Privacy Policy

Last updated: June 10, 2026

1. Introduction

This Privacy Policy applies to the CoLibri app, listed on the App Store as “CoLibri: Contacts Library” (the “Application”), created by Bohdan Varchenko (the “Service Provider”).

CoLibri is a privacy-focused, offline-first contacts app. It runs on your device and does not require user accounts, analytics, tracking, advertising, or cloud sync.

2. Our Approach to Your Data

The Application processes your data only on your device and only to provide its features.

The Service Provider does not operate servers for user contact data and does not collect, transmit, sell, or share your personal information. The Service Provider has no access to your contacts, photos, notes, tags, business-card scans, or any other content you manage in the Application.

3. Permissions and On-Device Processing

The Application requests only the permissions needed to provide its features. The processing described below happens locally on your device.

3.1 Contacts

The Application uses contacts access to display your contacts and let you organize, tag, edit, add, import, and export them.

With your permission, the Application may also save changes back to your device’s system contacts, such as edits, new contacts, imported contacts, or selected contact photos.

Contact data is processed locally and is not uploaded to the Service Provider or shared with third parties.

3.2 Camera

The Application may use the camera to take a photo for a contact picture or to scan a business card.

Business-card text and QR codes are recognized on your device. Card images and recognized data are not uploaded to the Service Provider or sent to any external server by the Application.

If you choose to use a camera image as a contact photo, it may be saved locally in the Application or to your device’s system contacts.

3.3 Photo Library

The Application may use your photo library to let you choose an existing image as a contact picture or select a business-card image to scan.

Selected images are processed locally. The Application does not collect, store remotely, or transmit them.

If you choose to use an image as a contact photo, it may be saved locally in the Application or to your device’s system contacts.

3.4 Files: vCard Import and Export

When you choose to import or export contacts, the Application reads or writes vCard (.vcf) files at the location you select.

These files are handled locally on your device. The Service Provider does not receive or access them.

4. Local Storage and Security

The Application stores app-specific data locally on your device, such as contacts managed inside the app, tags, favorites, links, notes, and business-card data.

The Application’s local database is encrypted using SQLCipher. The encryption key is generated on your device and stored using platform secure storage, such as iOS Keychain or Android Keystore-backed encrypted storage.

The Application may also provide an optional screen-capture protection feature that helps block screenshots and screen recording while using the Application.

The Application does not provide cloud sync, does not create user accounts, and does not upload your contact database to the Service Provider.

5. Opening Other Apps

When you choose to call, message, email, or open a social or messaging app, the Application hands the action off to the relevant app, service, or browser.

This may include apps such as Phone, SMS, Mail, Telegram, WhatsApp, Signal, Viber, Facebook, Instagram, or X. Those third-party apps and services are governed by their own privacy policies.

The Application passes only the information needed to start the action, such as a phone number, email address, username, link, or address.

6. Purchases and Payments

The Application is currently offered as a paid app and does not include subscriptions.

Purchases are handled by the platform app store, such as the Apple App Store or Google Play. The Service Provider does not process or store your payment card details, billing address, or payment credentials.

The platform app store may provide the Service Provider with limited purchase, sales, or transaction reporting as part of its developer services. This does not include your payment card details.

If subscriptions or in-app purchases are added in the future, this Privacy Policy will be updated as needed.

7. Data Retention and Deletion

The Application’s app-specific local data remains on your device until you delete it or uninstall the Application.

Deleting items inside the Application removes them from the Application’s local storage.

If you choose to save changes to your device’s system contacts, those changes may remain in your system contacts even after uninstalling the Application.

Uninstalling the Application removes app-specific local data stored by the Application, except for data stored outside the Application, such as system contacts, exported vCard files, or data retained by the operating system or platform services.

vCard files you export remain in the location where you saved them and stay under your control.

8. Children’s Privacy

The Application does not require account creation and does not collect personal data on the Service Provider’s servers.

The Service Provider does not knowingly collect personally identifiable information from children under the age of 13, or the applicable age in your jurisdiction.

9. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time.

Changes take effect when they are posted on this page. You are encouraged to review this Privacy Policy periodically.

10. Contact Us

If you have any questions or suggestions about this Privacy Policy, you can contact the Service Provider at:

bodya.var@gmail.com