Privacy.

Your local library

Project names, handoffs, references, reminders and your conversation history are stored on your device. We do not upload your project archive automatically. Version 1.0 contains the project library only; the AI and purchase processing below applies when using version 1.1. Device backups and files you explicitly export are handled by Apple or the destination you choose.

When you use AI

Before your first AI message, the app asks permission to send your recent conversation and any selected photos over HTTPS to our backend and OpenAI to generate a reply. We send a bounded recent conversation, not your entire local archive. Our backend does not save prompt text, photos or responses in its database or application logs. We request non-stored Chat Completions; this is not a promise of zero provider retention.

OpenAI may retain API content and metadata for abuse monitoring, normally for up to 30 days, with exceptions described in its policy. API data is not used for model training by default unless sharing is enabled. See OpenAI API data controls. Do not include information you do not want processed by the service. AI may make mistakes.

Account, usage and purchases

The chat update creates a pseudonymous account using a random installation identifier. We store session information, free-message usage, model and token usage records, and subscription state to provide the service, enforce access and prevent duplicate purchases. This account does not require your name or email.

Apple processes App Store subscriptions. We verify and store transaction identifiers, product, subscription period, status and usage. Apple Restore can transfer the existing paid period and remaining usage to another installation; it does not transfer your local chats or projects.

Where offered, WATA and its payment partners process checkout and bank details. Our backend stores the order, amount, currency, payment status and account link; it does not receive your card details. WATA access is associated with the installation account. Apple Restore does not restore WATA payments; contact support for assistance.

Network and service providers

Every cold launch fetches current configuration before the app opens. The chat update also contacts our backend. Our infrastructure uses a Russian network relay and a dedicated DigitalOcean server, with Cloudflare fallback routing. Connection metadata such as IP address, request path and time may be processed for delivery, security and troubleshooting. This can involve processing outside your country.

Access logging is disabled for the app API and payment proxy routes. Server error logs use daily rotation with 14 archives; system diagnostics use storage-based rotation rather than a fixed deletion date. Providers may retain their own operational and security records under their policies. The app does not include an advertising or third-party analytics SDK, and we do not use your data for cross-app advertising tracking or sell it.

Your controls and deletion

Withdraw AI sharing permission in Settings to stop future submissions; this cannot recall data already sent. Clear conversation history to remove local chats. Delete AI account and chats removes the server account association, sessions and usage history, together with local chats. A minimal unlinked billing ledger remains for purchase integrity and restoration. Cancelling an Apple subscription is a separate action in your Apple Account settings. Deleting the AI account preserves your project archive, which has its own export and deletion controls.

Account and usage records are kept while the account exists. You can request help with access or deletion by contacting support. Provider-retained data follows the provider retention policy. Keep an export before deleting local data or uninstalling the app.

This website and support

OpenAI Sites and Cloudflare deliver this website and public configuration. We do not add advertising, tracking pixels or website analytics. Support email, message content and attachments pass through Cloudflare Email Routing and a Google-hosted inbox so we can reply. Avoid sending sensitive conversation or project content. You may request deletion of support correspondence, subject to records needed to resolve disputes or meet applicable obligations.

Contact

For questions, access or deletion requests, email support@getthreadback.app. Changes to these practices will be reflected on this page.