ProjectsContact

Cipher Privacy Policy

Last updated: October 6, 2026

This policy explains what Cipher (the "app", for iPhone, iPad and Apple Watch; formerly named C0DEX) does with your information. Cipher is published by Aurora Apps / Daniel Steel ("we", "us"). Questions: support@aurorapps.com.

Cipher is a voice and text AI assistant. To answer you, it has to send what you ask to a third-party AI service. That is the main thing this policy is about, so it comes first.

1. What Cipher sends to a third-party AI provider

When you ask Cipher something, the app sends it to OpenAI (our AI provider) through Cipher's own server. That includes:

  • Your questions, typed or spoken, and the earlier messages of the current conversation (up to the most recent 20) so Cipher can follow what you're discussing.
  • Voice recordings of your questions. You start and stop recording yourself. The recording is sent for transcription to text, and the audio file is deleted from your device as soon as the transcription finishes.
  • Your location, only if you allow location access. The app includes your coordinates and nearby place name with your question so it can answer things like "closest pharmacy". To get the place name, your device asks Apple's location services. On Apple Watch, Cipher may also use Apple Maps search for nearby places.

OpenAI may use its web search to answer, so the text of your question can be used in web searches. OpenAI processes this data to produce answers and may retain it for a limited time under its own policy: openai.com/policies/privacy-policy.

We ask for your explicit permission before any of this happens. The first time you open Cipher you see exactly what is sent and choose whether to agree. If you don't agree, nothing is sent, and Cipher can't answer questions. You can withdraw permission at any time (see section 6).

We don't sell your data, we don't use it for advertising, and we don't track you across other companies' apps or websites.

2. Other information Cipher handles

  • An anonymous ID. When you first open the app it creates an anonymous account with Google Firebase Authentication. There is no name, email or password. This ID ties together your free-request count, your subscription status, and your iPhone and Apple Watch (so one subscription covers both).
  • A small usage record on our server (Google Cloud / Firebase, United States): your anonymous ID, how many requests you've used, whether you have a paid plan and which one, and related timestamps. We do not store the text of your questions or answers on our servers. Our server logs record technical events and errors, not your messages.
  • Purchases. Payments are handled by Apple. We use RevenueCat to confirm your purchase status. RevenueCat receives your anonymous ID, your purchase receipt, and device and network details such as app version and IP address. See revenuecat.com/privacy.
  • Chat history. Saved conversations are kept only on your device. We can't see them.
  • Internal notifications. We receive a notice that a new install or purchase happened (for example, which plan was bought). It contains no personal information.

Cipher does not include advertising or analytics software.

3. Who receives data

  • OpenAI — answering questions and transcribing voice: questions, conversation, voice audio, location (if allowed).
  • Google (Firebase) — anonymous sign-in, our server and usage record: anonymous ID, request counts, subscription status.
  • RevenueCat — subscription management: anonymous ID, purchase receipt, device and network details.
  • Apple — purchases, location and maps services: as described in Apple's privacy policy.

Each provider handles data under its own privacy policy. Your information may be processed in the United States and other countries where these providers operate.

4. How long we keep it

  • Usage record on our server: kept while you use Cipher, and deleted when you ask us to (section 6).
  • Chat history: kept on your device until you delete it or delete the app.
  • Voice recordings: deleted from your device right after transcription.
  • Data held by OpenAI, Google, RevenueCat and Apple: governed by their policies.

5. Children

Cipher isn't directed to children under 13, and we don't knowingly collect information from them.

6. Your choices and rights

  • Withdraw AI permission: in the iPhone/iPad app, tap the account button, then AI & Privacy, then Withdraw permission. On Apple Watch, tap [ PRIVACY ], then Withdraw.
  • Microphone and location: switch these off any time in the device's Settings.
  • Delete chat history: AI & Privacy, then Delete chat history, or delete the app.
  • Delete your server-side usage record, or ask what we hold: email support@aurorapps.com with the Support ID shown in AI & Privacy. We'll respond within 30 days. Deleting the record also resets your free-request count.
  • Manage or cancel a subscription: Settings > Apple Account > Subscriptions.

Depending on where you live (for example the EEA, UK or California) you may have additional rights to access, correct or delete your data, and to object to or restrict processing. Email us to use them.

7. Changes

If we change this policy in a way that affects how your data is shared, we'll update the date above and ask for your permission again in the app where required.

8. Contact

Aurora Apps / Daniel Steel — support@aurorapps.com