← Back

Privacy Policy

Last updated: October 8, 2026

1. Introduction

Replai ("we," "our," or "us") operates the Replai mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

2. Information We Collect

We collect the following types of information:

  • Account information: You sign in with Apple. We store the identifier Apple issues for you in this app, together with the email address Apple passes us — which, unless you chose otherwise, is a private relay address that forwards to you without revealing your real one. We ask Apple for nothing else.
  • Conversation screenshots: Images you submit for AI reply generation. These are uploaded to our servers for processing and are associated with your user account.
  • Imported conversations: If you connect a messenger, we keep a copy of the conversations you choose to import, so replies can be written with the full thread in view. Their text is encrypted at rest with a key held separately from everything else, and you can delete every imported conversation from the app at any time.
  • Shared conversations: When you turn a stitched conversation into a link, the resulting image, its caption, and the visibility you picked are stored on our servers so the link can be opened.
  • Personalization settings: Your name, gender, language preference, and reply style preferences (emoji, punctuation, capitalization).
  • Purchase history: Subscription status and purchase records managed through Apple's App Store.

3. How We Use Your Information

  • To generate AI-powered reply suggestions based on your conversation screenshots.
  • To personalize replies according to your preferences.
  • To create the links you share and to show the conversation to whoever opens one.
  • To manage your subscription and provide access to premium features.
  • To improve the quality and reliability of our service.
  • To diagnose errors and crashes via anonymized error reports.

4. Data Storage & Security

Your data is stored on Cloudflare's infrastructure: account and conversation records in a database, images in object storage. Conversation screenshots are stored under user-specific paths that only your account can address. Sensitive data such as PINs are stored in the iOS Keychain and never leave your device.

Shared conversations live in a private bucket that is not readable without a link we sign ourselves, and those signed links are short-lived. Nothing you have not shared is reachable from the web at all.

We use biometric authentication (Face ID / Touch ID) and optional PIN protection to secure access to the app on your device.

5. Third-Party Services

We use the following third-party services:

  • Cloudflare: Hosting, database and storage for everything described above.
  • OpenAI: Reading your screenshots and generating the suggested replies. Content sent for that purpose is not used to train their models.
  • Better Auth: Protecting sign-in from abuse. Each sign-in attempt is checked against their service, which sees the network address it came from and the country that address belongs to — not your account, your conversations, or anything you have written.
  • RevenueCat: Subscription management and purchase verification.
  • Sentry: Anonymized error tracking and crash reporting. No personally identifiable information is sent.
  • Mixpanel: Product analytics — which screens are opened and which features are used, under an account identifier and never under your email or name.

We do not use any advertising networks or share your data with advertisers.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties, and we do not use your conversations to train AI models.

A conversation reaches another person only when you share a link to it yourself, and how far it reaches is the visibility you choose:

  • Private — the default. The link opens only inside the app, and nothing about the conversation, not even a preview image, is served to a browser.
  • Public — the link also previews in a browser and in chat apps, so anyone who has it, or is forwarded it, can see the conversation.
  • One-time — the link opens exactly once, and the image is deleted from our servers at that moment.

Opening a shared link does not require an account, and we do not build a profile for someone who only opens one. If a private conversation is screenshotted or screen-recorded while it is open, we record that it happened and show it to the person who shared it — the fact of it, and nothing else about the recipient.

7. Data Retention

You can delete your account and associated data at any time from within the app. Upon account deletion, all your data, including conversation screenshots, imported conversations and personalization settings, will be permanently removed from our servers.

You can also delete a single shared conversation without deleting your account. Its link stops working immediately and the image is removed from our storage; a cached copy may survive briefly on the content delivery network before it expires.

8. Children's Privacy

Replai is not intended for children under 17. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us through the App Store listing.