Privacy Policy

Repaired is built around one rule: what you tell your AI stays between you and your AI. Nothing crosses to the other person without your explicit approval. We don't run ads, we don't use analytics trackers, and we never sell your data. You can see, export, and delete everything we hold about you.

Your account: an email address, an optional name, and — if you sign up with a password — that password stored only as a secure hash. If you use Sign in with Apple or Google, we never see your password at all.

Your content: your private conversations with your AI, the points you draft, the people you add (their name and your relationship to them), chats you choose to import, and messages in shared sessions you join.

Your device: a push notification token (so reminders can reach you) and your settings, like quiet hours and timezone.

If — and only if — you agree to it, an advertising identifier used to measure our ads. See “How we measure our ads” below.

When you talk instead of type, audio streams from your phone directly to our speech-to-text provider (Soniox) and is transcribed on the fly. The audio is never stored and never touches our servers — only the resulting text arrives, as an ordinary message.

To generate replies, your messages and relevant context are sent to Anthropic, the company behind the Claude models, under terms that don't allow them to train on your data. We keep diagnostic logs of these AI requests so we can fix things when the AI misbehaves; they're deleted along with your account.

Nothing, by default. Your private conversations, your drafts, and your AI's internal notes never cross to the other person — and theirs never cross to you. The only things that cross are what you explicitly approve: points you choose to bring, context you agree to share when asked, and messages you send in a shared session, which both of you can see.

When you import a conversation — a WhatsApp export, or a ChatGPT or Claude share link — the uploaded file is parsed and then deleted right away. Only the excerpts you review and confirm are kept, and they stay inside that conversation's context. Please only import conversations you have the right to share.

We use a small set of service providers to run Repaired, and they only process your data on our instructions: Anthropic (AI replies), Soniox (speech-to-text), Resend (emailing you sign-in codes), Firebase (push notifications), and Railway (hosting). That's the whole list. No data brokers, and nothing you write in Repaired is ever sold, shared for advertising, or used to target ads at you.

Two exceptions, and only if you agree to them: Meta and TikTok, covered below.

We advertise Repaired on TikTok, Instagram and Facebook, and we'd like to know which of those ads actually bring people in — otherwise we're paying for guesses. Measuring that means telling Meta and TikTok that an install happened and which ad preceded it.

We only do this if you say yes. When you first open the app we ask, plainly, and nothing is sent unless you agree. It is one question covering both — say no and neither company's measurement code ever starts. The app works exactly the same either way, and we won't ask again on every launch. You can change your mind whenever you like in Settings → Privacy & data.

If you do agree, what goes to them is limited to the fact of an install or app open, plus your device's advertising identifier and basic device details like model and language. Your conversations, your drafts, your AI's notes, the people you've added, anything you've imported — none of it is ever included, with or without your consent.

On iPhone the picture is narrower still, because we never read your device's advertising identifier there and never show you a tracking prompt. Apple reports installs to both companies itself, aggregated and delayed, rather than letting them match you individually. One honest difference between the two: Apple's rules stop Meta's code from sending anything else at all, while TikTok's does report app opens over an ordinary connection — still without the advertising identifier, so it isn't tied to you personally.

From any conversation's data controls you can see exactly what your AI knows and where it came from, and delete that conversation's data. From Settings → Privacy & data you can export everything as a file. From Settings → About you can delete your whole account — a real, immediate, unrecoverable deletion of your data. One honest caveat: messages you already sent into a shared session are part of the other person's history too, so their copy of that shared thread survives.

We keep your data for as long as you keep your account, so your history is there when you come back. We don't have retention timers that quietly expire your content — you decide when it goes, using the controls above.

If we change this policy in a way that matters, we'll tell you in the app before it takes effect. Questions, or want to exercise a data right your local law gives you? Write to info@repaired-ai.com — a real person answers.