Privacy policy

Relationship Decoder · last updated 13 October 2026 · draft, before the first public release

Relationship Decoder is a private journal that helps you look at a moment between you and someone you love, date or are getting to know, from more than one side. This page says plainly what stays on your iPhone, what leaves it, who receives it, for how long, and how to take it back.

What stays on your iPhone

• Your journal: every situation you describe, every reading, the notes the app remembers and the relationship context you enter. It is kept in the app on your iPhone. There is no account and no sign-in.
• Your voice. It is turned into words on your iPhone by Apple's speech recognition (see "Apple" below). We never receive a recording.
• A diagnostic log of events and timings, never your words. It leaves the phone only if you choose to send it to us.

What leaves your iPhone, and why

To write a reading, the app needs an AI model that does not run on the phone. Only after you have agreed on the page that asks, the app sends, when you ask for a reading and when it keeps the journal's summaries, remembered notes and search by meaning up to date:

• what you describe in that situation;
• your relationship context (the names, genders and descriptions you entered);
• the notes the app remembers and short summaries of earlier situations, so the reading fits your story.

It goes to our server and from there to the AI provider, which writes the answer and sends it back. If dictation tidying is on, the words you dictate are sent the same way to be given punctuation. The only purpose is to write your readings and the summaries and notes that go with them.

What never leaves your iPhone: your contacts, your photos, where you are, and any recording of your voice. The app does not look at your conversations; it knows only what you choose to tell it.

Also sent with each request, to count free readings and daily limits: a random identifier the app made for this installation, the kind of request (a reading, a small helper request), and, if you subscribe, Apple's proof that your subscription is active (it contains no name and no payment details).

Who receives it

• Our server (run on Cloudflare) passes your request to the AI provider and the answer back. It does not store or log what you wrote or what the reading says. It keeps the random identifier of the installation, how many requests it made today, and, for the free readings, the random identifier the app gave each of those journal entries, so that adding to a situation is not counted as a new one. None of these is made from your words. To see how the app works and what it costs, the server also writes one line for each answer with technical data only: the kind of request, the model, how long it took, the number of tokens and the price. The line holds no words and no identifier. Cloudflare keeps its own standard log of the requests to the server for up to 7 days: your network address and the approximate place that follows from it, the type of phone and the app's version, the size and kind of the request, and the installation identifier. It never holds your words.
• The AI providers are the companies that write the reading from your words. Today these are OpenRouter, Inc., which routes the request, and OpenAI, whose model writes the reading; OpenRouter may pass the request to OpenAI itself or to a cloud company that hosts OpenAI's models. We send your words to no one else. We ask OpenRouter to pass your words only to providers that say they do not collect user data (the "deny" setting for data collection). That is the providers' own statement, which we cannot inspect from outside, and OpenRouter itself notes that there can be exceptions. The terms of OpenRouter and of the provider apply to the rest. If we change who receives your words, this page is updated first and the app asks for your agreement again.
• Apple: dictation uses Apple's speech recognition, which for some languages is processed by Apple. Subscriptions are bought through the App Store; we receive Apple's proof that a subscription is active, not your name or payment details.

We rely on the published terms of these two companies. OpenRouter states that it does not use what is sent through it to train its own models, and that it requires the providers it routes to to follow data-protection law. OpenAI states that data sent through its API is not used to train its models unless the customer opts in. We have no separate agreement with OpenAI; our relationship with OpenRouter is its standard terms of service. We send your words to no one else.

We do not sell your data, show advertising, or build a profile of you. Nothing in the app measures what you do or follows you elsewhere.

How long it is kept

• Your journal: on your iPhone until you delete it. Deleting the app removes it.
• Your words in transit: our server keeps none of them. OpenAI states that it keeps logs for abuse monitoring for up to 30 days. OpenRouter states no fixed period for text, only as long as is reasonably necessary. A cloud company that hosts the model for OpenRouter follows its own terms.
• The installation identifier and the counts: until you ask us to delete them (see below).
• Your network address: Cloudflare, which runs our server, processes it to deliver the request. Our server uses it for one thing, to limit how many new installations may start from one network in a day, and keeps for that only the day's list of installation identifiers per network.
• Cloudflare's request log (network address, approximate place, installation identifier, no words): up to 7 days, then it is erased by Cloudflare. The line the server writes for each answer (kind of request, model, time, tokens, price) holds nothing that points to you.

Why we may use it

We process your words because you agreed to it on the consent page, and only to write your readings. We count requests by installation to run the free readings and the daily limits, which is a legitimate interest we have in keeping the service fair and affordable. You can take your consent back at any time (below).

Your rights

Wherever you live, you may ask us to:

• tell you what we hold about you (the installation identifier and its counts; we hold none of your words);
• delete what we hold;
• correct it, if it is wrong;
• stop using it, or object to a use you do not agree with;
• take back your consent, which you can do yourself in the app (below).

Your journal is yours and is on your own iPhone, so you already hold the only copy. To ask for any of the above, write to support@relationship-decoder.example and include the installation ID shown on the app's support page. We answer within 30 days. If you are not satisfied, you may complain to the data protection authority where you live or work.

Take back your consent, and delete

• Take back your yes. Turn off Settings → Privacy → Cloud readings at any time. The app then sends nothing; your journal stays readable and new readings are not written.
• Delete your journal. Settings → Delete everything removes the journal, the remembered notes and the context from your iPhone.
• Delete what we hold. Open Settings → Help → Support in the app: the page that opens shows your installation ID. Send it to support@relationship-decoder.example and we will delete that identifier and its counts. Our server holds none of your words. Cloudflare's request log erases itself within 7 days and cannot be emptied sooner.
• A subscription is ended only in your Apple Account settings. Removing the app or the journal from your iPhone does not stop the billing.

What this app is not

Readings are written by AI, which can be wrong. They offer perspective, not therapy, diagnosis, legal advice or emergency help. If you are in danger, contact your local emergency number.

Age

The app is for people 16 and older. It is not directed at children, and we do not knowingly collect information from anyone under 13 (or under the age set by local law). If you believe a child has used the app, write to support@relationship-decoder.example and we will delete what we hold.

Changes and contact

If what the app sends or who receives it changes, this page changes first and the app asks for your agreement again. Questions: support@relationship-decoder.example.