Privacy Policy
Effective October 16, 2026
The short version. Threevox has no sign-up, no login, and no password. We never ask for your name, email address, or phone number. Your conversations are stored on your device, not on our servers. We do not use advertising or analytics trackers, and we do not sell your data to anyone.
This policy explains what Threevox (“we”, “us”) collects when you use the Threevox iOS app, why we collect it, and what control you have over it. Threevox is operated by an individual developer based in Israel.
1. We do not have accounts
Threevox does not offer account registration. When you first open the app, it generates a random anonymous identifier (a UUID) so we can keep track of your credit balance and apply fair-use limits. This identifier is not linked to your identity, your Apple ID, your email address, or any other app. We cannot use it to find out who you are.
The identifier is stored in your device’s Keychain (on that device only, not synced to iCloud), so it — and the credits tied to it — normally stay with you if you delete and reinstall the app on the same device. Deleting the app removes your conversations, but not this identifier; to have the identifier and the data linked to it erased, see section 7.
2. What we collect
Your questions and follow-ups
When you ask a question, its text is transmitted to the AI providers listed in section 4 so they can generate answers, and to OpenAI’s moderation service to screen for prohibited content. We do not store the text of your questions or the answers on our servers. It passes through our backend and is not written to our database. The only exception is an answer you choose to report — see “Reports” below.
Web search
To answer questions about recent events, prices or other current facts, an AI engine may decide to look something up on the web. It then writes a short search query based on your question, which is sent to Tavily, our web search provider, and the pages found are passed back to that engine to write its answer. Links to those pages may appear under the answer.We do not store the search query or the pages found. For each question that used web search we keep only numbers — how many searches ran, their cost and timing, and the kind of question — linked to your anonymous identifier, to apply search limits.
Images you attach
If you attach an image to a question (from your photo library, your camera, or pasted from the clipboard), the image is sent the same way as your question text: to OpenAI’s moderation service and to the AI providers listed in section 4. Location data (GPS) is removed from photos before they are sent. The app only receives the images you choose to attach; it does not read the rest of your photo library, and it reads an image from the clipboard only when you tap Paste. We do not store your images on our servers.
Your conversation history
Past conversations are saved on your device only, using standard iOS app storage. To let each AI follow the conversation, the text of recent turns of the current conversation is sent with each new question — through our backend to that AI provider, and to OpenAI’s moderation service. The previous question may also be sent to Google to decide whether to search the web and to write the search query; that query, which may reflect the previous question, is then sent to Tavily. Our servers do not store any of this text, and it is not written to our logs. If you delete the app, your saved conversations are gone.
Credits and purchases
We store your credit balance and a record of credit transactions (purchases, monthly refreshes, and deductions), linked to your anonymous identifier. Purchases themselves are processed by Apple and by RevenueCat, our subscription infrastructure provider. We never see or store your payment card details, billing address, or Apple ID.
Safety and abuse-prevention data
To stop abuse and keep the service available to everyone, we keep:
- Moderation flags — if a request is blocked by our content filter, we record your anonymous identifier, the category of the violation, and the timestamp. The text of the blocked request is not stored.
- Rate-limit counters — request counts per anonymous identifier, and per IP address. IP-based counters are held in memory only and are discarded within minutes; we do not keep logs of IP addresses.
Microphone and speech
If you use voice input, the app uses Apple’s speech recognition to convert your speech into text. Depending on your device and iOS settings, Apple may process this audio on-device or on Apple’s servers under Apple’s own privacy policy. We receive only the resulting text, and only once you send it as a question. We do not record or store audio.
Feedback you send us
If you use the in-app feedback form, the message you write is emailed to our support address together with your anonymous identifier, so we can look into your credits if needed. It is delivered through Resend and kept the same way as reports (see “Reports”). Please do not include sensitive personal information in feedback.
Reports
If you report an answer (press and hold the answer, then tap Report), we receive by email: the reason you chose, any note you write, which AI engine and model wrote the answer, the time, a report number, your anonymous identifier, and the text of that answer and of the question that produced it. Nothing else from your conversation is sent, and images are not included. The report screen tells you this before you tap Send.
Reports go only to Threevox — they are not sent to OpenAI, Anthropic, or Google. We use them only to review the reported answer and to improve the safety and accuracy of the app, based on our legitimate interest in doing so. The email is delivered through Resend, which keeps its copy for up to 30 days (plus 7 days in backups) and then deletes it automatically. It is received in our support mailbox (Google Workspace), where it is deleted within 120 days after the report is handled.
3. What we deliberately do not collect
- No name, email address, phone number, or postal address
- No contacts, calendar, or location data, and no access to your photo library beyond the images you choose to attach
- No advertising identifiers (IDFA) and no ad networks
- No third-party analytics or behavioural tracking SDKs
- No cross-app or cross-site tracking of any kind
We do not track you across other companies’ apps or websites, so the app does not respond differently to “Do Not Track” signals.
4. Who we share data with
We do not sell personal information, and we do not share it for advertising. We use the following processors strictly to operate the service:
- OpenAI, Google, and Anthropic — receive your question text, and any image you attach, in order to generate answers. Google also receives your question text to decide whether a web search is needed. Each handles that text under its own privacy and API terms.
- OpenAI Moderation — receives your question text, and any image you attach, to screen for prohibited content before it is sent to the AI providers.
- Tavily — receives a search query written from your question, when the question needs current information from the web.
- Wikipedia (Wikimedia Foundation) — receives the title of an article related to your question (for example, the name of a sports final), with no identifier, when the question asks who won or what the result of an event was.
- Supabase — database hosting for credits, transactions, and safety data.
- Railway — hosting for our backend service.
- RevenueCat and Apple — purchase processing and subscription management.
- Resend — delivery of feedback and report emails you choose to send us.
- Google Workspace — our support mailbox, where feedback and reports are received.
We may also disclose information where we are legally required to do so, or where it is necessary to protect the rights and safety of our users or the service.
5. “Clear history” — what it does and does not do
The app includes a Clear history option. We want to be precise about its scope, because the name could otherwise be misleading.
Clear history deletes every conversation stored on your device, permanently and immediately.
Clear history does not delete your anonymous identifier, your credit balance, your transaction records, or your safety and rate-limit records held on our servers. This is deliberate: your credits are tied to that identifier, and erasing it would destroy credits you paid for.
6. How long we keep things
- Question and answer text — not retained by us, except the question and answer included in a report you send.
- Reports — deleted from our support mailbox within 120 days after the report is handled; Resend’s copy is deleted automatically after about 30 days.
- Conversation history — on your device until you clear it or delete the app.
- Credit balance — for as long as the anonymous identifier is in use.
- Transaction records — retained as required for accounting, tax, and audit obligations, typically seven years.
- Moderation flags — retained for abuse prevention and reviewed periodically.
- Rate-limit counters — minutes to hours.
- Web search usage numbers — for as long as the anonymous identifier is in use. Search queries and the pages found are not retained.
7. Your rights, and how to delete everything
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. We do not discriminate against anyone for exercising these rights.
Because there is no login, we cannot offer full server-side deletion as a button in the app — we would have no way to verify that the request came from you rather than from someone else using your device. Instead, you can request it directly:
Email privacy@threevox.app and tell us you want your data deleted. Because there is no account to sign in to, we will ask for something that lets us match you to the right record — typically an App Store purchase receipt, a screenshot from the app, or the app version and approximate date you started using it. We will then tell you exactly what will be erased, warn you if it would forfeit unused credits, and complete the request within 30 days.
Note that we may be unable to delete transaction records where retaining them is required by law (for example, tax and accounting obligations). In that case we will anonymise them so they can no longer be linked to you, rather than erasing them outright.
8. Children
Threevox is not directed at children. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If you believe a child has used the app, contact us at privacy@threevox.app and we will delete any associated data.
9. International transfers
Our service providers operate in the United States and elsewhere, so the limited data described above may be processed outside your country of residence. Where required, we rely on Standard Contractual Clauses or an equivalent safeguard for those transfers.
10. Security
All traffic between the app and our servers is encrypted in transit. Database access is restricted by row-level security, so one anonymous identifier cannot read another’s records. No system is perfectly secure, but we keep the amount of data we hold deliberately small, which is the most effective protection we can offer you.
11. Changes to this policy
If we make a material change, we will update the effective date above and, where the change is significant, notify you in the app before it takes effect.
12. Contact
Privacy questions and deletion requests: privacy@threevox.app
Everything else: support@threevox.app