Short version

Your notes, your answers and the feedback on them belong to your projects and nothing else. Recordings never leave your iPhone: they are transcribed on it. To build a brief and give feedback, the text of your notes and your answers is sent to Anthropic’s Claude through Cloudflare. You can delete everything from Settings › Delete my data. There are no ads, no tracking, and nothing is sold.

Your account

There is no sign-up. The iPhone app proves to our server that it came from the App Store, using Apple’s signed “app transaction”. Our server keeps only a one-way hash of that transaction’s ID, which is the same for your Apple Account on every device, so your projects and credits follow you to your iPad. We never see your name, email or Apple ID. The web version has no account and stores nothing on our server.

Your notes and answers

Files (text and PDF) are read on your device. Only the extracted text is sent to our server, never the file.
Recordings stay in the app on your iPhone and are transcribed there by Apple’s on-device speech recognition. They are deleted after seven days, or sooner if you delete them.
The text of your notes, your confirmed brief, your typed or transcribed answers and the feedback on them are stored on our server (Cloudflare) so they are on all your devices, until you delete the project or use Delete my data.
To build a brief and check an answer, that text is sent to Anthropic’s Claude through Cloudflare’s AI Gateway. Request logging at the gateway is off for these calls, and they are not cached. Anthropic does not train its models on API data; see Anthropic’s privacy policy.
Typed drafts and settings sync to your other devices through your own iCloud (Settings › Sync drafts and settings with iCloud turns it off). Apple keeps that copy in your iCloud account; it never reaches us.

Deleting

Delete a project from its ⋯ menu, or everything from Settings › Delete my data. The server copy is deleted right away, along with the device’s copy and recordings. Your unspent credits stay with your Apple Account, and the free start doesn’t come back, so we keep a record that it was used (no content). Cloudflare and Anthropic may keep operational logs or backups for a short time under their own policies.

Anonymous daily counts and crash data

To learn what works, the app adds 1 to daily totals such as: the app was opened (and how many days since this device first opened it, in ranges), a brief was built, a round of practice was done, a cue card was shared, the purchase screen was opened. Each count carries the platform and the week this device first opened the app, and no ID of any kind, and never any of your text. When something breaks, the app sends the technical error and code location, with anything you typed removed. Your IP address is used for a moment to limit how often a device can send, and is never stored.

App updates

The iPhone app can fix itself between App Store versions by downloading new files from our server. To check, it sends only its update channel, build number and the version of its files.

Purchases

Practice packs are bought through Apple’s App Store; Apple handles the payment and we never see your payment details. RevenueCat checks purchases for us and tells our server which account to credit, using your account’s random ID (not your name or Apple ID). See RevenueCat’s privacy policy. If you ask Apple for a refund, RevenueCat tells Apple, for that purchase only, whether it was delivered, so Apple can decide; by buying in the app you agree to this.

Our host, Cloudflare

The app, its server and its database run on Cloudflare, which logs requests (such as the IP address and time) to run and protect its network, under Cloudflare’s privacy policy. We don’t use those logs to identify anyone.

Children

Say It Back is made for adults preparing talks and isn’t directed at children under 13.

Questions

Write to support@sayitback.jruddell.com.