, and requests must come from a genuine copy of the app. No system is perfectly secure. Avoid submitting documents with personal data that the review does not need, such as identity numbers, bank details or signatures.
8. Children
Pact is not intended for anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has used Pact, email us and we will delete the data.
9. Changes to this policy
We will post any changes on this page with a new effective date. If a change materially affects how we use data you have already provided, we will tell you in the app before it takes effect.
10. Contact
ShepherdStack LLC
Email: [email protected]