Last updated: September 1, 2026
Cantera has no account. There is no sign-up, nothing to log into, and no way for us to see what you write. Your notes are stored on your device and nothing you write ever leaves it.
Nothing you write. No note, title, tag, project, image or search term is ever transmitted. Cantera contains no advertising identifier and no ad network, and none of the data below is used for advertising or shared with a data broker.
Two pieces of third-party code do send something:
All three identify your install with a random identifier, not with you. There is no name, no email and no account to attach them to, because Cantera has none.
Titles, text, tags, projects, dates, images and the text recognised inside them stay on your device. If you turn on Cantera Pro's iCloud sync, they are stored in your own private iCloud database, which is governed by your Apple account and which we cannot read. If you turn on the Markdown folder, files are written to your own iCloud Drive.
The text inside your images is read on your device, by Apple's on-device Vision framework. The model that decides whether a note is a task, an idea or a reference ships inside the app and also runs on your device. No image and no note is ever uploaded for processing.
If your device supports Apple Intelligence and you use the optional writing features, that also runs on your device, under Apple's terms.
Cantera Pro is a one-time purchase, and the payment is handled entirely by Apple's App Store. We never see your payment details. RevenueCat keeps the record of that purchase against an anonymous identifier, so it can be restored on a new device; it is not linked to your name or email, and it is not used for advertising. Their privacy policy is at revenuecat.com/privacy.
Cantera asks for camera access only when you choose to capture something with it, photo library access only when you choose to attach an image, and Face ID / Touch ID only if you enable the app lock. You can revoke any of these in iOS Settings, and the rest of the app keeps working.
Firebase is operated by Google (firebase.google.com/support/privacy) and RevenueCat by RevenueCat, Inc. (revenuecat.com/privacy). Neither receives anything you write.
Cantera is not directed to children under 13 and does not knowingly collect personal data from children. It collects no personal data from anyone: the purchase record is tied to an anonymous identifier, not to a person.
If this policy ever changes, the date above changes with it. Any change that would involve collecting data would also require a new version of the app, reviewed by Apple.
Privacy questions? Email soporte@linkr.lat.