Rapport
Rapport is a personal CRM app that helps you keep track of the people in your professional network. This policy explains what information Rapport holds, where it goes, and what you can do about it.
Rapport is operated by Gajaan Sugumar, an individual based in the United Kingdom, acting as the data controller for the purposes of UK GDPR.
You can reach me at privacy@rapportapp.uk about anything in this policy.
When you create an account, Rapport stores:
Rapport does not collect analytics, does not track your behaviour in the app, and does not contain advertising.
This is the part that deserves your attention. Rapport is a tool for storing information about other people, and those people have not agreed to anything.
For each contact you add, Rapport stores whatever you choose to enter: their name, company, role, sector, area of expertise, LinkedIn address, where and how you met, your notes about your conversations, when you last spoke, and how often you want to be reminded to get in touch.
If you use Rapport, you are responsible for what you put in it. Only record information you have a legitimate reason to hold, keep it accurate, and treat it as you would expect someone to treat notes about you.
Rapport has four features that use artificial intelligence: cleaning up notes, drafting follow-up messages, preparing questions before a conversation, and looking up public information about someone you are adding.
When you use one of these, the relevant text is sent from Rapport's servers to the Anthropic API for processing, and the result is sent back to you. This means your notes and your contacts' details leave Rapport's own infrastructure when you use these features.
Anthropic processes this text to generate the response and, under its commercial terms, does not use it to train its models. The public information lookup also performs a web search using the name and company you entered.
These features only run when you actively trigger them. Rapport does not send anything to the AI in the background.
Rapport's data is held in Supabase, hosted in the West Europe (London) region. Access is restricted per user at the database level, so no user can read another user's records.
Some information stays on your device only and is never sent to Rapport's servers: calendar events you add through Rapport go into your device's own calendar, reminder notifications are scheduled locally on your phone, and spreadsheet exports are generated on your device.
When you use an AI feature, the text involved is transmitted to Anthropic, which may process it outside the UK. This transfer relies on appropriate safeguards under UK data protection law.
Your data is not sold, and it is not shared with anyone for advertising or marketing. It is shared only with the services needed to run the app:
Information may also be disclosed where the law requires it.
Your data is kept for as long as your account exists. Inactive accounts are not deleted, so your information will still be there if you come back after a long gap.
You can delete your account at any time from the Settings screen in the app. This permanently removes your account and every contact, note, and record associated with it. It cannot be undone.
Under UK GDPR you have the right to access the information held about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to receive a copy in a portable format.
Rapport's export feature gives you an immediate copy of your contacts as a spreadsheet, and the delete account feature gives you immediate deletion. For anything else, email privacy@rapportapp.uk and I will respond within one month.
If you are unhappy with how your information has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.
You may be reading this because you have found out that someone stores notes about you in this app.
Contact privacy@rapportapp.uk and your request will be assessed individually. There is a genuine limitation to be honest about: Rapport's data is private to each user and is not searchable by name across accounts, so identifying every record about a particular person is not always possible. Where a request can be acted on, it will be, and you will receive a response within one month either way.
Rapport is not intended for anyone under 16, and accounts should not be created by children.
If this policy changes, the updated version will appear on this page with a new date at the top. Significant changes will be communicated in the app.
Questions about privacy: privacy@rapportapp.uk
Everything else: support@rapportapp.uk