Privacy Policy

1. Information we collect

Decoy AI collects only what is strictly necessary to provide the service:

• Question images — photos or screenshots you submit are sent to our secure backend to generate AI explanations. They are not stored after processing.
• Anonymous device ID — a random UUID generated on first launch, stored in your device's Keychain. Used only to verify your active subscription via RevenueCat. It is not linked to your name, email, or any other personal data.
• Subscription status — managed by RevenueCat and Apple. We do not store payment details.

We do not collect your name, email address, location, contacts, or any other personal information.

2. How we use your information

• Question images are processed by our AI backend (Anthropic Claude API) to generate step-by-step explanations and are not retained.
• Your device ID is sent to RevenueCat solely to confirm you have an active subscription before each AI request.
• No data is used for advertising, profiling, or any purpose beyond delivering the app's core functionality.

3. Third-party services

Decoy AI uses the following third-party services to operate:

• Anthropic (Claude API) — processes question images to generate AI explanations. Subject to Anthropic's Privacy Policy.
• RevenueCat — manages subscription validation using your anonymous device ID. Subject to RevenueCat's Privacy Policy.
• Apple StoreKit — handles all payment processing. We never receive or store payment details.
• Supabase — hosts our secure backend API. Data in transit is encrypted via HTTPS.

We do not use advertising networks, analytics trackers, or any other third-party data collection services.

4. Data storage

Your solve history (question thumbnails and solutions) is stored locally on your device only. We have no access to this data. It is removed if you delete the app.

Question images submitted for solving are not stored on our servers after processing. Your anonymous device ID is stored in your device's secure Keychain.

5. Data sharing

We do not sell, rent, trade, or share your data with any third parties for commercial purposes. Data is only shared with the third-party services listed in Section 3, solely for operating the app.

6. Children's privacy

Decoy AI is intended to assist students with homework. We do not knowingly collect personal information from children under 13. Because we do not collect names, emails, or identifiable information from any user, there is no meaningful personal data associated with younger users.

If you are a parent or guardian with concerns, please contact us at the email below.

7. Legal compliance

We comply with applicable privacy regulations including the Australian Privacy Act 1988, GDPR (EU), and CCPA/CPRA (California, USA). Because we collect minimal anonymous data, most data subject rights under these frameworks have limited applicability. You may contact us at any time to inquire about data associated with your device.

8. Data security

All data transmitted between the app and our backend is encrypted via HTTPS/TLS. Your anonymous device ID is stored in your device's secure Keychain. API keys and secrets are stored server-side only and are never included in the app binary.

9. Changes to this policy

We may update this Privacy Policy from time to time as the app evolves. Any material changes will be reflected on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

Questions, concerns, or requests about this policy? We're happy to help:

Email: support@decoyai.app