1. Who we are
Enterprise Contacts is developed and operated by an individual developer based in Denmark. For the limited server-side data described in this policy we act as the data controller. For contact records your device retrieves from Microsoft 365, we act as a data processor on behalf of your tenant administrator.
Data protection enquiries: privacy@enterprisecontacts.eu.
2. What stays on your device
All contact records pulled from your Microsoft 365 tenant are stored locally on the iPhone, encrypted with the device key, and removed when you log out or delete the app. We have no access to these records.
3. Tenant onboarding
When a Global Administrator grants consent, Microsoft redirects them to our website with a Tenant ID confirming the authorisation. We record the Tenant ID and the date of consent to verify that the tenant has approved Enterprise Contacts. The legal basis is our legitimate interest in operating a secure, authorisation-gated service (Article 6(1)(f) GDPR). This data is retained while the tenant remains active, and deleted within 30 days of a removal request or confirmed deactivation.
4. Usage data
To keep the app reliable and diagnose problems, the app sends usage data to Microsoft Azure Application Insights, hosted in Sweden (EU). Microsoft acts as our data processor. This is on by default. We process it on the basis of our legitimate interest in keeping the service reliable and fixing faults (Article 6(1)(f) GDPR); the data is minimal and does not identify you.
You can turn it off at any time, during setup with the "Share anonymous usage data" switch, or later in Settings → Privacy. When it is off, nothing is sent.
Usage data consists of counts, durations, outcomes and short error codes, for example how many sources synced, how many contacts changed, or that iOS declined to run a background task. The full list of events is below.
Each event carries a random installation ID created by the app, the app and iOS version, and your organisation's Microsoft Entra tenant ID. The installation ID is not linked to your Apple ID, Microsoft account or any personal information. The tenant ID identifies your organisation, not you, so that a reported problem can be traced to the right company; it is never your organisation's name or domain.
Usage data never contains names, email addresses, phone numbers, photos or any other content from your contacts or Microsoft 365 account, and never records who you look up or who calls you. The contacts extension itself sends nothing.
Usage data is kept for 90 days and then deleted automatically.
| Event | Data collected |
|---|---|
| App opened | Whether demo mode is on, Background App Refresh status, whether the Contact Provider is enabled, and whether the user or iOS (for background work) started the app |
| Daily background summary (at most once a day) | Number of background checks and syncs iOS ran, number of times iOS refused to schedule one, hours covered, and the longest gap between background runs |
| Background task refused | Which task (check or scheduled sync) and the reason |
| Sign-in failure | Numeric error code only |
| Sync run by the user | Number of sources, kinds of source (for example group or mailbox), total contact count, number of changes, number failed, duration, and what started it (button, pull-to-refresh, etc.) |
| Scheduled or background sync | Outcome, number of sources, kinds of source, total contact count, number of changes, number failed, and duration |
| Sync failed | Kind of source and an error code |
| Contact-provider activity, summarised since the last app launch | Counts of updates reported to iOS, aborted updates, expired change markers, checks with no changes, and deletions |
| Onboarding progress | Name of the onboarding step reached |
| Onboarding completed | Whether demo mode was used |
| First sync completed | Minutes since onboarding and total contact count |
| Source added or removed | Kind of source, and whether it was added automatically or by the user |
| Sync or reminders paused or resumed | Which was paused, the number of days, or why it ended |
| Notification sent, shown or opened | Type of notification only (for example "sync stopped"), never its text |
Never collected: names, email addresses, phone numbers, photos, job titles or other contact or account content; search terms; call information; user principal name or per-user account ID. Error reports carry a short code (for example http_401 or conditional_access), not error messages.
5. Third-party services
Enterprise Contacts uses the following third-party services:
- Microsoft (MSAL / Microsoft Graph) — authentication and contact data retrieval. Microsoft acts as a data processor under your organisation's Microsoft 365 agreement. See Microsoft's Privacy Statement.
- Microsoft Azure Application Insights (Azure Monitor) — usage data and fault diagnostics, hosted in EU (Sweden Central). No contact content or personal data about you is included; events carry your organisation's tenant ID. Microsoft acts as our data processor for this service under the Microsoft Online Services Terms.
We do not use advertising networks, social media plug-ins, or analytics services that track you across websites or devices.
6. Cookies and tracking
This website does not use cookies, tracking pixels, or third-party analytics scripts. No data about your visit is shared with advertising networks or data brokers.
7. Support messages
If you contact us by email, the message and any personal data you include are used solely to respond to your enquiry. The legal basis is our legitimate interest in providing support (Article 6(1)(f) GDPR). Support correspondence is deleted within 12 months of the last reply unless a longer retention period is required by law.
8. Data retention
- Tenant ID and consent date — retained while the tenant is active; deleted within 30 days of a removal request.
- Support messages — deleted within 12 months of last correspondence.
- Usage data — retained on a 90-day rolling basis.
- Contact records — on-device only; removed immediately on logout or app deletion.
9. Your rights
Under GDPR you have the following rights in relation to the limited personal data we hold:
- Access (Art. 15) — request a copy of data we hold about you.
- Rectification (Art. 16) — ask us to correct inaccurate data.
- Erasure (Art. 17) — ask us to delete your data where no legal basis for retention applies.
- Restriction (Art. 18) — ask us to limit processing while a dispute is resolved.
- Portability (Art. 20) — receive your data in a machine-readable format.
- Objection (Art. 21) — object to processing based on legitimate interest.
To exercise any of these rights, email privacy@enterprisecontacts.eu. We will respond within 30 days.
You also have the right to lodge a complaint with the Danish supervisory authority: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby — dt@datatilsynet.dk.
10. Children's privacy
Enterprise Contacts is designed for use in professional Microsoft 365 environments and is not directed at children under 13. We do not knowingly collect personal data from children.