Apps change. People stay.
Phones get replaced. Relationships don’t.
Your work contacts live on the web, in your own base.
One place for the people you work with, kept apart from your phone’s address book. From a contact’s card, call, text, or open a chat in WhatsApp, Telegram or Viber.
Contact fields are encrypted in the database with AES-256-GCM. By default the key is held on our server; end-to-end encryption is available in Settings → Security.
Features
Give clients, partners and suppliers tables of their own, with groups inside each. One person can sit in several tables and groups at once. Search covers every table and every field, and a few digits of a number are enough to find someone.
Tap any value to copy it. Long-press or right-click a phone number to call, send an SMS or open a chat in WhatsApp, Telegram or Viber; an email address starts a message and a profile link opens the profile. Editing is a separate mode you switch to on purpose.
Photograph a card or add a chat screenshot, check the draft and save. We don’t store the image: it exists only in your open tab and reaches the recognition model unencrypted. Fields it is unsure of are highlighted. Pasted text is read in your tab and goes to the model, unencrypted, only if you press “Recognise more accurately”.
Export to .xlsx or .csv with every field in its own column and phone numbers kept as text, or to .docx and .vcf. Import vCard, Excel or CSV; Google Contacts and Outlook exports are detected automatically. A test exports 1,000 contacts and imports them back without losing a field.
Contact fields are encrypted with AES-256-GCM, with a data key per account; so are table and group names, but not the structure of your base. By default the key is held on our server, so we can technically decrypt your data, and a stolen session can read it. It guards against a leaked database or backup, not the server itself.
With it on, your data key is wrapped in the browser with a key derived from your secret phrase; neither the phrase nor that key reaches our server. For at least seven days we keep a copy of the data key, so it isn’t end-to-end yet. Lose the phrase and recovery key, and the data is lost: if we could restore it, we could read it.
With end-to-end encryption on, a passkey on Mac, iPhone, Android or Windows (with Windows Hello) opens your base with Face ID, a fingerprint or the device code. Elsewhere, the phrase is the only way. The risk moves to the device: whoever holds it, knows its code and can sign in opens your base without the phrase.
Your database and files are stored in the EU, and the app runs in the same region; service emails are sent from the EU too. Recognition uses Cloudflare’s global network, so an image or pasted text may be processed outside the EU. All four of our providers are US companies.
The app has no analytics and no ad trackers. Server logs record requests and IP addresses, not the content of your contacts.
About
A friend’s clients, partners and suppliers lived in WhatsApp, where no one had set out to keep them. One day they were gone: no backup, no export.
In the phone’s address book, the same people sat between family and friends. So Ycontacts does two things first: it keeps work contacts separate from everything else, and it lets you take all of it with you, every field intact.
Export the whole base to .xlsx or .csv at any time, every field in its own column.
Where this page names a protection, its main limit sits right beside it.
No roadmap promises. Everything described here already works in the app.
— the author of Ycontacts