Attention Privacy Policy
Attention ("the app") respects your privacy. This policy covers the app and the website attentioncard.com.
We collect as little as we can. The app has no accounts, no ads and no third-party analytics, and it doesn't track you across other apps or websites. Your library stays on your devices and in your own iCloud; the developer never receives your links, images or searches. The one exception is a list you choose to share, described below.
How links are processed. When you share a link into the app, it fetches that link directly from your device, reads its public metadata (title, preview image, site icon) and renders the card image on your device. For richer previews, some links are looked up through public endpoints:
- YouTube links: YouTube oEmbed (youtube.com)
- X (Twitter) links: FxTwitter public API (api.fxtwitter.com)
- Bilibili links: Bilibili public API (api.bilibili.com)
- Site icons: the site itself, and Google's favicon service (google.com/s2/favicons)
These requests contain only the link and are handled by those services under their own privacy policies.
Storage and iCloud sync. Links and images you save are kept in your library on your device, in storage shared by the app and its share extension. If you are signed in to iCloud, the library also syncs through your own iCloud private database, so the same items appear on your iPhone, iPad and Mac. That data is stored in your iCloud account under Apple's privacy policy; the developer has no access to it. You can delete items in the app at any time, which removes them from iCloud as well. Uninstalling the app removes the copy on that device.
Shared lists. When you share items as a list (the ones you select, or a tag's), the app uploads a copy of that list to attentioncard.com so that anyone with its link can view it as a web page: the list's title and, for each item, its title, site name, author, the cleaned link or the saved text, plus a small preview image for the first 20 items, and a picture of the list made from them that link previews show. Private items, archived items and images are never uploaded. The list's address is random and isn't listed anywhere or indexed by search engines, but anyone you send the link to can open it and pass it on. The upload is a snapshot: later changes to those items aren't sent. A shared list is kept until you take it down in Shared Lists, in the app's sidebar; it is then deleted from the server and its link stops working. The key that lets you revoke it is kept in your iCloud private database; the server stores only a hash of it. We may remove a shared list that is reported for illegal or abusive content.
The website and server. attentioncard.com is hosted on Cloudflare. When you visit the site, open a shared list or upload one, Cloudflare processes your IP address and request details to deliver the page, protect the service and limit abuse, for example by limiting the number of uploads from one address. Request logs are kept for a few days and used only to keep the service working. The site itself sets no cookies, runs no analytics and loads nothing from other sites. Links in a shared list open the original sites directly, without telling them which list they came from. When you paste a link into the card demo on the home page, the server fetches that page to read its preview; previews are cached for up to an hour and not kept otherwise.
Text in images. Text in saved images is recognized on the device so you can search it; it isn't uploaded.
Visual search model (optional). Searching images by description uses the MobileCLIP model, which isn't included in the app. If you choose to download it in Settings, the app fetches a model file (about 100 MB) from the developer's GitHub Releases (github.com). If github.com cannot be reached, it tries the public mirrors ghfast.top and mirror.ghproxy.com, which relay the same file and see only the download request, not your library. The file is verified against a known checksum before use. The model runs entirely on your device, and you can remove it in Settings.
Apple Intelligence. On devices where Apple Intelligence is enabled, asking the library a question in natural language and generating search keywords use Apple's on-device language model. Your questions and library contents are processed on the device and are not sent to the developer.
Camera and photos. The camera is used only to scan QR codes; frames are not saved or uploaded. Saving a card to Photos requires your permission. When you pick a photo to scan a QR code, the app can access only the photo you select.
Children. The app doesn't collect information from children.
Changes. Updates to this policy will be posted on this page.
Contact. Email support@attentioncard.com, or see the support page. Messages to support@ and report@attentioncard.com are stored privately on Cloudflare so the developer can read and answer them, and are deleted once they are no longer needed.