SayNext Privacy Policy

1. Who operates SayNext

SayNext is operated by Joshua Hermans-Efenudu in Ontario, Canada. This policy applies to the SayNext mobile app, website, and related support services. Privacy and support questions can be sent to saynext@anytinsystems.com.

2. Information you provide

• Account information, including your email address and authentication-provider information.
• Profile and onboarding preferences, including adult confirmation and writing style.
• Chat names or nicknames, relationship stages, goals, manually entered messages, and instructions.
• Conversation screenshots that you deliberately select for extraction.
• Support requests, up to three optional support screenshots, and information you choose to include in them.

3. Information created through use

• Extracted message candidates, confirmed conversation messages, AI drafts, and conversation assessments.
• Subscription and purchase information, including your selected plan, trial and renewal status, expiry dates, entitlements, and content-free transaction metadata. Current legacy versions also process credit balances and content-free usage accounting records. The planned Weekly and Yearly model does not use credit balances or credit packs.
• Authentication, security, device, platform, network, provider-request, model-usage, and operational metadata needed to run and protect the service.
• For an in-app support request, the app sends only your platform, operating-system version, app version, and build number. It does not automatically attach chats, AI prompts, device identifiers, or logs.
• Crash diagnostics processed by Sentry can include error types, technical stack traces and code locations, app version and build, operating-system version, device model, memory information, and technical installation metadata. We do not attach your SayNext account ID, email, chats, generated replies, selected photos, or AI inputs to crash reports.
• JavaScript reports are filtered before transmission. Native crash reports can initially contain automatic installation identifiers; our Sentry project filters remove these identifiers and error-message text before report storage. We disable IP-address storage, breadcrumbs, screenshots, view hierarchies, session recordings, logs, profiling, and performance tracing for this crash-reporting setup.

4. AI processing

SayNext requests separate permission before sending selected screenshots, messages, goals, preferences, relationship stage, or instructions to OpenAI for screenshot transcription or contextual reply generation.

AI drafts are suggestions only. SayNext does not send them to another person or mark them as sent unless you explicitly confirm that action.

OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. SayNext's reply-generation and transcription Responses API requests use store=false. Generated replies may also be checked by OpenAI for safety before they are shown or saved. Standard abuse-monitoring logs may retain content for up to 30 days unless OpenAI is legally required to retain it longer.

5. Why information is used and legal grounds

• To authenticate users, secure accounts, and synchronize account preferences.
• To reconstruct conversations and generate reply drafts when requested.
• To verify subscription and trial access, process purchase and renewal events, restore eligible purchases, and prevent fraud.
• To provide support and maintain service reliability using limited operational metadata.
• Under PIPEDA and other applicable Canadian privacy laws, SayNext relies on consent, the services you request, legitimate security and fraud-prevention purposes, and legal obligations where applicable.

6. Service providers

• Supabase provides authentication, database, private file storage, and server functions.
• OpenAI processes requested screenshot-transcription and reply-generation inputs and checks generated output for safety.
• RevenueCat coordinates purchase, subscription, trial, renewal, restore, and customer-state events using account and transaction information.
• Apple and Google provide platform authentication and distribution where applicable. Apple handles payment for iOS App Store subscriptions; SayNext does not receive your full payment-card details.
• Expo and EAS provide mobile application tooling, builds, and distribution infrastructure.
• Resend provides content-minimized operational email delivery. A support notification contains only the request category and opaque reference number, not the message, reply email, or screenshot.
• Sentry processes limited crash diagnostics so we can investigate errors and improve app reliability. Crash reporting is separate from optional usage sharing and is not used for advertising or cross-app tracking.
• Google Workspace may provide a private feedback review sheet and staff-only feedback tools. The review sheet uses the submitted feedback and limited app diagnostics, an opaque feedback reference, and our review notes. It does not receive your login credentials or account reply email. Optional support attachments remain in private storage and are shown only through authorized review tools.
• Google Drive may store encrypted disaster-recovery backups under restricted access. Recovery keys are kept separately from the uploaded backup files.

7. Sharing and tracking

SayNext does not sell personal information or use behavioural advertising. Information may be shared with the service providers listed above, when you direct or consent to processing, when required for legal or safety obligations, or as part of a lawful business transfer.

The current website does not use analytics, advertising trackers, accounts, support forms, or non-essential cookies.

8. Screenshot handling

Selected screenshots are stored privately while extraction and review are in progress. Extracted candidates remain separate from the real timeline until you confirm them. Original screenshot files are removed after successful review and confirmation. A private source object may remain temporarily if processing or cleanup fails so deletion can be retried.

9. Help and feedback

Authenticated users can submit a Problem, Suggestion, or Question in the app. The request includes the account reply email, the message, any screenshots the user chooses to attach, and the limited app diagnostics described above. SayNext uses this information only to investigate and reply to the request.

When you choose Report on a generated reply, you can review that reply and add a note before sending it to support. That report includes the selected reply and your note, together with the account and basic app details needed to handle support. It does not automatically include the surrounding chat history or screenshots.

We may review the feedback you submit in a private Google Sheets board. Review statuses and internal notes help us assess requests. Feedback is not published, sold, sent to an AI model for this review process, or used to decide whether to ask you for an App Store rating. Deletion and retention cleanup also remove corresponding review-board copies through scheduled synchronization, subject to operational retries.

Support screenshots remain in private Supabase Storage and are not sent to OpenAI or used for AI processing. Submitted support requests and attachments are retained for at most 12 months and are removed during permanent account deletion. Abandoned drafts and orphaned support uploads are removed after 24 hours. Manual support email correspondence follows the same 12-month operational retention unless a legal obligation requires longer retention.

10. Retention and deletion

Confirmed messages, drafts, preferences, and account records remain while the account is active unless you delete individual content. An account-deletion request begins a 30-day recovery period. If it is not explicitly restored, permanent deletion is attempted after the deadline, subject to verified subscription status, operational retry, and records that must be retained by law.

Content-free operational logs are retained only as long as reasonably necessary for security, reliability, fraud prevention, support, and legal obligations, subject to provider retention settings. A failed private screenshot source remains only so cleanup can be retried. Purchase and entitlement records are retained as needed to provide purchases and restores, prevent fraud, resolve disputes, and meet tax or legal obligations. Apple, RevenueCat, and other payment providers retain their own records under their policies.

Filtered crash reports follow the configured monitoring-provider retention controls and are used for reliability investigations. We do not link stored crash reports to your SayNext account or combine them with feedback, chats, or advertising profiles.

Encrypted recovery snapshots normally use a 14-day rotation after a replacement backup has been verified. A failed replacement may delay rotation so the last recoverable copy is not lost. Backups are restricted to disaster recovery; account-deletion restrictions and session revocation must be reapplied before recovered data returns to service.

11. Security

SayNext uses authenticated owner-scoped access, private file storage, Row Level Security, server-held provider credentials, and encryption in transit. No online service can guarantee absolute security.

12. Your choices and rights

• Edit chat and writing preferences, archive or permanently delete chats, and request account deletion.
• Grant or withdraw AI-processing permission in Settings. Withdrawal blocks future AI requests unless you consent again.
• Manage, change, or cancel an iOS subscription through Apple, and restore eligible purchases inside SayNext. Deleting your account or uninstalling the app does not cancel a subscription.
• App Store ratings are optional and handled by Apple's native rating interface. SayNext does not receive your selected rating from that prompt and does not require a rating to use any feature.
• Contact saynext@anytinsystems.com to ask about applicable access, correction, deletion, consent-withdrawal, or complaint rights.

13. International processing

The service providers listed in this policy may process information outside Canada. SayNext limits transfers to what is needed to provide and protect the service and relies on provider contractual terms, access controls, encryption in transit, and other applicable safeguards.

14. Adults only

SayNext is intended only for adults aged 18 and older. Contact saynext@anytinsystems.com if you believe a minor has supplied information.

15. Changes and contact

This policy is effective October 29, 2026. Material changes will be reflected by an updated effective date and communicated when appropriate. Questions can be sent to saynext@anytinsystems.com.