Privacy policy

Short version: the app collects nothing, sends nothing and has no permission to reach a network. This page explains that in enough detail to satisfy a hospital compliance officer.

1. The app

The app collects no personal data of any kind. This is not a policy choice that could quietly be reversed later. It is a property of how the app is built:

No network permission. The app ships without any network entitlement, and a build-phase audit plus a network-denied device test confirm it before every release. It cannot make a request.
No servers. We operate no server that the app talks to, because there is nothing for it to talk to.
No third-party code. No analytics library, no crash reporting service, no advertising framework, no attribution kit, no remote configuration, no fonts loaded from anywhere. The absence is verified against the shipped binary.
No account. No login, no email address, no phone number, no sign-in with anything. The app opens and works.
No identifiers. No advertising identifier, no device fingerprint, no installation ID.
No tracking, ever. The app store privacy declaration is Data Not Collected in every category, and tracking is declared as false.

2. What stays on the iPhone

The app stores things so that it can be useful. All of it lives in the app's own storage on that device.

The words and phrases you save.
Details you choose to enter in About me: your name, the people you want to be able to name, your doctor, your address, your phone number, your job.
Optionally, the names of medicines and allergies — names only.
Optionally, in a section marked only if you want, a date of birth and an insurance number, because people report being asked for both at every appointment.
Your settings: chosen voice, speaking rate, sentence style, and the four-digit editing lock.
If, and only if, you switch it on: a log of what was tapped and what was spoken, with timestamps, for a communication trial.

None of it is transmitted anywhere. It is included in your iPhone's own backup, if you make one, under Apple's terms rather than ours.

3. What is deliberately not stored

The app stores no diagnosis, no dose and no clinical record.

Medicine and allergy names are stored only as names, only if you type them, and only on that iPhone. There is no field for a dose, a schedule, a condition or a clinical note, on purpose. It is a communication aid, not a health record.

The app also has no microphone permission, no speech recognition permission, no photo library permission, no contacts permission, no location permission and no health data access. It does not link to HealthKit and does not use iCloud.

4. How sentences are made

Candidate sentences are generated by Apple's on-device Foundation Models, running on the iPhone itself. The words you tapped are not sent to us, to Apple's servers, or to any other company. Generation works with the device in aeroplane mode, which is a simple way to verify the claim yourself.

On devices that cannot run those models, a deterministic rule-based expander built into the app produces the options instead. That path involves no model at all.

You can switch sentence generation off entirely in Settings. The app then uses only your saved phrases, your typed words and the rule-based expander.

5. Speech and Personal Voice

Speech uses Apple's on-device speech synthesiser. Nothing is sent anywhere to be spoken, and no audio is uploaded, recorded or stored by the app.

If you have created an Apple Personal Voice, the app asks Apple for permission to speak with it. Apple's rules allow an app to speak using a Personal Voice through the speaker or during a call, but do not allow an app to capture that audio. The app does not attempt to. It never accesses, copies, exports or stores your Personal Voice.

6. Purchases

There are none. The app is free on the App Store, with everything included: no purchase, no subscription, no in-app purchase and no trial. So there is no payment information anywhere — we never see your name, your payment details or your billing address, because nothing is ever bought. Apple reports aggregate download figures to us, in the same way it does for every app developer.

7. Age category

Where a platform or a law requires it, the app may ask the operating system for a broad age category. The answer is used immediately to make one decision and is then discarded. It is never stored, never logged and never transmitted. The app does not ask you for your date of birth for this purpose. The optional date of birth in About me exists only so that you can say it out loud at a reception desk, and is never used for anything else.

8. Diagnostics and crash reports

Two things exist here, and both are under your control.

Apple's crash reporting. If you have opted in to share analytics with app developers in your iPhone's own settings, Apple may make crash reports available to us. That is an operating system feature that you switch on or off in Settings → Privacy & Security → Analytics & Improvements. It contains no message content. We add no code to enable it and cannot enable it for you.
Local diagnostic files. The app writes a small number of technical performance files to its own storage, excluded from backup and deleted after 30 days. They are never transmitted. If you want to send one to us with a support email, there is a button that opens the standard share sheet so you can attach it yourself. That requires a deliberate human action every time. There is no automatic upload path, because there is no network permission.

9. Backup, export and deletion

Export. Everything you have created can be exported as a single file through the iOS share sheet, at any time. It is your vocabulary and it goes with you.

Deletion. Deleting an item deletes it. Deleting the app deletes everything the app stored on that device. There is no server copy to request the deletion of, because there is no server. There is no account to close.

Data rights. Rights such as access, correction, portability and erasure under laws including the United Kingdom and European Union General Data Protection Regulation, and the California Consumer Privacy Act, are satisfied directly on the device: you hold the only copy, you can read it, edit it, export it and destroy it without asking us. We cannot access your data, produce it in response to a legal demand, or restore it if you delete it.

10. If you email us

Email is the only place any of your information can reach us, and only because you sent it.

We receive whatever you put in the message: your email address, your name if you sign it, and anything you attach.
We use it to answer you, and for nothing else.
We do not add you to a mailing list, and there is no mailing list.
We do not sell, rent or share it.
Support correspondence is deleted within 12 months unless you have asked us to keep an open issue on file.
Please do not email medical details. We do not need them and would rather not hold them.

11. Children

The app is designed for adults who have lost their speech. It is not directed at children and we knowingly collect nothing from anyone, of any age, because we collect nothing at all.

12. This website

A separate, shorter policy, because a website is not an app.

No cookies. This site sets none.
No analytics. No page-view counter, no tag manager, no pixel, no session recording, no heat map.
No third-party requests. No web fonts, no hosted scripts, no embedded videos, no social buttons, no advertising networks. Everything the page needs is served from this site, so no other company learns that you visited it.
No forms, no sign-up, no newsletter. There is nowhere to type anything.
Server logs. Whoever hosts this site will keep ordinary web server logs, typically including IP addresses, for a short period, for security and abuse prevention. That is a property of how the internet works rather than a choice to gather data, and we do not analyse those logs for marketing.
Outbound links. Links to other organisations go to sites with their own policies, which we do not control. Following one tells that site you came from here.

13. Changes to this policy

If this policy changes, the date at the top changes with it, and the substance of what changed will be stated plainly rather than buried in a rewrite. The commitments in section 1 are structural: they cannot be reversed without shipping a materially different app, and doing so silently would be a lie we are not willing to tell.

Questions about this policy: singhanhad78@gmail.com.