In short: Grayflag works only with what you choose to share. The conversations and screenshots you share for an analysis are read once to create your result, then deleted. Your drafts, your Vault, your Ask conversations and the copy of your conversations that Ask uses stay on your phone, encrypted. The rest (your answers, your results and short summaries of your Vault items) stays in your account, encrypted with a key unique to you and there only for you: no one at Grayflag reads it, except an AI reply you choose to report. What you share is sent to AI providers only to create your results, and it is never sold, never used for advertising and never used to train AI.
1. Who we are
Grayflag is published by Louis Hubert Cottineau (TIN: 302340116), 5 Sairme Street, Tbilisi, Georgia, who is the controller of your personal data. Contact: [email protected].
2. What we collect and what we keep
- Account: a random identifier created automatically, and a secret stored on your device. No name, e-mail address or phone number is needed. If you link Sign in with Apple, we receive only the identifier Apple gives us. On Android there is no sign-in: the app uses this automatic account only.
- What you share: your answers and descriptions, the conversations you paste or import, screenshots of your own conversations, photos you pick, Vault items and Ask messages, and the results created from them. Because it is about your relationship, it can include sensitive information (for example about your sex life or health) and information about other people, such as your partner. We use it to run the app for you and create your results, with your explicit consent (section 3).
- Purchases: the status and history of your subscription (product, price and date of each purchase, renewal or refund), received from Apple through RevenueCat. We never receive your payment details.
- Technical data: IP address, device and app version, technical logs and our own usage statistics, which never contain what you share.
- Consent: the date of your agreement to the AI analysis, and of its withdrawal.
- Reports: if you report something the AI wrote (an Ask reply, a part of a result or the analysis of a Vault item), we receive only that AI text, the reason you pick and the note you may add, never what you wrote or your photos. It is the only thing someone at Grayflag reads, to correct the AI.
We do not access your contacts, location, microphone or photo library as a whole, and we use no advertising identifier.
What happens to what you share
- Read once, then deleted. The conversations you paste or import for an analysis, the screenshots of your conversations and the images you add to it are read once to create your result, then deleted from our servers right after the analysis (at the latest 24 hours after an analysis that failed and can be retried). Only the result is kept, with what “What Grayflag knows” remembers from it; they can quote a few short lines. What you type in an answer or a description is kept in your account, and what you save in the Vault or send in Ask is kept on your phone (see below).
- Stays on your phone. Answers you have not sent yet (drafts) stay on your phone, encrypted. When you import a chat export, the file itself and the photos, videos and voice notes in it never leave your phone: only its written messages are sent for the analysis. So that Ask can answer questions about a conversation you pasted or imported, the app keeps its own encrypted copy of it on your phone. That copy is never sent to us: a question sends only the short passage it needs, which is not stored (the answer, kept with your Ask messages, can quote a few words of it). The copy goes when you delete the result, your data or your account on that phone, or remove the app.
- Your Vault and your Ask conversations, with the texts and images you put in them, are kept on your phone, encrypted with a key held in your phone's secure storage (the iPhone keychain, or the Android Keystore). An encrypted iPhone backup (iCloud or computer) brings them back on a new iPhone; on Android they are left out of backups. If you remove the app without such a backup, they are lost, and they are not synced between phones.
- When you save a Vault item (with Grayflag Pro, your agreement to the AI analysis and “Use my Vault in analyses” on) or analyze it, its text and first images are sent once to create its reading, which stays on your phone. Our servers keep only a short neutral summary of it, the signals waiting for your review or accepted by you, and the labels used to sort it (date, kind, tone, preset tags), never the item itself.
- When you ask a question in Ask, the app sends the recent messages of that conversation, its images and the Vault items it uses; they are used for that answer only and not stored. The answer waits on our servers until your phone has received it, then it is deleted (at most 24 hours; an answer locked until you take Grayflag Pro waits at most 30 days).
- If you used an earlier version of the app, your Vault and Ask conversations move to your phone when you update: our servers delete their copy only once your phone has checked its own. Until you update, they stay in your account as before.
- Kept in your account, encrypted with a key unique to you. Your answers and descriptions, your results, what “What Grayflag knows” remembers, and the summaries of your Vault items. No one at Grayflag reads it (the only exception: an AI reply you report, see “Reports” above). You can see it in the app, correct or delete it item by item (a Vault item's summary can be forgotten in “What Grayflag knows”), and delete everything at once. Texts are encrypted; only a few labels used to sort them, such as a flag's color, a signal's type or a Vault item's date and kind, are not.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Running the app: your account, Vault, Ask and history | Contract (GDPR art. 6(1)(b)) |
| Analyzing what you share with AI providers, and keeping your answers, results and what you save, including sensitive information (for example about your sex life or health) | Your explicit consent (art. 6(1)(a) and 9(2)(a)), which you can withdraw at any time in the app's Settings |
| Reviewing the AI replies you report, to correct the AI | Your explicit consent, given when you send the report (art. 6(1)(a) and 9(2)(a)) |
| Subscriptions | Contract (art. 6(1)(b)) |
| Security, abuse prevention and our own statistics | Legitimate interest (art. 6(1)(f)) |
| Answering legal requests | Legal obligation (art. 6(1)(c)) |
Information about other people in what you share is used only to create your results, based on our legitimate interest in providing the analysis you ask for (art. 6(1)(f)); anyone mentioned can contact us at [email protected].
You do not have to share anything, but without your content and your agreement to the AI analysis, the analysis features cannot work.
4. Who receives it
We do not sell your data and do not use it for advertising. It is shared only with the providers that run the service for us:
- Hosting: Contabo (servers in Germany) and Cloudflare (network and security).
- AI: OpenRouter, which sends each request, with zero data retention, to Together AI or Microsoft Azure. Together AI, a US company, runs DeepSeek on its own servers; DeepSeek, the Chinese company, receives nothing. See How Grayflag uses AI.
- Subscriptions: Apple and RevenueCat.
- Authorities, only when the law requires it.
Each of these providers is bound by contract to use your data only to provide its service to us and to protect it at least as well as this policy.
5. Transfers outside the EU
Your data is stored in Germany. Some providers are in the United States, and we access your data from Georgia. These transfers rely on appropriate safeguards, such as the EU standard contractual clauses or the EU-US Data Privacy Framework. You can get a copy of these safeguards by writing to [email protected].
6. The AI
Before your first analysis, the app asks for your agreement. What you share, with context from your account (your profile, earlier results and the summaries of relevant Vault items) and, for Ask, the messages and Vault items your phone sends with a question, is then sent to AI providers only to create your results. The AI providers do not keep it and do not use it to train their models. You can withdraw your agreement at any time in the app's Settings.
7. How long we keep it
- Your account and what you save: until you delete them or your account.
- Your Vault and Ask conversations: on your phone, until you delete them, your data or your account, or remove the app. The summary of a Vault item: until you delete the item, forget the summary or delete your data or account.
- An Ask answer: deleted from our servers as soon as your phone has received it, at the latest 24 hours later (an answer locked until you take Grayflag Pro: at most 30 days).
- Results you never unlock with Grayflag Pro: deleted about 30 days after the analysis.
- Conversations, screenshots and images you share for an analysis: deleted from our servers right after the analysis, at the latest 24 hours after an analysis that failed and can be retried (see section 2). Only the result is kept.
- The passage of a conversation your phone sends with a question in Ask: not stored.
- Images you upload but never use: deleted at the latest 24 hours after the upload.
- Usage statistics, which never contain what you share: 13 months.
- AI replies you report, with your reason and your note: kept encrypted, 90 days after you send them, or until you delete your data or your account.
- Messages you send to our support or privacy addresses, and our replies: kept encrypted, 12 months after the last message of the conversation.
- Purchase history: kept with your account; when you delete your account, it stays in our statistics only in anonymous form (no identifier, to the day).
- Backups: up to 14 days (including the copies of the Vault and Ask conversations moved to your phone).
- Technical logs: overwritten automatically as new logs are written; they never contain what you share.
8. Security
We use reasonable technical and organizational measures to protect your data, and your content is stored encrypted. On your phone, your Vault and Ask conversations are encrypted with a key kept in your phone's secure storage; anyone who can use your unlocked phone can open the app, unless you lock the Vault with Face ID, Touch ID or your iPhone passcode, or on Android with your fingerprint, face or screen lock (Settings › Lock the Vault). Biometrics are handled by iOS or Android: Grayflag never receives your biometric data.
9. Your rights
You can access, correct, delete or export your data, restrict its use and withdraw your consent at any time. Withdrawing your consent does not affect what was done before.
You can also object at any time to the use of your data based on our legitimate interest (security and statistics).
Most of this can be done directly in the app. Otherwise, write to [email protected] with the support code shown in the app's Settings. If we refuse a request, reply to our answer to appeal; if we still refuse and you live in the United States, you can contact your state attorney general. You can also lodge a complaint with the Personal Data Protection Service of Georgia or the data protection authority where you live (for example the CNIL in France).
10. Deleting your account
In the app: Settings > Delete account (without Grayflag Pro: on the subscription screen, Privacy > Delete my data). This deletes your account and your data, including the Vault and Ask conversations kept on that phone. It does not cancel an Apple subscription. See Delete your account.
11. Children
Grayflag is not intended for anyone under 16, and we do not knowingly collect their data. If we learn that someone under 16 has used it, we delete the account and its data. If you are under 18, or under the age of majority where you live, you need the permission of a parent or legal guardian (see the terms).
12. Cookies
The website uses no analytics or advertising cookies. It sets only a language cookie, if you pick a language. Neither we nor any third party collect information about your activity across other apps or websites through Grayflag, so Grayflag does not respond differently to Do Not Track signals.
13. Changes
We may update this policy; the date and version above show the current one.
14. Contact
- Personal data: [email protected]
- Publisher: Louis Hubert Cottineau (TIN: 302340116), 5 Sairme Street, Tbilisi, Georgia