Privacy Policy

Privacy at a glance

• Your message goes to AI only when you ask. Tactly needs your permission before it sends the message you paste to an AI model from OpenAI, Google, or DeepSeek through OpenRouter. The companies that handle your message aren’t allowed to store it or use it for training. You can remove your permission at any time in Settings → AI permission.
• No account needed. You can use Tactly without signing in. If you sign in with Apple, we keep the user ID Apple creates for Tactly, your email address and a count of the free replies you’ve used.
• History is off until you turn it on, and it stays on your iPhone. So do your saved replies. We can’t see either.
• Usage statistics never include your messages or replies. You can turn them off in Settings.
• No ads, no tracking across apps, no selling your data. Tactly makes money from Tactly Pro subscriptions, not from your information.
• You’re in control. Clear your History and saved replies, or delete your account, right in the app. Deleting your account removes your account record; section 14 lists what stays, including the count of free replies, which is kept for 12 more months.

1. Who we are

Tactly is made by Aleksandr Rozhkov (“we”, “us”). We decide how the information described in this policy is used, and we’re responsible for it. You can reach us at team.tactlyapp@gmail.com.

This policy doesn’t cover Apple services that you use with Tactly: the App Store and its payments, Sign in with Apple and iCloud. Apple’s privacy policy applies to them.

The rules for using Tactly, including Tactly Pro subscriptions, are in our Terms of Use.

2. The messages you paste

Tactly writes your replies with AI models, so it has to send the message you paste to an AI model.

When it’s sent. Only when you tap Generate 3 replies or Regenerate, tap Try again after an error, or choose a Rewrite option such as Shorter. It’s never sent without your permission. If you haven’t given permission, Tactly asks first: before it sends your message, it shows a window that explains where the message goes. The message is then sent only if you tap Allow and continue. If you tap Not now, nothing is sent. You can also give or remove this permission in Settings → AI permission (section 14). Typing or pasting a message never sends it.

What’s sent:

• the message you paste;
• the goal, tone and situation you chose;
• your iPhone’s language and region setting, as a hint for the language of the replies;
• for a rewrite, the reply you’re rewriting and the option you chose.

Our server also receives a random device ID, your IP address and, if you’re signed in, a sign-in token that identifies your account. It uses them to limit the number of requests and to count free replies (section 9). The device ID also appears, in hashed form, in its technical logs (section 10). Each request for replies also carries the version of your AI permission. It tells our server which AI companies your permission covers, so the server sends your message only to those companies’ models. The version also appears in the server’s technical logs (section 10). None of this goes to OpenRouter or the AI model providers: they receive only what’s needed to write the replies. Because our server, not your iPhone, sends them the request, they don’t receive your account details or your IP address.

Who receives it:

1. Our server passes your message on. It runs on Supabase, in the data center closest to you; our account database is in the United States. The server doesn’t store your message or the replies, and it doesn’t write them to its logs.

2. OpenRouter (United States) sends your message to an AI model. OpenRouter doesn’t store your message or the replies. It keeps technical details about each request, such as its size, how long it took and its cost. It may also automatically sort a small sample of requests by topic for its usage statistics, and it keeps only the topic, not linked to Tactly or to you.

3. An AI model writes the replies. It’s a model from one of the companies named when you give permission: OpenAI, Google, or DeepSeek. Which company’s systems process your message depends on the model:

   • OpenAI’s models run on Microsoft Azure, in the United States, the European Union or other regions;
   • Google’s Gemini models run on Google Cloud (Vertex AI), in the United States, the European Union or other regions;
   • DeepSeek’s models run on DeepInfra, in the United States.

   Your message goes to one model. If that model doesn’t answer, our server sends your message to a backup model, so both may receive it. Today, with our settings, OpenAI’s models are available to us only on Microsoft Azure and DeepSeek’s only on DeepInfra, so OpenAI and DeepSeek themselves don’t receive your message.

What they may keep. We use OpenRouter’s zero data retention setting. With it, your message goes only to model providers that OpenRouter lists as not storing messages or replies for any period of time. While a provider processes your message, it may hold it in temporary memory, for example in a cache that clears automatically. Some providers’ systems also check requests for misuse automatically as they’re processed.

Neither OpenRouter nor the model providers may use your messages or replies to train AI models. Tactly doesn’t train AI models either.

Information about other people. Messages you paste often include details about other people, such as the sender’s name. We use them only to write your replies, never to contact those people or to build profiles about them. Paste only what you need for a good reply. You can remove names, phone numbers or other details first, and Tactly will still work.

Sensitive information. Tactly doesn’t ask for sensitive information, such as health or financial details. If a message you paste includes it, it’s used only to write your replies, and Tactly keeps it only if you’ve turned on History (section 3).

3. History and saved replies

History and saved replies are available when you’re signed in.

History is off until you turn it on in Settings → History. When it’s on, Tactly keeps each message you paste together with the replies you get, the goal, tone and situation you chose, and the time, so you can come back to them.

• Entries older than 12 months are hidden, and Tactly deletes them from your iPhone the next time you use the app.
• On the free plan, History keeps only a limited number of your most recent entries. Older ones are deleted as new ones arrive.
• Turning History off stops new entries from being saved. Existing entries stay until they expire or you clear them.

Saved replies are the replies you choose to save. They stay until you delete them. A saved reply doesn’t include the original message.

Where they’re stored. On your iPhone, in Tactly’s app storage, protected by iOS encryption. Like other app data, they’re also included in your iPhone backups if you use iCloud Backup or back up to a computer. They’re never sent to our servers, so we can’t see them or restore them for you.

Deleting them:

• Delete saved replies one at a time, or use Settings → Clear all history or Clear all saved replies.
• Signing out keeps them on this iPhone, so they’re there when you sign back in.
• Deleting your account erases them from this iPhone.
• Deleting the app deletes them too, although copies may remain in older iPhone backups.

4. Your account

You can use Tactly without an account, in Guest Mode. An account lets you use History and saved replies, and links Tactly Pro to you. You can create an account only with Sign in with Apple.

When you sign in, Apple gives Tactly:

• a unique user ID that Apple creates just for Tactly (it isn’t your Apple Account itself);
• your email address, or a private relay address if you choose Hide My Email;
• your name, but only the first time you sign in, and only if you choose to share it.

We keep the Apple user ID and email address in your account record with our sign-in provider, Supabase, and give your account a random account ID. We use them to sign you in, to keep each account’s History and saved replies apart on a shared iPhone, and to link your purchases to your account. Our server also uses a hashed form of the Apple user ID to count your free replies, and keeps that count for 12 months after you delete your account (section 9).

While you’re signed in, Supabase also keeps a record of your sign-in session, including the IP address and device type it was last used from. The record is deleted when you sign out or delete your account.

Tactly doesn’t currently keep your name. If we start using it, for example to show it in your account, we’ll update this policy first. We don’t send you marketing emails.

5. Usage statistics

To understand how Tactly is used and to improve it, the app sends usage statistics to Google Analytics for Firebase (Google). For example:

• that the app was opened, a message was pasted or typed, replies were generated, copied or saved, or a feature was used;
• the goal and tone you picked, the approximate length of your message (a size range, not the text), whether something worked, and any errors;
• steps and results of a purchase, such as opening the Tactly Pro screen or buying a plan, with the product and its price;
• your plan: guest, free or Pro;
• details about your device and the app: iPhone model, iOS and app versions, and language;
• approximate location, such as country or city, which Google works out from your IP address without storing the address;
• a random analytics ID for this installation of the app.

Never included: the messages you paste, the replies you get, your name, your email address, your Apple user ID or your account ID. We don’t link statistics to your account.

Turning it off. Go to Settings → Analytics & improvements and turn off Help improve Tactly.

• After you turn it off, no more statistics are sent from this iPhone. The setting stays off after you sign out or delete your account.
• Statistics already sent aren’t deleted.
• It doesn’t turn off crash reports (section 6) or app configuration (section 7).

How long. Google keeps detailed statistics for up to 14 months. After that, only totals remain. The random analytics ID is reset when you sign out or delete your account.

6. Crash reports

If Tactly crashes, it sends a crash report to Firebase Crashlytics (Google) so we can fix the problem. A report includes:

• technical details about the crash;
• your iPhone model, iOS and app versions, free memory and storage;
• a random crash-reporting ID and the Firebase installation ID (section 7);
• the app’s state, such as your plan;
• if usage statistics are on, the last few usage events before the crash.

Crash reports never include your messages or replies. Google keeps them for 90 days and then deletes them. Crash reports are sent even when Help improve Tactly is off.

If you’ve turned on Share With App Developers in your iPhone’s settings (Privacy & Security → Analytics & Improvements), Apple may also share crash and usage information with us in a form that doesn’t identify you.

7. App configuration

Tactly uses Firebase Remote Config (Google) to receive settings, such as limits and texts, without an app update. When it checks for new settings, at most once an hour, it sends Google:

• a Firebase installation ID, a random ID separate from the analytics ID;
• the app’s ID and version;
• your iOS version, language, region and time zone;
• your plan (guest, free or Pro) and when you first opened the app.

This doesn’t include your messages or account details. It can’t be turned off, because the app needs these settings to work. Google keeps the installation ID while Tactly uses Firebase. It identifies the app installation, not you.

8. Purchases

Tactly Pro is sold through the App Store. Apple handles payment, and we never see your payment details. When you buy while you’re signed in, Apple also receives your random account ID, so the purchase is linked to your account.

To check and restore your subscription, and to report on sales, Tactly uses RevenueCat (United States). RevenueCat receives:

• your purchase and subscription history from the App Store;
• a customer ID: a random ID, or your account ID if you’re signed in;
• your iPhone’s identifier for vendor (IDFV), an ID that Apple gives to all apps from the same developer on a device. RevenueCat’s software sends it with every request;
• your device type, iOS and app versions, preferred languages and App Store country.

RevenueCat doesn’t receive your messages, name or email address.

When a signed-in account has used up its free replies, our server checks with RevenueCat, using your account ID, whether the account has Tactly Pro.

When you delete your account, we ask RevenueCat to delete the customer record stored under your account ID. Tactly on your iPhone then continues under a new random customer ID (section 14).

9. Protection against abuse

To keep Tactly free to try and to stop automated misuse, Tactly uses the following.

A random device ID. Tactly creates it and keeps it in your iPhone’s Keychain.

• It’s sent with each reply request.
• Our server turns it into a one-way hash right away. The hash is used to count requests per hour, in a counter that expires within 2 hours of your last request, and appears in our technical logs (section 10).
• The ID isn’t part of your account record and isn’t deleted with it. iOS usually keeps it even if you delete the app, so limits can’t be reset by reinstalling.

Your IP address. Our server also counts reply requests per IP address. It hashes the address and keeps the hash in a counter that expires within 2 hours of your last request. Separately, our server provider’s logs keep IP addresses for up to 7 days (section 10).

A count of free replies. Tactly counts how many free replies you’ve used.

• In Guest Mode, the count is kept on your iPhone, in its Keychain. iOS usually keeps it after you reinstall the app.
• When you’re signed in, our server keeps the count. The count isn’t part of your account record. It’s stored separately, with a hashed form of your Apple user ID. The hash is made with a secret key that stays on our server. It lets the server recognize the same Apple Account if you sign in again, so that deleting an account doesn’t reset the free limit.
• The server’s record doesn’t include your email address or any of your messages or replies. It’s kept for 12 months after you delete your account and is then deleted (sections 13 and 14).
• If you sign in again with the same Apple Account within those 12 months, your new account continues the old count. After 12 months, a new account starts from zero.
• Your iPhone also keeps a copy of your account’s count, in its Keychain.

10. Technical logs

For each reply request, our server writes one line to its logs. It contains:

• the time and a random ID for the request;
• the hashed device ID;
• the goal and tone you chose, and your language and region setting;
• the version of your AI permission;
• which AI model answered, how long it took and what it cost;
• any error.

These logs never contain your message or the replies.

When the app connects to any service in this policy, that service receives your iPhone’s IP address as part of the connection. Our server provider, Supabase, keeps standard access and sign-in logs for up to 7 days, for security and troubleshooting. These logs can include your IP address, approximate location and device type.

11. What we don’t do

• We don’t show ads, and we don’t sell your personal information or share it for advertising.
• We don’t track you across other companies’ apps and websites, and we don’t use the advertising identifier. That’s why Tactly never asks for tracking permission.
• We don’t ask for access to your contacts, photos, location, microphone, camera, email or messages.
• Tactly doesn’t read your clipboard on its own. It reads it only when you tap Paste.
• We don’t train AI models on your messages.

Tactly makes money from Tactly Pro subscriptions, not from your information.

12. Who we share information with

We share information only with the service providers below, which handle it on our behalf to run Tactly, and in the other ways described in this policy.

Apart from OpenRouter’s topic statistics (section 2), each of these providers processes your information only to provide its service to us. It does so under data protection terms that require it to keep your information secure and to give it the same or equal protection as this policy. Google Cloud, Microsoft Azure and DeepInfra work under such terms with OpenRouter, which uses them to run the models for us.

Apple handles the App Store, payments, Sign in with Apple and iCloud under its own privacy policy. When you delete your account, our server also exchanges a one-time code with Apple (section 14). When you email us, for example with Help & feedback, which adds your app and iOS versions to the email, the email goes through Gmail. Google hosts it under its own privacy policy.

We may also disclose information if the law requires it, or when it’s necessary to protect the safety, rights or property of our users, the public or Tactly, or to prevent fraud and abuse.

If Tactly is ever sold or transferred to someone else, this policy will continue to apply to the information we hold, and we’ll tell you on this page before anything changes.

13. How long we keep information

14. Your choices and rights

You don’t need an account or contact details to use Tactly. To write replies, it needs the message you paste, and signing in is optional.

Choices in the app:

• Sending your message. Tactly sends a message to AI only with your permission, only when you generate, regenerate or rewrite replies, and never in the background.
  • To give permission, tap Allow and continue in the window Tactly shows when it needs your permission, or choose Allowed in Settings → AI permission.
  • To remove your permission at any time, go to Settings → AI permission and choose Ask first. After that, Tactly asks again before it sends a message to AI.
  • If replies are being written when you choose Ask first, Tactly doesn’t show or save them. In most cases the message for those replies has already left your iPhone, and our server, OpenRouter and the AI model providers may still finish processing it.
  • Messages already sent aren’t affected and can’t be recalled. Section 2 explains what the companies that handle them may keep.
  • Choosing Allowed or Ask first doesn’t send any message to AI.
  • Your choice is saved on this iPhone, not in your account. Signing out or deleting your account doesn’t change it. Like other app settings, it’s included in your iPhone backups, so restoring a backup restores the choice saved in it.
• History. Off by default. Turn it on or off in Settings → History, and delete it with Settings → Clear all history.
• Saved replies. Delete them one at a time or with Settings → Clear all saved replies.
• Usage statistics. Settings → Analytics & improvements → Help improve Tactly.
• Your account. Open the menu, tap your account at the bottom, and choose Delete account. Tactly asks you to confirm.
  • iOS may then ask you to confirm with Sign in with Apple. If you cancel, nothing is deleted. If you confirm, Apple gives Tactly a one-time code. Our server sends the code to Apple to check that it comes from the Apple Account you signed in with, and to ask Apple to end Tactly’s sign-in connection with that account. The server doesn’t keep the code or the tokens Apple returns.
  • Deleting your account removes your account record from our server right away (backup copies are deleted within 7 days) and erases your History and saved replies on this iPhone.
  • We also ask RevenueCat to delete the customer record stored under your account ID.
  • Deleting your account doesn’t delete the count of free replies you’ve used. It’s kept for 12 more months (see below).
  • Deleting your account doesn’t cancel a Tactly Pro subscription. Cancel it before you delete your account, with Manage subscription in Tactly or in your iPhone’s subscription settings.
  • If iOS doesn’t ask, or Apple can’t be reached, your account is still deleted, but the sign-in connection between Tactly and your Apple Account may stay until you remove it (see Sign in with Apple below).
• Sign in with Apple. You can disconnect Tactly from your Apple Account in the iPhone’s Settings app (not Tactly’s Settings): tap your name, then Sign in with Apple, choose Tactly, tap Delete and confirm. These steps are for current versions of iOS and can differ in older ones; see Apple’s guide. This only disconnects Tactly from your Apple Account. It doesn’t delete your Tactly account; to do that, use Delete account.

What remains after you delete your account:

• copies of your account record in our database backups, deleted within 7 days;
• the count of free replies your account used, kept with a hashed form of your Apple user ID for 12 months and then deleted; backup copies are removed within 7 days after that (sections 9 and 13);
• the hashed device ID and hashed IP address in request counters (up to 2 hours after your last request), the hashed device ID in server logs (up to 7 days), your IP address in our server provider’s logs (up to 7 days), and the random device ID on your iPhone (sections 9 and 10);
• a note on this iPhone of the deleted account’s random ID, which stops its History and saved replies from coming back;
• your Help improve Tactly choice and your AI permission choice, on this iPhone;
• usage statistics already sent (up to 14 months) and crash reports (90 days), which aren’t linked to your account;
• OpenRouter’s request details, which don’t include message text;
• purchase records kept by Apple, including the random account ID attached to purchases you made while signed in (section 8);
• RevenueCat’s records: the customer record under your account ID, until RevenueCat finishes deleting it. Tactly on this iPhone then continues under a new random customer ID, and RevenueCat still receives the identifier for vendor (section 8). If your subscription is still active, or you restore purchases later, RevenueCat records the purchase again under the new customer ID. If you’re still signed in on another iPhone, Tactly there can create the record again until that iPhone is signed out. We check for such records and delete them;
• the sign-in connection between Tactly and your Apple Account, if it wasn’t ended when your account was deleted — for example, if Apple couldn’t be reached, or we deleted the account after an email request. You can remove it yourself (see Sign in with Apple above);
• History and saved replies on other iPhones where you used the account, until you delete Tactly from them.

Your rights. Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy, including in a portable format;
• correct it or delete it;
• restrict how we use it, or object to it, including use based on our legitimate interests;
• withdraw a permission or consent you’ve given. For sending messages to AI, choose Ask first in Settings → AI permission (see Sending your message above);
• complain to your data protection authority.

To make a request, email us at team.tactlyapp@gmail.com. We’ll reply within 30 days. To protect your account, we may need to confirm that a request comes from you before we act on it. We won’t treat you differently for using your rights.

Keep in mind:

• Your History and saved replies are on your iPhone, not on our servers. You can view and delete them yourself, and we don’t have a copy.
• Usage statistics and crash reports aren’t linked to your name, email address or account, so we usually can’t find yours to send you a copy or delete them. They’re deleted automatically (sections 5 and 6).
• The count of free replies isn’t stored under your name or email address, and it’s deleted automatically 12 months after you delete your account. While you have an account, we can find your count from your account. After you delete it, we can find the count only if you sign in again with the same Apple Account.

Tactly uses AI to suggest replies. It doesn’t make decisions about you that have legal or similarly significant effects.

15. Legal bases (EEA and UK)

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases:

16. International transfers

Our service providers are based in the United States and process information in the United States, the European Union and other countries. These countries may have different data protection laws than where you live. Where the law requires it, these transfers rely on safeguards in our providers’ data protection terms, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. You can ask us for a copy of these safeguards.

17. Security

We protect your information in several ways:

• every connection is encrypted (HTTPS);
• our server provider encrypts the account data it stores;
• iOS Data Protection encrypts History and saved replies on your iPhone;
• the iPhone Keychain holds IDs and sign-in tokens;
• secret keys stay on our server, and access to our systems is limited.

No system is perfectly secure, which is one more reason we collect as little as possible. If a breach affects your information, we’ll notify you and the authorities as the law requires.

18. Children

Tactly isn’t for children under 13, and we don’t knowingly collect personal information from them. If you’re under 18, you need permission from a parent or guardian to use Tactly. If you believe a child under 13 has used Tactly, email us and we’ll delete the information we hold, including the count of free replies.

19. US state privacy laws

We don’t sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, as those terms are defined in US state privacy laws. Wherever you live, you can make the requests described in section 14.

20. The tactly.app website

The website doesn’t use analytics, advertising trackers or cookies.

• It’s hosted by Cloudflare, which processes technical information to deliver and protect the site, such as your IP address, browser details and the page requested.
• Your appearance choice (System, Light or Dark) is saved in your browser and isn’t sent to us.
• The website doesn’t track you, so a Do Not Track signal has nothing to turn off.
• Links to Instagram and TikTok lead to services with their own privacy policies.

21. Changes to this policy

When Tactly changes, we’ll update this policy and the date at the top. If a change affects how your information is used, we’ll say so on this page before it takes effect. If we start using AI models from a company that isn’t named when you give permission, Tactly will ask for your permission again, and your messages won’t go to that company’s models until you allow it. We keep previous versions of this policy and can send them on request.

22. Contact

Questions or requests about privacy: team.tactlyapp@gmail.com.