Sayless Privacy Policy

This is the privacy policy for Sayless, an app for getting through the days after a breakup without texting someone you're trying to stay away from. It explains what the app does and doesn't do with your information, in plain language.

The short version

Nothing you saved leaves your phone. Your vault — reasons, notes, photos, voice, and video — is encrypted on your device and is never uploaded in bulk.

What you choose to say to Mia does leave the phone, only if you turn her on. She never learns their name. You can read the exact payload she would send before you talk.

There is no advertising, no data brokers, and no cross-app tracking. The iCloud backup that comes with signing in covers streaks and settings only. It never covers the vault, and it goes to your private iCloud, not to us.

What Sayless stores on your device

Almost everything Sayless holds sits on your phone. Once you are signed in with Apple, which is how the app opens, your device stores things like:

• Your no-contact streak and related settings
• Your Remember Why vault (text, photos, voice, video) — encrypted
• Unsent drafts and Hold history
• Your private alias for the other person
• On-device analytics events (which go nowhere unless you later enable a network analytics product we have not shipped)

Sensitive content is encrypted at rest with AES-256-GCM. The encryption key lives in the device Keychain, usable only while the device is unlocked, and is deliberately excluded from iCloud Keychain and device backups.

What leaves your device

1. Sign in with Apple + private iCloud backup

Sayless asks you to sign in with Apple on its first screen, and that sign-in is required to use the app. We ask Apple for your name and nothing else: never your email address. What we keep is the stable, per-app identifier Apple gives us, in this phone's Keychain. It is not an email, not a name, and cannot identify you outside this app. We operate no account server, so there is nowhere else for it to be.

Once you are signed in, a small set of non-sensitive data syncs to your own private CloudKit database (your iCloud account). We cannot read it across users. It is what comes back if you replace your phone, which is the reason the sign-in exists at all.

Signing out (You screen, Account) returns the app to its first screen and keeps everything on this phone. Signing out is not deleting; "Delete my account", on the same card, is.

Includes: streak type/start/timezone/best day count; protected-period settings; reset dates/counts (no notes); privacy/widget/notification preferences; onboarding-complete flag.

Never includes: vault content, drafts, alias, media, free-text notes, or conversation content with Mia.

2. Optional: Mia (Companion)

Mia is a Premium feature. Opening her tab without a subscription shows the purchase screen, not a composer, so nothing can be sent from there. With a subscription she is ready without anything to switch on, and nothing is sent while you read. Only when you send a message:

• The app builds a bounded context from answers and reasons you already saved (capped; not a bulk vault upload).
• Your private alias for the other person is redacted on-device before anything is sent (replaced with a neutral token such as "them").
• The message you typed, plus that redacted context, is sent to a relay we operate that holds a model-provider credential server-side. The relay forwards the request and returns the reply. It is designed to store nothing — no conversation bodies, no free-text logs.
• The model provider (currently OpenAI, via Chat Completions) processes the request under their terms. What they retain and for how long is governed by our agreement with them and their published policies; we configure for no training on your content where the product allows it. See the in-app “What she can see” screen for the literal payload shape.

Nothing is sent unless you send a message. There is no on/off switch in this version: the app ships with her ready, and the way to send her nothing is to send her nothing. You can delete the conversation at any time from the You screen, which removes it from the device, and Delete All Data and Delete my account both remove it too.

3. Apple systems

Purchases go through StoreKit / the App Store. We never see your card details. System services (notifications, widgets, Face ID checks) stay on-device or use Apple infrastructure as usual.

What we collect as the developer

For App Store privacy labeling purposes:

If we add network analytics or crash reporting later, this policy and the App Store privacy labels will be updated before that ships.

What never leaves your device (always)

Regardless of your account or Mia:

• Bulk export of your vault to our servers (we have no such feature)
• Your private alias for the other person (redacted before any Mia request)
• Photos, voice, and video in Remember Why
• Unsent drafts (unless you paste their content into Mia yourself)
• Your encryption key

Encryption and Face ID

Vault media and field-level sensitive text use AES-256-GCM with a device-held key. You can require Face ID / Touch ID / device passcode before opening the vault. Biometrics stay inside iOS; we do not store biometric templates.

Your encryption key

Because the key never leaves this phone, your vault does not move to a new one. If you replace or restore your phone, your streak, history and settings come back when you sign in, and your written reasons, notes, photos, voice and video do not.

Deletion

There are two controls, and they are different on purpose.

Delete my account (You screen, opened from the person icon at the top right of Today, then the Account card, directly below Sign out). Available whenever you are signed in. It deletes:

• The Apple user identifier held in the device Keychain
• The backup record in your private iCloud database, which the app removes for you
• Everything Delete All Data removes, below

You do not have to go into iCloud settings afterwards, and you do not have to email us. If the phone is offline or has no iCloud account when you do it, the app tells you so plainly rather than claiming an iCloud deletion it could not confirm, and you can remove that copy yourself in Settings under your name → iCloud → Manage Account Storage → Sayless.

Delete All Data (You screen, under Your data). The same device wipe without touching an account:

• Destroys the on-device encryption key (encrypted content becomes unrecoverable)
• Erases vault media, written entries, drafts, companion transcript
• Clears settings and the local analytics identifier
• Signs you out of the Apple account session on this phone

Deletion is final. The app has no export or backup of your vault, so once you delete it there is no copy anywhere to restore it from.

What we never do

• Sell your data
• Show ads or embed ad SDKs
• Track you across other apps or websites
• Use your vault contents to train a model of ours
• Claim Mia is therapy, crisis care, or a licensed clinician

Children

This app deals with adult themes and is intended for users age 17 and older. It is not directed at children, and we do not knowingly collect information from children.

What this app is and isn't

Sayless is a self-control and journaling tool. It is not therapy, medical care, or a crisis service. If you are in immediate danger, contact local emergency services or a crisis line — not this app.

Your rights

Everything Sayless keeps about you sits on your own phone, so these are things you do in the app rather than things you ask us for:

• Access. Your data is in the app and readable in the app. There is no export feature: the app cannot produce a copy of your vault as a file.
• Correction. You can edit or delete any entry, at any time, directly.
• Deletion. Delete All Data erases everything on the device, permanently.

We do not run an account server and we hold no copy of your vault, so there is nothing for us to send you, correct, or delete on request. The streak and settings data described above sits in your iCloud account, and "Delete my account" removes that record for you. If you use Mia, the relay is designed to store nothing, and the model provider handles those requests under the terms described above.

Questions about this policy: info@nestfullabs.com

Changes

If this policy changes in a material way, we will update the effective date and, where required, notify you in the app.

Contact

Nestfullabs — info@nestfullabs.com