Privacy Policy

Save This, Restaurant Tracker & Groupistry · ABC-Astro Media
Effective date: October 10, 2026

At a glance: These are private, primarily on-device apps. They have no developer-operated account, app-content server, advertising, developer-run behavioral analytics, or social feed. ABC-Astro Media does not automatically receive your saved entries, restaurant records, media, Groupistry groups and items, medication details, dose logs, scanned images, or recognized text. Information may reach a third party when you use an operating-system service, make a purchase, share or export content, add a calendar reminder, or email support.

Information you choose to send us

If you contact support, we receive the email address and information you send, including any attachments. Our email provider processes and stores that correspondence for us so we can respond and maintain support records. Please remove private app content from screenshots or attachments unless needed to resolve your request.

Purchases and platform services

Apple App Store or Google Play handles payment details, purchase account information, taxes, and refunds. The apps check purchase status to unlock paid features; the stores may separately provide us purchase and sales reporting. Camera, photo library, voice recognition, text recognition, notifications, geocoding, device calendars, operating-system backups, and share destinations may be provided by Apple, Google, your device maker, or a service you selected. Their own policies and settings govern those services. We do not use your app content for advertising.

Storage, retention, and deletion

Entries, media, settings, and in-app backups are stored locally until you delete them, replace them through restore, clear app data where supported, or uninstall the app. Delete All removes app records after confirmation; it does not remove copies already saved to other locations, separately saved backups, calendar events held by your provider, or messages sent to support. A device or cloud backup controlled by your operating system may retain a copy under your device settings. To remove exported or shared copies, delete them from the destination yourself. We have no app account or app-content server from which to delete your records. For support correspondence, email us with a deletion request.

Save This

Data handled on the device

Saved entries, links, notes, folders, Priority selections, reminders, media, searches, settings, backup and export files, calendar-event links, purchase entitlement, and App Lock settings are handled on your device. Dictation may involve the device's speech service. Calendar entries exist with the calendar provider you choose if you add them.

Permissions and media metadata

  • Camera, photos, and media access are requested when you capture, choose, save, or share media.
  • Microphone and speech recognition are used when you start voice input or record video with audio.
  • Notification permission and applicable Android alarm scheduling support reminders.
  • Calendar access is used for a reminder you choose to add and to check its linked event; calendar access and sync depend on your platform and provider.
  • Device authentication or biometric access may be used for App Lock. The app does not receive biometric templates.

Save This does not request your current location. Photos saved in the app are processed to remove metadata, including photo GPS coordinates. Videos can retain source or camera metadata, including location if it was present.

Local database protection

On Android, the local database is automatically encrypted with SQLCipher. The app generates a database key and stores only a wrapped form protected by Android Keystore; App Lock and backup-encryption settings do not turn this database encryption on or off. On iPhone and iPad, Save This uses Apple's operating-system Data Protection for its SQLite database directory and files, rather than SQLCipher. The protection class makes the database available after the first device unlock following a restart and can keep it available when the device locks again. Keep a device passcode enabled. This protection is not a separately password-encrypted database that remains inaccessible whenever the screen locks.

App protection and copies outside the app

App Lock protects access in the app. Automatic database protection, App Lock, and optional backup/export password protection serve different purposes. Local backups can optionally be encrypted with a four-digit code. Portable restore files and whole-data document exports offer optional password protection using a password of at least eight characters; when that option is off, they are not password-encrypted by the app. The app does not automatically encrypt individual items sent through a device share sheet, every document export, or files after you save them to a separate destination. Keep your backup password secure; we cannot recover it.

Restaurant Tracker

Data handled on the device

Restaurant names and addresses, categories, ratings, visit dates, dish choices, favorites, notes, wait times, photos, videos, searches, settings, backups, exports, and purchase entitlement are handled locally.

Permissions, location, and media metadata

  • Camera, photos, and media access are requested when you capture, choose, save, or share media.
  • Microphone and speech recognition are used after you start voice entry or record a video with audio. Recognized text may be saved in a field; dictated audio is not saved as a separate voice recording.
  • Location is requested when you tap Use current location on the address form. The device geocoder suggests address text; the app does not run background location tracking or save coordinates as part of a restaurant record.

The address you review can be saved in the restaurant record. Photos added to the app are processed to remove photo metadata, including GPS coordinates. Videos can retain source metadata. Restaurant Tracker does not provide a built-in app lock or encrypted document exports; protect exported and shared files using the destination's security settings.

Groupistry

Information handled locally and why

Groupistry handles group names, templates, custom fields and formatting, items and field values, photos and document attachments, search and filter settings, saved views, favorites, archive state, reminder rules and times, notification actions, backups, imports, exports, App Lock settings, spreadsheet-template and import data, bill and creditor details, payment schedules and history, security settings, and purchase entitlement on your device to provide the organizer features you choose. The local database is encrypted. Groupistry does not require an app account, operate a server holding your groups, or automatically synchronize your records with ABC-Astro Media.

Medication and other sensitive information

If you choose the Medication template or enter health information in any field, local records can include medication names, strength, dose, route, instructions, schedule and dates, prescription numbers, prescriber and pharmacy details, supply and refill information, costs, notes, and prescription-label photos. The app also handles reminder responses, confirmed dose times, skipped or unconfirmed occurrences, snooze choices, history corrections, and calculated next-reminder or supply values. It uses those details for the schedules, logs, supply estimates, and refill alerts you configure. ABC-Astro Media does not automatically receive this health information or use it for advertising, profiling, or AI training.

Health-related records can identify you or another person and deserve particular care. Store or share someone else's records only with appropriate permission. Review notification previews, spoken prompts, attachments, exported schedules and dose histories, and calendar titles before exposing them to another app or person. Groupistry does not automatically connect to your clinician, pharmacy, insurer, medical record system, Apple Health, or Health Connect.

Bills, creditors, and financial information

If you use Bills & Creditors or enter financial information in custom fields, local records can include bill and creditor names, contact details, account references, amounts and currencies, balances, statement and due dates, recurring rules, payment methods, autopay selections, receipt or statement attachments, notes, partial payments, payment-history corrections, and calculated remaining amounts or statuses. Groupistry uses these records to display the information, reminders, history, and calculations you choose. Recording a payment does not execute it, and an autopay selection is not confirmation from a bank or creditor. ABC-Astro Media does not automatically receive these records or use them for advertising or profiling.

Statements, receipts, account references, and financial exports can contain sensitive personal information. Enter only information you need, review notification previews and exports, and remove unnecessary details from support messages. A share destination, file provider, or calendar copy you select can disclose information outside the app.

App Lock and device authentication

App Lock is optional, off by default, and available in Free and Pro. When enabled, it uses your operating system's supported device authentication, such as biometrics or a device PIN, passcode, or password, to control access to Groupistry. Authentication is also required before disabling it. The app stores the lock preference; it does not receive or store your biometric templates or device-authentication secret. The app relocks after opening, backgrounding, and external handoffs while preserving drafts and returned results behind the lock for review after authentication. The recent-app preview is obscured while the lock is enabled. App Lock does not erase or encrypt copies already shared and does not control lock-screen notification previews.

Voice processing and retention

When you start Voice, microphone audio is processed through the supported on-device recognition workflow to create editable text. Supported offline text-to-speech can speak prompts using your chosen local voice setting. Guided setup locally handles your group name, tracking purpose, proposed templates, field types, dropdown choices, units, ranges, and clarification examples across multiple turns. You can review or customize the proposal; creation waits for your explicit readiness. There is no external AI or cloud speech-recognition fallback in Groupistry's Create with Voice workflow. The app saves the text and values you explicitly confirm; it does not retain a separate audio recording of that voice session. Canceling an unconfirmed voice workflow does not save its proposed record. Offline speech availability depends on your device, language, and installed resources. Downloads or settings changes you initiate in your operating system are governed by that platform's policies.

Scan to Text processing and retention

On Android, Scan to Text accesses a picture you capture with the in-app camera or explicitly select, and recognizes text on the device for outlined-word selection, zoom and pan, accessible list selection, editable review, and explicit insertion. The bundled offline OCR workflow does not send scan image content or recognized text to an ABC-Astro Media server or external AI service, send OCR telemetry, or download a recognition model at runtime. On iPhone and iPad, text recognition uses supported Live Text controls supplied by the operating system. Temporary Android scan files are cleaned up after the workflow and are not attached to the record by default. Text you insert and save becomes part of the item’s normal local data and may be included in later backups or exports. A scan-only camera capture is not saved to your gallery by default. Selected source pictures remain with their original photo-library or file provider; separately attached images remain attachments until removed, subject to backups and exported copies.

Permissions and optional services

  • Microphone and speech recognition: Used when you start Voice. You can decline access and use typed entry instead.
  • Camera and selected photos: Used when you capture a picture with the in-app camera or select a picture for Android Scan to Text, or capture or select a photo for an attachment. Photo-picker access depends on your platform; scanning does not require location permission.
  • Files: System pickers and file providers handle documents, imports, exports, and portable backups you choose. A cloud-backed destination may upload those files according to its settings.
  • Notifications and alarm scheduling: Used for reminders, medication and refill alerts, bill due or overdue reminders, and supported louder alerts. Notification text may appear on your lock screen; review system preview settings. Android supports Standard and optional Alarm-style medication sounds, with an explicit choice to ring on Silent or Do Not Disturb using the device’s alarm settings. On-time alarm scheduling depends on applicable system permission. iOS uses ordinary notification sounds.
  • Calendar: Used when you choose to create a separate calendar copy, including fixed medication doses for a selected date range. You choose whether to include medication details; the selected event details are passed to the calendar you choose; this is not ongoing calendar synchronization or access to unrelated events. Review and explicitly save the proposed event or events in the calendar editor. Opening the editor is not proof that a calendar copy was saved. Platform permissions and calendar-provider settings govern the copy.
  • Purchases: Store services validate the Pro entitlement. Apple or Google processes account, payment, transaction, and applicable technical information under its own policies; Groupistry does not receive your full payment-card details.

Camera and microphone hardware are declared optional; a device without the relevant capability can use typed organization while the related capture or voice feature is unavailable. You can change permissions in your device settings. Disabling a permission can make its related feature unavailable without preventing ordinary typed organization. Voice and Scan to Text do not require current location or a contact-book upload. Photos and documents can contain metadata and sensitive information; do not assume Groupistry strips all attachment metadata.

Sharing, calendar copies, and third-party processing

You control exports, file destinations, shares, and support messages. Recipients and providers may store, process, or further share content under their own policies. A medication schedule or dose-history export can reveal health information, and bill or payment-history exports can reveal financial information; use an appropriate destination and the available protection options. A calendar copy can include a dose or refill time and, if you choose to include them, medication details you accept in the event editor. Calendar providers may synchronize it outside the device or expose it to shared-calendar members. Later changes or deletion in Groupistry do not update or erase that copy.

Groupistry does not add advertising or developer-operated behavioral tracking. Operating-system services and app-store components can process service, purchase, or diagnostic information under their own settings and policies. The Android Scan to Text workflow processes content locally without OCR telemetry. Any operating-system or store diagnostics are separate from this workflow and governed by those providers' settings and policies.

Local storage measurement and platform privacy declarations

The storage display measures included local file sizes on your device, including database and supporting files, retained backups, caches, temporary files, and Android OCR data. Measurement and its refresh timestamp are used for the local storage display; they are not uploaded to an ABC-Astro Media server. Groupistry shows one measured total, including with no groups, rather than estimated allocations to groups, Archive, or Trash. The iOS app includes an app-level privacy manifest describing applicable platform API and data-use declarations.

Spreadsheet imports and export filenames

CSV and XLSX templates reflect your group's field headings, choices, and formatting. Import previews, field mappings, validation, and duplicate checks are handled in the app; a file you open, edit, or save in a separate spreadsheet app or cloud file provider follows that service's policies. Worksheet/header selections, field mappings, and previews let you review a spreadsheet before import; previewing or canceling writes no records. An add-only import does not replace existing records. Medication JSON import can restore schedules, refill settings, and history without replaying doses or deducting supply again; imported reminders require explicit opt-in. Bill exports, imports, and backups can include payment history and reminder settings. Ordinary and Protected exports can use the sanitized group name in their outer filename, or All_groups for an all-groups export. A protected file's outer filename is visible without its password; rename it before sharing if the group name reveals private information.

Backups, retention, deletion, and security limits

Local records, attachments, reminder settings, medication logs, bill and payment histories, and app settings remain until you delete them, replace them through a confirmed restore, or remove the app's storage. Canceling or deleting a reminder in the app does not erase past dose-history records or copies held elsewhere. Archiving retains the archived group's data; starting a fresh group copies only its structure and settings and does not delete the archive. Permanent deletion of an individual item through Trash requires a confirmation that names it. It removes the item’s associated data and reminders while retaining attachments still referenced elsewhere. It does not purge copies in old backups or external destinations. Encrypted backups are separate snapshots protected by their passphrase; deleting current records does not rewrite those snapshots. Delete unwanted backups with the available controls, and delete exported files, original images, calendar events, shared copies, and operating-system backups from their respective destinations. Uninstalling or clearing storage can remove locally held records and local backups.

Protect your device, backup passphrase, and any exported-file password. We cannot recover a forgotten backup passphrase or retrieve your local app content from a developer server. Local database encryption does not imply encryption of every attachment, share-sheet payload, document export, calendar event, or lock-screen preview. Files outside the app follow the destination's security settings. No security measure guarantees absolute protection.

Children

These general-audience apps are not directed to children under 13. We do not knowingly collect children's app records through a developer-operated service. If someone sends us a support message, it is handled as described above.

Changes and contact

We may update this policy as the apps or applicable requirements change. We will change the effective date when we publish a revision. For privacy questions or support-data deletion requests, email [email protected].