Privacy, in plain words

Draft policy · last updated 16 October 2026

What happens to your chat

• When you upload a chat (an export file, screenshots or pasted text), our server reads it and counts the numbers in code: message counts, reply times, who texts first, keyword signals such as apologies or criticism, unanswered questions and most used words. Your browser also sends its time zone, so times show in your own hours.
• To write your report, the chat text (or the screenshots) is sent to our AI provider: OpenRouter, which routes it to Google's Gemini model. A second, smaller AI call (Meta's Muse model, also through OpenRouter) writes "What the numbers say": it gets only the counted numbers, first names and the most used single words, never the messages. We do not use your chats to train models and we never sell them.
• We never ask for your Apple ID, Instagram or other passwords, and never connect to your phone. For iMessage, the export tools we mention (imessage-exporter, iMazing) run on your own computer; we only see the one conversation file you choose to upload.
• Between upload and your confirmation ("which one is you"), the parsed chat is held in temporary storage on our server for at most 20 minutes. Screenshots wait there only until they have been read (deleted right after, at most 20 minutes). The chat is deleted right after your report is built, and abandoned uploads are deleted automatically after 20 minutes.
• Decoder and Reply Coach answers are kept for 1 day so they still show if you leave the page while they are being written, then deleted (also by "Delete all my reports").
• We never store the chat text itself. Once your report is built, only the report remains.

What we store

• Your reports: toxicity scores, the counted numbers (counts, reply times, who texts first, keyword signal counts, most used words and emoji), flags with the short quotes used as evidence, a few short example messages behind the signal counts and unanswered questions, the AI read of the numbers, and suggestions. Kept until you delete them.
• When you check the same person again, the new report compares itself with your previous report of that chat (scores and numbers only). Delete the older report and it is no longer used.
• A free score you get before signing up is linked to an anonymous browser cookie. If you don't start a free week, it is deleted automatically after 7 days, and you can delete it sooner from the score screen.
• Your account: email and a hashed password. Payments are handled by Stripe; we never see your full card number.
• Page visits are counted with Rybbit, a cookieless analytics service. It never sees your chats.
• Your quiz answers, used to personalize the app, and basic usage events (pages visited, country) to improve it.

Your controls

• Delete any report from the report screen, or everything from the account menu ("Delete all my reports").
• Nothing is ever sent to the people in your chats.

Contact

privacy@arewetoxic.com