SayNext Privacy Policy

1. Who operates SayNext

SayNext is operated by Joshua Hermans-Efenudu in Ontario, Canada. This policy applies to the SayNext mobile app, website, and related support services. Privacy and support questions can be sent to saynext@anytinsystems.com.

2. Information you provide

• Account information, including your email address and authentication-provider information.
• Profile and onboarding preferences, including adult confirmation and writing style.
• Chat names or nicknames, relationship stages, goals, manually entered messages, and instructions.
• Conversation screenshots that you deliberately select for extraction.
• Support requests, up to three optional support screenshots, and information you choose to include in them.

3. Information created through use

• Extracted message candidates, confirmed conversation messages, AI drafts, and conversation assessments.
• Subscription state, purchase status, entitlements, usage balances, and content-free accounting metadata.
• Authentication, security, device, platform, network, provider-request, model-usage, and operational metadata needed to run and protect the service.
• For an in-app support request, the app sends only your platform, operating-system version, app version, and build number. It does not automatically attach chats, AI prompts, device identifiers, or logs.

4. AI processing

SayNext requests separate permission before sending selected screenshots, messages, goals, preferences, relationship stage, or instructions to OpenAI for screenshot transcription or contextual reply generation.

AI drafts are suggestions only. SayNext does not send them to another person or mark them as sent unless you explicitly confirm that action.

OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. SayNext requests use store=false. Standard abuse-monitoring logs may retain content for up to 30 days unless OpenAI is legally required to retain it longer.

5. Why information is used and legal grounds

• To authenticate users, secure accounts, and synchronize account preferences.
• To reconstruct conversations and generate reply drafts when requested.
• To operate purchases, subscriptions, allowances, restore, and fraud-prevention controls.
• To provide support and maintain service reliability using limited operational metadata.
• Under PIPEDA and other applicable Canadian privacy laws, SayNext relies on consent, the services you request, legitimate security and fraud-prevention purposes, and legal obligations where applicable.

6. Service providers

• Supabase provides authentication, database, private file storage, and server functions.
• OpenAI processes requested screenshot-transcription and reply-generation inputs.
• RevenueCat coordinates purchase, subscription, restore, and customer-state events.
• Apple and Google provide platform authentication, distribution, and store billing where applicable.
• Expo and EAS provide mobile application tooling, builds, and distribution infrastructure.
• Resend provides content-minimized operational email delivery. A support notification contains only the request category and opaque reference number, not the message, reply email, or screenshot.

7. Sharing and tracking

SayNext does not sell personal information or use behavioural advertising. Information may be shared with the service providers listed above, when you direct or consent to processing, when required for legal or safety obligations, or as part of a lawful business transfer.

The current website does not use analytics, advertising trackers, accounts, support forms, or non-essential cookies.

8. Screenshot handling

Selected screenshots are stored privately while extraction and review are in progress. Extracted candidates remain separate from the real timeline until you confirm them. Original screenshot files are removed after successful review and confirmation. A private source object may remain temporarily if processing or cleanup fails so deletion can be retried.

9. Help and feedback

Authenticated users can submit a Problem, Suggestion, or Question in the app. The request includes the account reply email, the message, any screenshots the user chooses to attach, and the limited app diagnostics described above. SayNext uses this information only to investigate and reply to the request.

Support screenshots remain in private Supabase Storage and are not sent to OpenAI or used for AI processing. Submitted support requests and attachments are retained for at most 12 months and are removed during permanent account deletion. Abandoned drafts and orphaned support uploads are removed after 24 hours. Manual support email correspondence follows the same 12-month operational retention unless a legal obligation requires longer retention.

10. Retention and deletion

Confirmed messages, drafts, preferences, and account records remain while the account is active unless you delete individual content. An account-deletion request begins a 30-day recovery period. If it is not explicitly restored, permanent deletion is attempted after the deadline, subject to verified subscription status, operational retry, and records that must be retained by law.

Content-free operational logs are retained only as long as reasonably necessary for security, reliability, fraud prevention, support, and legal obligations, subject to provider retention settings. A failed private screenshot source remains only so cleanup can be retried. Purchase and entitlement records are retained as needed to provide purchases and restores, prevent fraud, resolve disputes, and meet tax or legal obligations. Apple, RevenueCat, and other payment providers retain their own records under their policies.

11. Security

SayNext uses authenticated owner-scoped access, private file storage, Row Level Security, server-held provider credentials, and encryption in transit. No online service can guarantee absolute security.

12. Your choices and rights

• Edit chat and writing preferences, archive or permanently delete chats, and request account deletion.
• Grant or withdraw AI-processing permission in Settings. Withdrawal blocks future AI requests unless you consent again.
• Manage subscriptions through Apple and use Restore Purchases inside SayNext.
• Contact saynext@anytinsystems.com to ask about applicable access, correction, deletion, consent-withdrawal, or complaint rights.

13. International processing

The service providers listed in this policy may process information outside Canada. SayNext limits transfers to what is needed to provide and protect the service and relies on provider contractual terms, access controls, encryption in transit, and other applicable safeguards.

14. Adults only

SayNext is intended only for adults aged 18 and older. Contact saynext@anytinsystems.com if you believe a minor has supplied information.

15. Changes and contact

This policy is effective August 4, 2026. Material changes will be reflected by an updated effective date and communicated when appropriate. Questions can be sent to saynext@anytinsystems.com.