Privacy Policy

Your Toxic Love ("YTL") is an app for writing down what happens in a relationship and seeing the patterns with your own eyes. What you write is deeply personal, so the rule is simple: your journal lives encrypted on your phone, and we can't read it.

In short

• Your journal, chats, audio and analyses are stored encrypted on your phone. We have no copy and can't read them.
• Our server only holds your account: your email and what's needed to sign you in.
• Mike, AI analysis and cloud transcription send text or audio to an outside provider (OpenAI or Deepgram). That only happens when you use them, and the app asks for your permission first.
• We don't sell your data, show ads, or use analytics or tracking tools.
• You can delete your account from the app at any time.

Who is responsible

Arturo Pacheco (Chilean tax ID / RUT 16.658.228-8), doing business as Drift Studio, in Chile. For any question about your data: admin@driftstudio.tech.

What data there is and where it lives

On your phone

• What you write down: journal entries, the text of chats you import (images are not kept), audio, transcripts, analyses, the signals you mark, and your preferences.
• All of it is stored encrypted: the journal in an encrypted database and audio in encrypted files. The key is stored in your phone's keychain and, if you have iCloud Keychain turned on, syncs with it so you can recover your data on a new phone.
• If iCloud Backup is on, the encrypted database is included in that backup. Apple stores it; we have no access to the copy or to the key.
• Because we don't have your data, we can't recover it if you lose your phone and didn't have iCloud Keychain and iCloud Backup turned on, or if you lose access to your iCloud account.

On our server

We use Supabase, with servers in the United States, for accounts. We store:

• your email and password (stored as a hash, never as plain text);
• if you sign in with Apple, the identifier and email Apple shares (this may be a private relay email);
• if you sign in with Google, the identifier, your name, your email and the profile photo Google shares;
• the date you accepted the initial notice, and basic app preferences;
• security and access logs, such as IP address, device and the time you sign in.

Nothing you write down is stored on our server.

What leaves your phone, and only when you ask

Mike (OpenAI). When you write to Mike, your message and the latest messages in the conversation are sent to OpenAI to generate a reply. Before sending, the app redacts emails and phone numbers, and swaps every name you gave a nickname for that nickname. The conversation is not stored on our server. If you ask Mike to log something, it goes into your journal, on your phone.

AI analysis (OpenAI). Only when you tap "Analyze with AI"; the first time, the app asks for your permission. We send the text of what you choose to analyze (entries, chats or transcripts), with emails and phone numbers redacted and names that have a nickname swapped for it, along with its tags, dates and severity. In chats, who wrote each message is labeled "me" or "my partner". The result is stored only on your phone.

Cloud transcription (Deepgram). Only if you turn it on: it's off by default, and without it transcription happens on your phone. The audio is sent as is, because a voice can't be anonymized.

Please keep in mind:

• Names you didn't give a nickname are sent exactly as you wrote them.
• OpenAI, under its business terms, does not use this data to train its models and may keep it for up to 30 days to detect abuse, unless the law requires it to keep it longer.
• Deepgram may keep fragments of audio and text to improve its speech models. If you don't want that, leave cloud transcription off: on-device transcription works without sending anything.
• Our servers only pass this data to the provider and return the reply: they don't store what they receive or write it to logs.

Other connections

• Sign in with Apple or Google: that service confirms who you are and gives us an identifier.
• Deleting your account: if you signed in with Apple, we ask Apple to revoke YTL's access to your Apple ID.
• On-device transcription: the first time, the app downloads a speech model from Hugging Face. That download carries nothing you've written.
• Help lines: they open findahelpline.com in your browser, with your country code so it can show the ones near you.
• PDF report: it's created on your phone and only leaves it if you share it.
• Subscriptions: payments are processed by Apple. We never see your card details.

What we use data for

• To provide the service: create and maintain your account, sign you in, and run Mike, analysis and transcription when you use them.
• For security: preventing abuse and protecting your account.
• To reply when you contact us.

We never use it for advertising, profiling, or to sell it.

Why we're allowed to use it (legal bases)

• Your account: it's necessary to provide the service you asked for.
• Mike, analysis and cloud transcription: your consent, which the app asks for before sending anything and which you can withdraw at any time. What you write can reveal sensitive information, such as your health, your sex life or situations of violence; that's why these features are optional and only turn on if you choose.
• Security of the service: our legitimate interest in protecting it and you.

Who we share data with

Provider	What for	Where
Supabase	Accounts and sign-in	United States
OpenAI	Mike and AI analysis	United States
Deepgram	Cloud transcription	United States
Apple	Sign in with Apple, iCloud Keychain and Backup, payments	Per Apple
Google	Sign in with Google	Per Google

Each one only gets what it needs for its job, and each is contractually bound to use the data only to provide its service and to protect it with a level of security equivalent to ours. We don't sell or hand over data to anyone else. If an authority legally requires it, we may have to disclose your account data; we don't have your journal.

Data outside your country

Supabase, OpenAI and Deepgram process data in the United States. When you use YTL, your account data and what you send to those features travel there, protected by encrypted connections and by each provider's contractual commitments.

How long we keep it

• On your phone: until you delete it or delete your account.
• Your account: while it exists. When you delete it, it's removed from the server right away. The provider's security logs and backups may keep account data for a while longer, until they roll over.
• Emails you send us: as long as needed to reply.
• OpenAI: up to 30 days. Deepgram: according to its model improvement program.
• iCloud backups: these depend on Apple and your settings. Deleting your account also deletes the key from iCloud Keychain, so an old copy of the database can no longer be read.

How to delete your data

In the app: Settings → Account → Delete account. This deletes your account on the server, the encrypted database and audio on your phone, the key in iCloud Keychain, your PIN and your session. If you signed in with Apple, we also ask Apple to revoke YTL's access to your Apple ID.

• Deleting your account does not cancel a subscription: do that in iPhone Settings → your name → Subscriptions.
• If you delete the app without deleting your account, the account still exists and your data may come back if you restore an iCloud backup.
• Anything already sent to OpenAI or Deepgram follows each provider's timelines, explained above.

Your rights

You can ask to access your data, correct it, delete it, object to our use of it, get a portable copy, and withdraw your consent. No YTL feature makes automated decisions about you: what Mike and the analysis say is for guidance only.

Most of your data lives only on your phone, and you manage it yourself in the app: you can view, correct and delete it, and export a PDF. For your account data, email us at admin@driftstudio.tech and we'll reply within 30 days.

If you're not satisfied with our answer, you can complain to a data protection authority: in Chile, the Personal Data Protection Agency, once Law 21.719 takes effect; elsewhere, the relevant one.

Data about other people

What you write may include information about other people, such as your partner. That information stays on your phone and only leaves it when you use Mike, analysis or cloud transcription. To protect those people too, give them a nickname: the app swaps their name for it before sending text to the AI.

Security

• Encrypted database, with its key stored in the phone's keychain.
• PIN or Face ID lock.
• Screenshot blocking.
• Encrypted connections (HTTPS) to our server and to providers.

No system is foolproof. If a breach affects you, we'll let you know, and we'll notify the authorities when the law requires it.

Minors

YTL is only for people 18 or older. We don't knowingly collect data from minors; if we learn of an account belonging to a minor, we delete it.

Changes to this policy

If we change it, we'll update the date at the top. If the change is significant, we'll let you know in the app.

Contact

admin@driftstudio.tech