Rondin
Privacy
Effective September 26, 2026
Rondin is made by Jim Willits in Dallas, Texas. This page says what the app stores, where it is kept, and who can see it. The short version: Rondin has no servers and no accounts, collects nothing about you, and nothing you put into it ever reaches the developer.
What the app stores
Everything in Rondin is something you created or chose:
- Places you define: a name, a short abbreviation, and a spot on the map.
- Notes you write, including any you flag for attention.
- Photos and videos you file to a place. For items from your photo library, Rondin stores a reference to the item plus a thumbnail and catalogue details such as date, size, length and location. It does not copy the picture. For items imported from outside your library it keeps its own copy, because there is nothing to reference.
- Visit stamps, only if you turn visit logging on: the time you arrived at and left one of your places, and where you were when the arrival was noticed.
- Your settings.
Where it is kept
On your iPhone and, if iCloud is on for the app, in your own iCloud account through Apple’s CloudKit. iCloud is how your records are backed up and reach your other devices. They live in your Apple account, under Apple’s iCloud terms, encrypted by Apple. The developer cannot read them, list them, or reach them in any way. You can turn iCloud off for Rondin in the iPhone Settings app.
Location
Rondin never tracks where you go.
- With location allowed while using the app, the map shows where you are, a new place can start at your current spot, and each note you write saves where it was written.
- Two optional features, visit logging and arrival alerts, need Always location. With Always, iOS tells the app when you cross into or out of a place you defined, and when you have moved a long way, so it can choose which of your places to watch. Those positions are used on the spot and never stored. In the background, your location is recorded only as the visit stamps you turned on. It is never used for anything else, and it never leaves your phone except inside your own records.
- Rondin works fully with location off. Photos are filed by the location saved inside them, not by where your phone is.
Photos
Photo library access is optional and off until you turn it on. When you allow it, Rondin reads each item’s location and catalogue details to decide whether it belongs to one of your places. It opens the picture itself only for an item whose location falls inside a place you defined. Anything else is never looked at. iOS has no read-only level of photo access, so the request says read and write; Rondin never adds to, changes, or removes anything in your library. You can limit access to selected photos, and you can revoke it in Settings at any time.
Notifications
Arrival alerts are notifications composed on your phone, shown only if you allow notifications and only for a record you flagged. The app also receives silent notifications from iCloud that tell it your records changed on another device; they contain nothing readable and are never shown.
What the developer receives
Nothing from the app. Rondin contains no analytics, no advertising, no tracking, and no third-party code that reports anywhere. If you have chosen in the iPhone Settings app to share diagnostics with app developers, Apple may pass along crash reports; those come from Apple, under Apple’s policy, and contain none of your records.
Deleting
Deleting a record moves it to Recently Deleted, where it stays for 30 days and can be restored or deleted at once. After 30 days it is removed permanently. Deleting the app removes everything on the phone; what is in iCloud can be removed under iCloud storage in the iPhone Settings app.
Children
Rondin is not directed at children under 13 and collects no information from anyone.
Changes
Changes to this policy are posted here, with the date, before they take effect.