simple Privacy Policy

simple has no accounts, no login, and no server that stores your things. Your photos and everything you write about them live on your iPhone, and — if you have iCloud switched on — in your own private iCloud account, which cannot be read from here.

One feature sends data off your device: AI enrichment, part of Simple Plus. When it runs, a small copy of the item photo is sent to be identified and is not stored. Everything else — lifting the background out of a photo, naming, categorizing, reading text — happens on your iPhone.

No data is sold. There is no tracking across other apps or websites, and no advertising.

What stays on your device

Everything you create is written to simple’s private storage on your iPhone: photos and the cutouts made from them; names, categories, brands, colors and keywords; the notes, stories and farewell notes you write; keep and release decisions with their dispositions and dates; and your goal, streak, statistics and settings.

Deleting the app removes all of it from the device.

iCloud

If you are signed in to iCloud with it enabled for simple, this data — including your photos and cutouts — syncs through Apple’s CloudKit to the private database of your own iCloud account, so your shelf appears on your other devices.

That is your storage. It cannot be read from here, and no copy of it is held here. It is governed by Apple’s Privacy Policy. Turn it off any time in Settings ▸ [your name] ▸ iCloud. Without iCloud, simple works identically, entirely on-device.

AI enrichment (Simple Plus only)

For Simple Plus members, when you finish reviewing a capture, simple sends a downscaled copy of each item’s photo — 640 pixels on the long edge, JPEG — to an AI proxy, which forwards it to OpenAI to identify the object. Back comes a name, brand, category, colors, condition, an approximate resale range and a suggested disposition. You can also run it by hand on a single item.

This runs automatically on capture while your membership is active. It is not a prompt for each photo. If you would rather nothing left your device, don’t subscribe — on the free tier every naming and categorizing step happens on your iPhone and no photo is ever transmitted.

What is sent: the item photo, its image type, and your category names. Proof of membership travels with it — either an Apple-signed purchase receipt or an anonymous RevenueCat user ID. Your name, email, Apple ID, device ID and location are not sent, and the notes and stories you write are never sent.

What is kept: nothing. The proxy is a Cloudflare Worker that passes the image straight through. Images are never written to storage and never written to logs. The only things retained are a counter of how many enrichments an anonymous membership ID has used today, held 48 hours to enforce a fair-use limit, and a five-minute cache of whether a membership is active.

Processor	What it receives	Policy
Cloudflare Workers	The request in transit; no image storage	Privacy policy
OpenAI API	The item photo and the identification prompt	Privacy policy

OpenAI states that data submitted through its API is not used to train its models and is retained briefly for abuse monitoring before deletion. There is no agreement here permitting your photos to be used for model training.

Purchases

Simple Plus is billed by Apple. Subscription status is managed through RevenueCat, which issues an anonymous app user ID — a random identifier, not derived from your name, email or Apple ID — and records which products you own and when they expire. Your payment card, billing address and Apple ID are never received here.

Analytics

This release sends no analytics. No analytics service is initialized and no usage events leave your device. If that changes, this page will say so before the build ships.

Permissions

Camera — to photograph your things. Optional; you can import from your photo library instead.

Add to Photos — only when you tap Save Image on a share card.

Notifications — a weekly reminder and memory anniversaries, both scheduled locally on your device. There is no push server.

Choosing photos from your library uses the iOS photo picker, which hands simple only the images you pick. simple never has access to the rest of your library.

What simple never collects

No account, email or password. No location, contacts, calendar, health data or microphone. No advertising identifier and no tracking across other companies’ apps or websites — which is why simple never shows the “Ask App Not to Track” prompt. No advertising SDKs. No sale or sharing of personal information as those terms are used under the CCPA/CPRA.

Children

simple is not directed at children under 13, or the equivalent minimum age where you live, and their personal information is not knowingly collected. If you believe a child has provided personal information, write to support@minuet.studio and it will be deleted.

Your choices

• See your data — it is all in the app.
• Delete it — delete items in the app, or delete the app to remove everything on the device. To remove the synced copy, delete simple’s data in Settings ▸ [your name] ▸ iCloud ▸ Manage Storage.
• Stop all off-device processing — cancel Simple Plus, turn off iCloud for simple, or both.
• Purchase records — to request deletion of the anonymous record held by RevenueCat, email your RevenueCat app user ID, shown in Settings ▸ About in the app.

If you live in the EEA, the UK, California or elsewhere with comparable law, you may have rights of access, correction, deletion, portability and objection. These are honored, and exercising them will never degrade your experience. Because so little is held about you, most requests are satisfied by the steps above; for anything else, write to support@minuet.studio and expect a reply within 30 days.

Where the GDPR applies, the lawful bases are contract — delivering the app and the Plus features you bought — and legitimate interests — preventing abuse of the AI proxy through fair-use limits. Data sent for AI enrichment is processed in the United States under the processors’ Standard Contractual Clauses.

Security

Data on your iPhone is protected by iOS file protection and your device passcode. All network traffic uses TLS. The OpenAI key exists only on the server and is never in the app. Membership is verified by checking an Apple-signed receipt against Apple’s root certificate, so there is no password to steal. No system is perfectly secure, and absolute security cannot be guaranteed.

Changes

This page is updated in place and the effective date above changes with it. If a change materially expands what leaves your device, the app’s release notes will say so before it takes effect.

Contact

For privacy questions or support, contact support@minuet.studio.