Super Simple Contacts Back to product

Dialect Agency Inc.

Privacy Policy

Your address book is deeply personal. Super Simple Contacts is designed to keep contact content under your control, process it on your devices, and communicate directly with the providers and on-device integrations described below.

Effective July 16, 2026

1. Overview

Dialect Agency Inc. does not sell contact data, use contact data for advertising, or include advertising, tracking, analytics, crash-reporting, or telemetry SDKs in Super Simple Contacts.

This policy explains how Super Simple Contacts for Mac, iPhone, and iPad, its optional Raycast and Alfred integrations, and this website handle information. “We,” “us,” and “our” refer to Dialect Agency Inc.

2. Contact data in the app

Contact cards, groups, notes, photos, phone numbers, email addresses, postal addresses, relationships, and other contact fields are processed and indexed on your devices. The local database and search index support fast search, offline access, editing, duplicate review, imports, exports, recovery, and printing.

We do not operate a server that receives or stores your contact database. Connected providers may refresh directly from your device while the app is active.

Apple Contacts

If you grant access, the app reads and writes Apple Contacts through Apple’s Contacts framework. You control Contacts permission in system settings.

Imports and exports

Files you import remain under your control. Files you export are saved to a destination you select. Once exported, those files are governed by the storage location and sharing choices you make.

3. Google and Microsoft accounts

When you connect a Google or Microsoft account, authorization and sync requests go directly from your device to the provider you selected. We do not operate a proxy for those requests.

  • Google contacts use the Google People API.
  • Microsoft personal and work contacts use Microsoft Graph.
  • Persistent OAuth credentials are stored in the system Keychain.
  • Connected accounts refresh while the app is active, saved edits sync automatically by default, and optional review or local-only policies are available per account.

Google sign-in uses the provider’s standard native-app loopback flow. The provider pages and token exchange use HTTPS. At the end of sign-in, your browser returns a short-lived authorization response over unencrypted HTTP to a temporary listener bound only to 127.0.0.1:47632 on your Mac. The listener closes when sign-in finishes or is canceled and is not reachable from another device.

Your use of a connected account is also subject to that provider’s privacy policy and account controls. You can revoke access through the provider and remove the connection from the app.

Google user data

Data accessed. If you choose to connect Google Contacts, Super Simple Contacts requests your Google account identifier and email address so it can identify the connected account. Through the Google People API, it accesses only the contact information needed for the app’s visible contact-management features: names, nicknames, email addresses, phone numbers, organizations, departments, job titles, postal addresses, birthdays, notes, important dates, URLs, relationships, instant-messaging identifiers, contact photos, contact-group names and memberships, Google contact identifiers, change metadata, and synchronization tokens. The app does not request access to Gmail, Google Drive, Google Calendar, or unrelated Google services.

How data is used. Google user data is used only to provide or improve user-facing features that you choose to use: displaying and searching your contacts, editing contact cards, organizing contacts and groups, finding possible duplicates, importing and exporting contacts, maintaining an offline index, serving optional on-device Alfred and Raycast searches, refreshing changes from Google, and sending your saved creates, edits, group changes, photo changes, or deletions back to your Google account under the sync policy you select. Super Simple Contacts does not create or use aggregated, anonymized, or derived datasets from Google user data.

Storage and protection. Durable contact records and synchronization metadata are stored in the app’s sandboxed local database and search index on your devices. The database is not separately encrypted by Super Simple Contacts; it relies on Apple’s App Sandbox and the device and file-protection features configured on your Apple device. Provider-hosted contact photos displayed through Apple’s system image components may be temporarily cached inside the app sandbox to speed repeat display. Authenticated provider requests and responses are handled by a shared, ephemeral networking session that does not use a URL cache.

Persistent OAuth access and refresh tokens are stored in Apple’s system Keychain and may synchronize through iCloud Keychain according to your Apple Account settings. Provider communication is encrypted in transit using HTTPS and goes directly between the app and Google. We do not operate a server that receives or stores Google contact data, and Google contact records are not copied into the app’s private CloudKit metadata database.

Sharing and transfer. We do not sell Google user data or share it with advertisers, data brokers, analytics providers, or other third parties. We do not use Google user data for advertising, credit or lending decisions, surveillance, or training generalized or personalized artificial-intelligence or machine-learning models. Data is sent back to Google when the app performs the synchronization you request. Other intended transfers occur when you direct a visible feature, such as exporting contacts, approving a transfer to another account, or invoking an optional Alfred or Raycast integration that you have paired with the app. The paired integration receives matching contact fields locally on your Mac, as described in Section 6.

Retention and deletion. Cached Google contacts, groups, account details, synchronization metadata, recently deleted records, and related local linking decisions remain on your devices while the Google account is connected. Choosing Disconnect removes those items, queued changes, synchronization state, the local account record, locally cached provider responses and photos, and the OAuth token from the app. The app also requests deletion of that connected-account metadata and related linking decisions from its private iCloud metadata stores. Deleting the app removes its sandboxed local database from that device. You can also revoke Super Simple Contacts from your Google Account controls. Records stored by Google remain governed by your Google account and are changed or deleted when you save an edit under automatic sync or approve it under the optional review policy.

Super Simple Contacts’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Private iCloud metadata

Super Simple Contacts may use your private CloudKit database and iCloud key-value storage to synchronize app-owned metadata across your devices. This metadata includes smart groups, contact-linking decisions, and connected-account descriptors such as provider, provider account identifier, display name, email address, and a label you assign. Contact cards, provider credentials, and provider synchronization tokens are not copied into these iCloud metadata stores.

This metadata is associated with your iCloud account and handled through Apple’s infrastructure, encryption, retention, and account controls. CloudKit records are stored in your private database, not a public database.

5. Subscriptions and purchases

Purchases, the 14-day free trial, subscription status, billing, renewal, cancellation, and refunds are handled through Apple and your Apple Account. We do not operate a payment server or receive your complete payment-card information.

Apple may provide transaction status needed for the app to unlock subscription access. Apple’s own privacy terms govern its handling of purchase information.

6. Raycast and Alfred integrations

The optional Mac integrations search the app’s existing on-device index through a versioned, read-only service while Super Simple Contacts is running. Neither integration reads the app’s database directly, maintains another contact database, or receives provider credentials.

The service binds only to 127.0.0.1, so it is not reachable from other devices or the internet. It returns search results and requested contact details over unencrypted HTTP on the Mac’s loopback interface and exposes no account or contact mutation endpoint.

The app generates separate 256-bit access keys for Alfred and Raycast, stores them in this Mac’s system Keychain, and checks them in memory on every contact request. You pair an integration by copying its matching key from the app into that integration’s configuration. Raycast stores its key as an encrypted extension preference; Alfred stores its key in the workflow configuration. Other local software without a valid key cannot query contact data through the service. Software that can read an integration’s configuration, or observe the key while you copy it, may be able to use that key. You can regenerate both keys in the app’s settings, and quitting Super Simple Contacts stops the service.

7. This website

This website does not use advertising cookies, tracking pixels, behavioral analytics, or contact forms. It is hosted by Vercel, which may process routine technical request data such as IP addresses, browser headers, and security logs to deliver and protect the site. Vercel handles that information under its Privacy Notice.

8. Retention and your control

Local app data remains on your devices until you remove it, delete the app and its data, or use the relevant system controls. Provider records remain subject to your Apple, Google, or Microsoft account settings. Private iCloud metadata remains subject to your iCloud controls.

You can disconnect providers, revoke their authorization, manage Apple Contacts permission, delete exported files, and manage your Apple subscription from the corresponding account or system settings.

9. Security and children

We use platform security features such as the system Keychain, App Sandbox, Apple device and file protection, private CloudKit databases, and encrypted HTTPS provider connections. The temporary Google sign-in callback and the launcher integration use the unencrypted, device-only loopback connections described above. No method of storage or transmission can be guaranteed to be completely secure.

Super Simple Contacts is a general productivity tool and is not directed to children under 13. We do not knowingly collect children’s personal information through a developer-operated service.

10. Changes to this policy

We may update this policy when the product, law, or our practices change. We will post the revised policy here and change the effective date. Material changes will be communicated through an appropriate product or website notice when required.

11. Contact

For privacy questions or requests, contact privacy@supersimplecontacts.com.

Dialect Agency Inc.