Confessio IA is a private confessional and journal. This policy explains honestly what data the app handles, for what purpose, and with which third parties, always distinguishing between local mode (offline) and cloud AI mode.
1.Who we are
This app, "Confessio IA," is developed and operated by [TODO: legal company or developer name], referred to below as "we." We are responsible for the processing of the data described in this policy.
- App: Confessio IA (iOS).
- Bundle ID:
com.confessio.confessioIa. - Controller / developer: [TODO: legal name].
- Contact: [TODO: support email] (see Section 10).
2.What data we collect and why
Confessio IA operates in two modes. What we process depends on the active mode.
2.1 Local mode (offline)
In local mode, the app runs entirely on your device, with no account and no sign-up. We do not collect any personal data, and nothing you write leaves your iPhone or iPad. Your sessions are stored in a locally encrypted Vault (see Section 8) that only you can access with Face ID or Touch ID.
2.2 Cloud AI mode (turned on by default)
When cloud AI mode is enabled, we process the following data:
| Data | Purpose | Linked to your identity? | Used for tracking? |
|---|---|---|---|
| User content: the free-form text you write (your confessions, dilemmas, and reflections) | To generate the response from the chosen profile (app functionality) | No. We do not use accounts, logins, email, or any user identifier. | No |
| IP address (transient) and a shared app token | To enable the connection to our server and limit abuse (rate limiting) | No. The IP address is used transiently and is not associated with a personal identity. | No |
Your text may touch on sensitive topics (for example, mental health, addiction, trauma, beliefs, or relationships), since the app is designed for you to write about what weighs on you. In cloud mode, that text is transmitted to our server and to the model provider (see Section 4) solely to produce the response. We do not collect that content as a structured "health data" field: it is part of the free-form text you choose to write, and it is used only for the app's functionality, never for analytics, advertising, or cross-app personalization.
2.3 What we do NOT collect
Confessio IA does not collect or use:
- Diagnostic data, crash reports, or usage analytics. The app does not integrate any analytics, telemetry, or advertising SDK.
- Advertising identifiers or any data used to track you across apps or websites.
- Location, camera, microphone, contacts, photos, or calendar. The app does not request those permissions.
- Health or fitness data as structured fields.
3.Legal basis and purpose of processing
We process the data described above for the following purposes and on the following bases:
- Providing the app's core functionality: in cloud mode, sending your text to our server to generate the profile's response. The basis is the performance of the service you request when using that feature and, where applicable, your consent by keeping cloud mode enabled (which you can withdraw by turning it off).
- Security and abuse prevention: transient use of the IP address and a shared token to enable the connection and limit misuse (legitimate interest in keeping the service operational and secure).
We do not process your data for advertising, commercial profiling, or the sale of data to third parties.
4.Third parties and subprocessors
No third party is involved in local mode. In cloud AI mode, the following are involved:
- Our server (our own backend). It receives your text over an encrypted connection (HTTPS) and forwards it to the model provider to generate the response. It does not retain the content of your text beyond the time needed to process the request.
- Gemma model on our own infrastructure. By default, the response is generated by a Gemma model we run on our own machines. In that case your text does not go through any external AI provider.
- Cloudflare (network). Traffic between the app, our server and our AI machines travels over Cloudflare's network, which acts as a connectivity and protection provider. Cloudflare does not use the content for other purposes. See their policy at https://www.cloudflare.com/privacypolicy/.
- Anthropic (Claude model), when used. When our own model is unavailable, our server may use Anthropic's Claude model to generate the response from your text. Anthropic acts as a processing provider under its own terms and privacy policy. Confessio IA is not officially affiliated with Anthropic. See their policy at https://www.anthropic.com/legal/privacy.
We do not use analytics, advertising, or social media providers as subprocessors.
5.Retention
- On your device: your sessions are stored in the locally encrypted Vault and remain there until you delete them. The "Burn Vault" feature erases all your sessions whenever you choose.
- In cloud mode: the text you send is processed to generate the response and is not retained beyond the request on our server. The IP address is handled transiently for rate limiting and is not stored in a way that is associated with your identity.
When Anthropic is involved, its processing of the text is governed by its own retention periods and terms (see Section 4).
6.Your rights and how to exercise them
Because the app uses no accounts and, for the most part, your data lives on your own device, you retain direct control:
- Access and portability: your sessions are on your device, inside the Vault. You can view them and copy or share your reflections whenever you like.
- Deletion: delete sessions individually or use "Burn Vault" to erase them all. Turning off cloud mode stops any text from being sent off your device.
- Objection / withdrawal of consent: turn off cloud AI mode at any time.
If you have questions or want to exercise any right applicable in your jurisdiction (access, rectification, erasure, objection, restriction, or portability), write to us at [TODO: support email]. We will respond within the timeframes required by applicable law.
7.Children
Confessio IA is intended for adults (rated 17+) and is not intended for children. It is not a "Made for Kids" app. We do not knowingly collect data from children. If you believe a minor has used the app and provided us with information, please contact us so we can take appropriate action.
8.Security
- Encrypted Vault on the device: your sessions are encrypted locally with AES-GCM.
- Key protection: the encryption key is stored in the iOS Keychain.
- Biometric unlock: access to the Vault is protected with Face ID or Touch ID, so that only you can get in.
- Encryption in transit: in cloud mode, the text travels encrypted via HTTPS/TLS.
No security measure is infallible, but we apply industry-standard encryption to protect your data both at rest (on the device) and in transit.
9.Changes to this policy
We may update this policy to reflect changes in the app or in the law. We will publish the current version at this same address and update the "Last updated" date. If the changes are significant, we will make reasonable efforts to notify you within the app.
10.Contact
For any questions about this policy or about your data, write to us at:
- Support email: [TODO: support email]
- Controller: [TODO: legal name]