Privacy Policy

Whatify: Mail & Bill Decoder · Updated 21 October 2026

The short version: your documents and results stay on your iPhone and in your own iCloud. To explain a document, Whatify sends its text, with card, account and Social Security numbers hidden on your phone first, to our server and on to OpenAI. We don't keep that text. No ads, no tracking, no selling data.

What stays on your iPhone

Scans, photos, the text read from them, the explanations, your Due list, reminders and questions are stored on your device. If iCloud is on for Whatify, they sync through your own private iCloud database, which only you can read. We can't see it.

What is sent to explain a document

Text recognition happens on your phone. Before anything leaves it, Whatify replaces card numbers, Social Security and taxpayer numbers, and long account or routing numbers with their last four digits. Only after you agree in the app does it send that text (and, only if you choose "Send the photo" for a hard-to-read page, a photo with those numbers blacked out) to our server, which passes it to OpenAI to write the explanation or answer your question.

• Our server holds the text only while the request runs. It is not stored and not written to logs.
• We send it to OpenAI's API with storage switched off. OpenAI does not use API data to train its models. It may keep API requests for up to 30 days to detect abuse, then deletes them (OpenAI's API data policy).
• You can turn this off any time in Settings → AI processing. Samples and everything already on your phone keep working.

What our server keeps

• A random account ID, and a public key from Apple's App Attest that proves requests come from the real app on a real iPhone.
• If you use Sign in with Apple: Apple's anonymous user identifier for Whatify. We don't ask Apple for your name or email.
• Your subscription status, as reported by Apple (we never see payment details).
• Counts for each explanation or question: when it happened, which AI model, how many tokens and what it cost. Never the content.
• Apple DeviceCheck: two bits Apple stores for your device, used only to limit how many free accounts one iPhone can make each month.

Your IP address is used briefly to stop abuse (rate limiting) and may appear in our hosting provider's (Railway) short-lived request logs.

What we don't do

No advertising, no third-party analytics or tracking SDKs, no selling or sharing data, no access to your bank or accounts. Whatify never pays bills or asks for passwords.

Deleting your data

Settings → Delete account and data removes everything on your phone and deletes your account and usage records from our server immediately. To also remove the iCloud copy, delete it in iOS Settings → [your name] → iCloud → Manage Storage. A subscription is managed by Apple: cancel it in iOS Settings → [your name] → Subscriptions.

Children

Whatify is not directed at children under 13 and we don't knowingly collect their data.

Changes and contact

If this policy changes we'll update this page and the date above. Questions: alec@caelagent.com.