The short version: Coral has no account, no ads, no analytics and no tracking, and we have no servers. Your notes, tasks and habits live on your devices and, with Coral Pro, sync through your own iCloud, with your note and task content end-to-end encrypted. A few features you choose to use talk to outside services — the weather, picture search, link cards and AI writing help — and this page says exactly what they send.
Who we are
Coral is an independent app made by Mark Salam. You can reach us at support@getcoralapp.com.
This policy covers Coral for Mac and iPhone, its Safari extension, its share extension and its widgets.
What stays with you
Everything you make in Coral — notes, tasks, projects, areas, habits, entries and pictures — is stored on your device, inside Coral's private app container, protected by your device's own encryption. We never receive it.
On iPhone, Coral's database, the automatic backups Coral keeps of it, and the snapshot its widgets read are excluded from iCloud Backup.
The Safari extension and share extension only act when you use them: they save what you share — from Safari, a page's title, address, description, any text you selected and the page's text — into Coral on your device, and send it nowhere else. Files you export, such as notes or an encrypted backup, go only where you save them.
Sync and encryption (Coral Pro)
With Coral Pro, Coral syncs through your private iCloud database (iCloud.com.atoam.Coral). We have no access to it.
Your note and task content — note titles and text, including the text of every task — and the pictures and files you add to notes, with their file names, are end-to-end encrypted, with keys kept in your iCloud Keychain that only your own devices can unlock, so neither Apple nor we can read them.
Not everything has that extra layer. Other details — for example the names of your projects, areas, folders, habits, goals and Currents, due dates and other dates, labels, which project or area something belongs to, and the web address of a cover or backdrop picture you chose from Unsplash or the web — are stored in the same private database protected by iCloud's standard encryption.
Without Pro, Coral works fully on each device with no sync.
Outside services, and what they receive
These services receive your device's IP address with each request, as any website does. None of them receive an identifier from Coral, and Coral never sends them your notes except where stated below.
- Weather on Today. Weather is off until you turn it on, in Settings or with “Show weather” on Today. Only then does Coral estimate your approximate location from your IP address using ipapi.co (or ipinfo.io if that fails), and ask Open-Meteo for the forecast at that location. Coral never asks for your device's location. Turn weather off and these requests stop.
- Pictures. When you search for a picture, your search words go to Unsplash. Pictures from Unsplash, including Coral's built-in banner pictures, load from Unsplash's servers.
- Link cards. When a note shows a link as a card or with its site's icon, or when you paste a link and Coral fills in its title, Coral fetches the title, description, icon and image directly from that website. Links are shown as cards by default; show a link as plain text to avoid this.
- AI writing help (Coral Pro). Only when you ask, Coral sends what that action needs — the text you selected, a note's title and text for a summary, or your task and habit names for planning — to your AI provider: the one you set up, whether Anthropic, another address you enter, or a model server on your own computer or network, using your own key where it needs one. Coral asks before the first request, naming that provider, and asks again if you switch to a different one. Apple Health data is never sent to AI: habits linked to Health are left out. Your AI provider's own privacy policy governs what it keeps. We never see these requests.
- Addresses you enter. If you give Coral a web address yourself — a picture's address or a theme catalog — Coral loads it from that address.
- Purchases. Coral Pro is sold through the App Store and handled entirely by Apple. We don't receive your payment details.
System permissions
Coral asks for these only when you use the feature, and works without them.
- Calendar — to show your events beside your tasks and, when you choose, add, change or delete them.
- Reminders — to bring reminders into Coral as tasks. After import Coral keeps the originals unless you choose to have them completed or deleted. A reminder's notes and list name stay on the device that brought it in.
- Notifications — for the daily and habit reminders you turn on, scheduled on your device.
- Health (iPhone) — read-only, to count steps, exercise minutes, mindful minutes or sleep toward a habit you link to them. Coral never writes to Health, and never sends Health data, or anything worked out from it, to AI. The readings and the daily marks they produce stay on your iPhone: they are never synced to iCloud, so Coral on your Mac lists those habits without marks, and Coral never writes them into your notes. They leave your iPhone only inside an encrypted backup you export yourself.
Analytics, tracking and crash reports
Coral has no analytics, no advertising, no tracking and no crash reporter.
If you choose to share crash reports with app developers in your device's settings, Apple may pass anonymous crash logs to us.
Data sharing
We don't sell, rent or share your data. Apart from the services in section 04, which you use by choice, no one receives data from Coral.
We hold no copy of your content, so there is nothing for us to hand over.
Your choices
- Weather stays off unless you turn it on, and you can turn it off again in Settings or on Today.
- Show any link as plain text to stop Coral fetching its card.
- Clear your AI key in Settings ▸ Integrations.
- Withdraw Calendar, Reminders, Notifications or Health access at any time in your device's settings.
- Deleting Coral removes its data from that device. Turning off sync, or deleting Coral's data in your iCloud settings, removes the synced copy.
Children's privacy
Coral isn't directed at children under 13. We don't collect personal information from anyone, children included.
Changes to this policy
If this policy changes, we'll update the date at the top of this page and, where it matters, tell you in the app.