Privacy policy
Who is responsible
WristPrompt is made and operated by its developer (“we”). Contact: i2p30mk+wristprompt@gmail.com.
In short
- There is no WristPrompt account and no WristPrompt server. Your questions go from your iPhone straight to OpenAI.
- Questions are handled by OpenAI under your own OpenAI account (your ChatGPT plan or your API key) and under OpenAI's own privacy policy: openai.com/policies/privacy-policy.
- Your conversation history stays on your iPhone and Apple Watch. It is separate from your ChatGPT history and memory; WristPrompt does not write to them.
- Your API key and sign-in tokens are kept only in the iPhone Keychain.
- No ads, no tracking and no analytics of what you ask. The only data that can leave your devices besides your questions to OpenAI is a scrubbed crash and error report (see "Error reporting"), which you can switch off.
What the app handles
Each item below says what the data is, where it goes, how long it stays and how you delete it. "Leaves the device" means leaves your own iPhone and Apple Watch.
Your questions
- What
- The text you dictate or type on the watch.
- Leaves the device
- Sent from your iPhone to OpenAI over HTTPS, only after you press Send and only after you allowed sending for that connection. It goes to OpenAI's API for an API key connection, or to the ChatGPT plan endpoint for a plan connection.
- How long
- On your devices as conversation history (see "History on the iPhone"). At OpenAI under your own OpenAI account and OpenAI's terms.
- How to delete
- Delete the conversation or all data in the app. Data held by OpenAI is managed in your OpenAI account.
Earlier turns sent as context
- What
- When you ask a follow-up, the earlier questions and answers of the same conversation are sent with it, cut to a size limit.
- Leaves the device
- To OpenAI together with the question, by the same route. Never to a different connection unless you allow it for that conversation.
- How long
- Not kept anywhere beyond the request on your device. At OpenAI as in the item above.
- How to delete
- As above.
History on the iPhone
- What
- Questions, answers, status, the model used and which connection produced each turn.
- Leaves the device
- Nowhere. It stays in the app's storage on the iPhone, protected by iOS data protection.
- How long
- Until you delete it. The app does not delete history on a timer.
- How to delete
- Delete one conversation or all data in the app; deleting the app removes it. Removing a connection keeps history. It is excluded from device backups and is not in iCloud.
Watch cache
- What
- The latest conversations (at most 10), so that you can read them on the watch.
- Leaves the device
- Only between the watch and your paired iPhone.
- How long
- Capped; the oldest are dropped first. Wiped when the iPhone wipes.
- How to delete
- Delete on the iPhone, or delete the watch app. Excluded from backups; not in iCloud.
Answers
- What
- The answer text streamed from OpenAI.
- Leaves the device
- Received from OpenAI. Sent back only as context for a follow-up (see above).
- How long
- As history on the iPhone and the watch cache.
- How to delete
- As history.
Connection details
- What
- A label, the connection type (plan or API key), billing source, status, the OpenAI account or workspace id, creation date and your consent record. No secret.
- Leaves the device
- Nowhere. The watch gets only a summary (label, type, status, model), never the account id.
- How long
- Until you remove the connection.
- How to delete
- Remove the connection in the app, or delete the app. Excluded from backups.
Model list
- What
- The list of models your account can use, fetched from OpenAI with your connection.
- Leaves the device
- The request goes to OpenAI with your credential.
- How long
- In memory only, until the app quits or you sign out.
- How to delete
- Sign out, remove the connection, or quit the app.
Watch to iPhone transfer
- What
- Requests, answer events and cache updates sent between your watch and your iPhone with Apple's WatchConnectivity.
- Leaves the device
- Only between your own paired devices. Never a secret, token or account id.
- How long
- Not kept by the bridge beyond short duplicate-detection records.
- How to delete
- Ends with the request.
Your API key and sign-in tokens
- What
- Your OpenAI API key, or the tokens from signing in with ChatGPT.
- Leaves the device
- Stored only in the iPhone Keychain of this device (not synchronized, not in backups, not in iCloud Keychain). Sent only to OpenAI as the credential of your own request. Never to the watch, a log, preferences or an error report.
- How long
- Until you sign out, replace the key or remove the connection.
- How to delete
- Sign out, replace the key or remove the connection in the app; delete the app.
Dictation
- What
- The watch uses Apple's system dictation. WristPrompt has no microphone or speech-recognition access of its own.
- Leaves the device
- WristPrompt receives only the finished text. What Apple's dictation does is governed by Apple's terms.
- How long
- -
- How to delete
- -
Read aloud
- What
- If the feature is available in your version, the answer is spoken by the watch's own speech synthesizer.
- Leaves the device
- Nothing is sent by WristPrompt; the speech happens on the watch.
- How long
- Nothing is kept beyond the utterance.
- How to delete
- Stop, or leave the screen.
Local diagnostics
- What
- Technical events from a closed list (event kinds, error cases, HTTP status, reachability, short request references). No question or answer text.
- Leaves the device
- Only when you choose to export the file and send it somewhere yourself.
- How long
- A limited log; the oldest entries are dropped.
- How to delete
- Delete all data in the app; delete the app. Excluded from backups.
Error reporting
- What
- Crash reports and a short list of handled errors on the iPhone, scrubbed: no user, no IP address, no sessions, no tracing, no replay, no breadcrumbs. The watch app does not report.
- Leaves the device
- To Sentry (EU region) when a crash or reportable error happens, while the switch in Settings is on. It is on by default and you can switch it off.
- How long
- Sentry's retention period for the project, which the developer sets.
- How to delete
- Switch it off in Settings (takes effect from the next launch). To have reports deleted, use the contact below.
Value-validation timings
- What
- Content-free timings used in development builds only.
- Leaves the device
- Not in the released app; in development builds only when the tester exports them.
- How long
- Capped.
- How to delete
- Clear in the export screen; delete the app.
Consent records
- What
- Your permission to send questions to OpenAI for a connection, and your permission to hand history to another connection for one conversation.
- Leaves the device
- Nowhere.
- How long
- With the connection or the conversation.
- How to delete
- Withdraw on the connection screen; remove the connection; delete the conversation.
App preferences
- What
- Small settings stored by iOS and watchOS for the app: the watch model per connection, the error-reporting switch, deleted-conversation markers, the read-aloud switch and the selected tab.
- Leaves the device
- Nowhere. No content, no secret.
- How long
- Until you change the setting or delete the app.
- How to delete
- Change the setting, delete all data, or delete the app. These preferences can be part of a device backup.
Signing in with ChatGPT
- What
- The sign-in page is run by OpenAI in the system browser. You sign in with OpenAI directly.
- Leaves the device
- WristPrompt receives only an authorization code and stores the resulting tokens (see "Your API key and sign-in tokens").
- How long
- OpenAI's and Safari's.
- How to delete
- Sign out in the app; manage the session at OpenAI and in Safari.
Opening legal pages and OpenAI's policy
- What
- The app opens these pages in the system browser.
- Leaves the device
- Your browser loads the page; WristPrompt sends nothing with it.
- How long
- -
- How to delete
- -
Deleting your data
- One conversation: delete it in the app. Everything on the iPhone and the watch cache follows.
- A connection: remove it in the app. Its API key or tokens are deleted from the Keychain.
- Everything: use "Delete all data" in the app Settings (iPhone and watch), or delete the app.
- Data at OpenAI (questions you sent and answers you received) is managed in your OpenAI account, not in WristPrompt.
This website
This site is static. It sets no cookies, runs no scripts, loads nothing from other sites and uses no analytics. Like any web host, the hosting provider (Vercel) processes standard request data, such as IP address, time, requested page and browser type, in its server logs to deliver the site and keep it safe. We do not use these logs ourselves for tracking.
Changes
When this policy changes, the date at the top changes. If a change affects what is sent to OpenAI, the app asks for your permission again before it sends anything.
Contact
Questions or requests about your data: i2p30mk+wristprompt@gmail.com.