Privacy policy

SharePal is an app published by Illumineering SAS, a company registered in France, which acts as the data controller for the processing described below. SharePal is a paid app, bought once on the App Store, with no subscription and no in-app purchase.

This policy explains what the app and this website collect, why, on what legal basis, how long it is kept, and what you can ask us to do about it. Terms used here have the meaning given in our Terms of service.

What you save stays yours

SharePal holds the small things you retype too often: an IBAN, a door code, an address, a link you always send.

We never receive any of it. Your items are stored on your device and synchronised through your own iCloud account. They travel between Apple’s servers and your devices; they do not pass through ours, and we have no copy and no way to read them.

This applies to every part of the app:

• The SharePal keyboard inserts the items you saved into whatever app you are typing in. It exists to paste your own text — it does not record what you type elsewhere, and nothing you type in another app is sent to us.
• The Share Sheet extension only receives what you deliberately send to it.
• Widgets and search read the same local data.

What we do collect

None of this is linked to your name, your saved items or your Apple Account. SharePal has no account and no sign-up.

Crash reports

When the app crashes, it writes a diagnostic file on your device recording what the app was doing at the moment it stopped: the app and iOS version, the device model, the time, and the technical state of the running code. The next time you open SharePal, that file is sent to a server we operate in France and removed from your device. This happens automatically, without asking you.

The file contains none of your saved items and no contact details. As with any upload, our server sees the IP address the report came from; we do not use it to identify you.

Service providers used by the app

TelemetryDeck processes data in Germany. Crash reports pass through no provider at all: they go to a server we run ourselves in France. Nothing about the app involves a transfer outside the European Union.

This website

Analytics. This site runs a self-hosted Matomo instance operated on our behalf. Statistics stay on that server and are not sent to Matomo’s company or to any other analytics provider. Matomo is configured without cookies: it stores nothing on your device, sets no identifier, and cannot follow you across sites. Visitor IP addresses are anonymised before storage, and records are kept for 13 months.

This site sets no cookies of its own and asks for no consent because, configured this way, none is required.

The support form. If you write to us through the form on our support page, we receive your message, the subject you picked, and your email address if you chose to give one. We use it only to answer you. The form is protected against spam by Cloudflare Turnstile, which checks that you are a real visitor and processes your IP address and basic browser signals to do so; it sets no tracking cookie.

Your message is delivered to our mailbox, hosted by our email provider MXroute on servers in the United States. That transfer relies on Standard Contractual Clauses. We keep support messages for as long as it takes to resolve your request and for up to 12 months afterwards, so we can follow up if the problem returns.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in answering the people who contact us.

Security

Your saved items are held on your device and in your own iCloud, so their protection does not depend on us. For the limited data we do hold, we use commercially reasonable measures including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Links to other sites

The app and this site link to services we do not operate. We are not responsible for their content or their privacy practices, and we encourage you to read their policies.

Children

SharePal is rated 4+. It has no account, no advertising, no profiling and no social features, and it collects nothing that identifies a user of any age.

We do not knowingly collect personal data from children. In the European Union, where consent is the basis for an online service, the relevant age is 15 in France. If you are a parent or guardian and believe a child has provided us with personal data, contact us and we will delete it.

Your rights

Under the GDPR you may ask us to give you access to your data, correct it, erase it, restrict or object to how we use it, or provide it in a portable form. Where we rely on legitimate interest — crash reports, usage analytics, answering support messages — you can object at any time and we will stop unless we have compelling grounds not to.

Your saved items are a special case: because they live on your device and in your iCloud and never reach us, we cannot produce, change or delete them for you. You control them entirely from the app, and deleting the app together with its iCloud data removes them.

Write to us through the support page. We answer within one month. If you are not satisfied, you may lodge a complaint with the French supervisory authority, the CNIL, or with the authority in your country of residence.

Changes to this policy

We may update this policy from time to time and will post the new version on this page, with the date below.

This policy is effective as of August 14, 2026.

Contact us

Illumineering SAS, France. Questions about this policy or about your data: use our support page.