Updated 12 October 2026

Privacy

Attracco keeps your files, photos, passwords and conversations on your iPhone. Data leaves it only where you send it: a site you open, a computer you connect to, the AI company you choose for the Assistant. Anonymous counts of which features are used go out too, and you can turn them off. This page says what goes where.

Who Is Responsible

Attracco is made by Endcode s.r.l., Via Gian Antonio Boltraffio, 7, 20159 Milan (MI), Italy, VAT IT10560900960. Endcode is responsible for the data this page describes. For any question about your data, write through the contact page.

In the App

What stays on your iPhone

• Your files, and the folders you add from the iPhone.
• Your photo library and calendars. Attracco reads them only to show them in the Gallery and Calendar, after iOS asks you.
• The Browser’s history, favorites, downloads, and the data sites keep in it.
• Passwords for computers and servers, SSH keys, the Assistant’s API keys and your signature. They are kept in the iPhone’s Keychain, on this device only.
• The Assistant’s conversations, and the list of requests of the last 30 days that Settings shows.

Attracco has no account to make and no server of its own that receives any of this.

Anonymous usage counts

Attracco counts which features are used, to learn what to improve. A count says, for example, that the app opened, a display connected, an app’s window opened, the Assistant was set up or asked something, or an SSH computer or a server connected. Each count carries the iOS version, the language and region, the app’s version, the kind of device, and a number that lasts one session.

A count never carries what you type, open, browse or ask, a name, or anything that identifies you beyond the session.

The counts go to Aptabase, in the European Union, which handles them for Endcode. Like any server, it receives your network address with each request. The legal basis is Endcode’s legitimate interest in improving Attracco.

Counting is on at first. Turn it off with Share Anonymous Analytics in Settings on the iPhone.

The Assistant

The Assistant, part of Attracco Pro, works with the AI company you choose: OpenAI, Anthropic or xAI, with your own API key. When you ask it something, Attracco sends your request straight from your iPhone to that company. The request holds what the Assistant needs to answer: your words, the pictures and files you attach, and what you allow it to read, such as a page’s text, a file or a picture of the display.

Before anything is sent, Attracco asks you to allow sharing with that company, and keeps the date you did. After that, it asks again before it sees or changes each kind of thing, and every time before it deletes. Endcode never receives your requests or the answers.

That company handles them under its own terms, as your provider: OpenAI, Anthropic, xAI. The legal basis is your consent, given in the Assistant’s setup. Stop at any time with Remove Key in Settings › Assistant.

Sites, computers and servers

• Pages in the Browser load straight from their sites, which handle your data under their own policies.
• SSH, Remote Screen and servers in Files connect straight to the computers you choose. Looking for computers on your network happens on your network only, after iOS asks you.

Calls

When the iPhone rings, Attracco learns only that a call started or ended, so it can show a banner and pause video. It never learns who is calling.

Purchases

Apple takes the payment for Attracco Pro. From the App Store, Attracco learns only which plan is active and when it renews or ends. It never sees your payment details.

Diagnostics and support

Export Diagnostics makes a file on your iPhone. You can review what’s in it first, and replace names with tokens. It goes nowhere unless you send it. If you write to Endcode, with Contact Support in the app or the contact page, Endcode keeps your message and what you attach only as long as it needs them to help you. The Contact Form says how a message from the site travels.

Deleting your data

Delete All Data in Settings on the iPhone erases what Attracco keeps: its settings, history, website data, saved passwords and keys, conversations and windows. Your own files go too only if you choose that. Deleting the app erases the same things.

The anonymous counts can’t be traced back to you, so there is nothing to find and delete.

This Website

The website measures visits with Google Analytics 4, using Google’s Consent Mode. Google’s tag loads on every visit, and a banner asks whether it may use cookies.

Until you allow cookies, and if you don’t:

• Google Analytics sets no cookie and keeps nothing in your browser.
• It sends Google cookie-free signals: that a page was viewed, which page, the page you came from, the time, and your browser and device. Your network address reaches Google with them, as with any request.
• Google uses these signals, without identifying you, to estimate the visits of people who don’t allow cookies.

If you allow cookies:

• Google Analytics records the pages you read, how you arrived, and your browser, device and approximate location. It also notes how far you scroll, the links you follow off the site, and the files you download.
• It sets two cookies, _ga and _ga_ followed by the site’s ID, which last 13 months, to recognize a returning browser.

In both cases:

• Google signals and advertising features are off.
• Google handles the data for Endcode. Google may move it to the United States under the EU–U.S. Data Privacy Framework.
• Google keeps it for the period set in the site’s Google Analytics property, at most 14 months.

The legal basis for cookies is your consent. For the cookie-free signals it is Endcode’s legitimate interest in knowing how many people visit. Change your answer at any time with Analytics Settings at the bottom of every page; Don’t Allow removes the cookies.

The site is served by Amazon Web Services (Amazon CloudFront and Amazon S3), which receives your network address and the page asked for, as any web server does, to send it to you. The site keeps no access logs of its own.

The Contact Form

The contact page sends Endcode, by email, what you see in the form before you press Send:

• the topic you chose and your message;
• your email address, for the reply;
• for a problem or a purchase, the device line: Attracco’s version, iOS and your iPhone’s model, as you wrote it or as the app filled it in. You can change it or leave it empty.

When the app opens the page, it puts the device line in the page’s address after a #, which your browser doesn’t send to any server. Nothing goes out until you press Send.

The message travels through Web3Forms, a service of Web3Creative, a company in India, whose servers are in the United States. Web3Forms passes the message to Endcode by email. It says it doesn’t store messages, and that it deletes its server logs, which can hold your network address, every 2 months. Its own terms are in Web3Forms’ privacy policy.

The legal basis is your request: Endcode uses the message only to answer you, and keeps it only as long as it needs it to help you.

Your Rights

Under the GDPR you can ask to see, correct or delete the data about you, to limit how it’s used, to object to it, and to receive it in a file. You can also withdraw a consent at any time. Ask through the contact page.

You can also complain to the Garante per la protezione dei dati personali, or to the authority where you live.

Changes to This Page

The date at the top of this page says when it last changed.