Privacy
Your cards stay yours.
Surface is built local-first. Most of what you save lives only on your iPhone - and the small amount that reaches our servers is kept to the minimum we need to keep things working.
Last updated: May 7, 2026
The short version
- Your cards, schedules, attachments, and event history live on your iPhone by default. Nothing leaves your device unless you turn on cloud backup.
- Cloud backup uses Sign in with Apple or Sign in with Google, and stores your data in our infrastructure on your behalf.
- We don't sell your data, we don't use it for advertising, and we don't train models on it.
What lives on your device
By default, every card, attachment, schedule, and event is stored locally in the app's private container. Surface uses on-device intelligence to suggest schedules - your card content never leaves your phone for that to work.
What we collect when you opt in
If you sign in with Apple or Google to enable cloud backup, we store:
- An account record linking your sign-in to a Surface user ID.
- The cards, attachments, and schedules you choose to back up, encrypted in transit and at rest in object storage.
- Minimal device information needed to keep your data in sync.
You can disable backup at any time from the app's settings, and you can delete your account and all server-side data from the same place.
Feedback and support messages
When you write to us through the support page, we receive the message you typed and - if you provided one - your email address. We use the email only to reply, and we don't add it to a list.
What we don't collect
- No advertising identifiers.
- No third-party analytics SDKs in the iOS app.
- No location tracking.
- No card content from people who haven't enabled cloud backup.
Who helps run Surface
We use a small set of services to operate the app:
- Apple and Google for optional sign-in.
- Cloudflare for hosting our API and storing backed-up attachments.
- Apple Push Notification service for delivering local-app reminders.
Your rights
You can export, correct, or delete your data at any time. To delete everything from our servers, sign into the app and choose Delete account, or write to us at privacy@picktek.com.
Changes
If we make material changes to this policy, we'll let you know in the app before the changes take effect.
Contact
Questions about this policy? Write to privacy@picktek.com.
