Privacy Policy

This policy explains how AiAstra Innovations Private Limited ("we", "us") handles information in the CryPhone mobile application and on this website. We have written it in plain language on purpose. If anything here is unclear, email support@cryphone.com and we will answer and, where the wording was the problem, fix the wording.

1. What stays on your device and never leaves it

CryPhone reads the following from your phone in order to work at all. All of it is written to a local database on the device and none of it is transmitted to us or to anyone else:

• Battery level, charging state and charger type — so it can react to being plugged in, unplugged, or left at 3%.
• Accelerometer readings — used to detect drops and hard impacts. The raw stream is processed in memory and discarded; only the conclusion ("a drop happened at this time, at this severity") is stored.
• Thermal state, and on Android battery temperature — so it can react to overheating or to being left in a cold car.
• Whether a network connection exists — a true/false reading. Not the network name, not the carrier, not an IP address.
• Free storage space — so it can tell you the phone is full.
• Screen-on and app-open times — how long since you last opened CryPhone, which is what makes "you've ignored me for two days" possible.
• Your chosen personality, your settings, your friendship score, your streak, your unlocked achievements, and the daily summaries built from all of the above.
• The name you optionally give it, and the name you optionally tell it to call you. If you type your name into CryPhone, that name is stored on the device and is inserted into the companion's replies locally. It is not sent with an AI request — see section 3.
• Your conversation history with the companion, including the free, offline replies.

We cannot see any of it. There is no account, no login, and no server-side copy. If you uninstall the app, this data is deleted with it and we have no way to restore it.

2. The random device identifier

The app generates a random identifier the first time it runs — a value like 7f3a… with no relationship to you, your hardware or any advertising ID. It is stored in your device's encrypted keystore.

It is sent to our server for exactly two purposes:

1. Rate limiting. To count how many AI messages have been sent today, so one device cannot exhaust the service for everyone.
2. Licence binding. If you bought Premium on this website, the identifier records which devices a licence key is active on, so a key sold for personal use is not shared with a hundred people.

We store it alongside a request count and a date. We do not build a profile from it, sell it, or share it. Reinstalling the app generates a new one, which means it cannot be used to recognise you across installs.

3. AI conversations (Premium only)

When you have Premium and you send a message to the companion, that message is sent over an encrypted connection to our server, which forwards it to Anthropic's Claude model running inside Amazon Bedrock in Amazon Web Services' Mumbai region.

What is sent: the text you typed, a short summary of your phone's current state (mood, battery percentage, recent drops), your chosen personality, and the random device identifier from section 2. What is not sent: your name or the phone's name — the model is instructed to write a placeholder, and the app substitutes the name locally on your device after the reply arrives.

We do not store your messages or the replies on our servers. They pass through and are gone. Amazon Bedrock does not use inputs to train models and does not retain them for its own purposes; Anthropic's model is accessed through Bedrock and Anthropic does not receive your requests directly. A copy of the conversation is kept on your device so you can scroll back, and you can delete it from Settings.

Without Premium, the companion still talks to you, but its lines are chosen from a catalogue built into the app. Nothing is sent anywhere. This is a genuine offline path, not a degraded online one.

4. Crash reports and usage analytics

CryPhone includes Firebase Crashlytics and Firebase Analytics, from Google.

Crash reports contain the technical state of the app at the moment it stopped working — a stack trace, the device model, the OS version, and how long the app had been running. They contain no content from your conversations and no personal data. They are what makes a crash fixable rather than a mystery.

Usage analytics record which screens are opened and which features are used, as counts, so we can tell whether a feature is worth keeping. They do not record what you said.

Both can be switched off in Settings → Privacy → Share anonymous diagnostics. Turning it off stops collection from that point on; it does not retroactively delete reports already sent, because those are aggregated and no longer identifiable as yours.

5. Advertising

The free version of the app shows advertising supplied by Google AdMob. Google may use a resettable advertising identifier to select ads. On both platforms you control this from the operating system: on Android under Settings → Privacy → Ads, and on iOS through the App Tracking Transparency prompt, which we ask only once and which you may decline with no loss of app functionality — declining means you see less relevant ads, not fewer.

Google's use of that identifier is governed by Google's advertising policies rather than by this one. CryPhone Premium removes advertising entirely, and in the Premium build the ads SDK is not asked to initialise at all.

6. Purchases

If you subscribe inside the app through Google Play or the App Store, that store processes the payment. We never see your card details. Our subscription infrastructure (RevenueCat) receives an anonymous app user identifier and the store's own purchase receipt, which is how a subscription can be restored on a new device.

If you buy on this website — which is how a directly-downloaded app is upgraded, since a sideloaded install has no connection to Play Billing — the payment is processed by Razorpay Software Private Limited. Razorpay receives your email address and your payment details; we receive your email address, the amount, a payment reference, and the licence key we issued you. We do not receive or store your card number. Your email address is used to send you your licence key, to let you recover it later, and to send one reminder before the key expires. We do not use it for marketing unless you separately opt in.

7. Notifications

If you allow notifications, the app registers a push token with Firebase Cloud Messaging so that a message can be delivered to your device. Most of what CryPhone shows you is scheduled locally on the device and involves no server at all. The token identifies a device installation, not a person, and is discarded when you revoke the permission or uninstall.

8. What we collect, in one table

Data	Where it goes	Why	How long
Sensor, battery, mood, drop and usage history	Your device only	The app's core function	Until you delete it or uninstall
Conversation history	Your device only	So you can scroll back	Until you delete it or uninstall
Your name / phone's name	Your device only	Personalised lines	Until you delete it or uninstall
Random device identifier	Our server (AWS Mumbai)	Rate limiting; licence binding	Rate rows auto-delete after 2 days; licence bindings until you release the device
AI message text (Premium)	Our server → Amazon Bedrock	To generate a reply	Not stored by us; passes through
Crash and analytics events	Google Firebase	Fixing crashes; product decisions	Per Firebase retention (up to 14 months)
Advertising identifier	Google AdMob	Ad selection, free version only	Per Google's policies; resettable by you
Email address and payment reference	Razorpay; our licence database	Issuing and recovering a website licence	As long as the licence exists, plus the period Indian tax law requires us to keep transaction records
Push token	Firebase Cloud Messaging	Delivering notifications	Until permission is revoked or the app is uninstalled

9. Children

CryPhone is not directed to children under 13 (or under 16 in the European Economic Area and the United Kingdom), and we do not knowingly collect personal data from them. The app is rated accordingly on both stores. If you believe a child has provided us with personal data, email support@cryphone.com and we will delete it.

10. Your rights and how to actually use them

Depending on where you live, you may have rights to access, correct, delete or export your personal data, to object to processing, and to withdraw consent. In practice, for this app:

• Deletion of everything on the device — Settings → Erase everything inside the app. This is immediate, complete, and needs no request to us.
• Deletion of what we hold on our servers — use the form at cryphone.com/delete-data. It works without installing the app, and it does not require an account.
• Access or export — email support@cryphone.com. Because we hold so little, the answer is usually a short list: your licence key, the email you bought with, and which device identifiers it is bound to.
• Withdrawing consent to diagnostics — the toggle in Settings, at any time, with no consequence to the app.

We respond to requests within 30 days. We do not charge for them, and we do not require you to create an account in order to make one.

11. Security

Traffic between the app and our servers uses TLS. The device identifier and any licence key are held in the platform's encrypted store — the Android Keystore or the iOS Keychain — rather than in plain preferences. Our server holds no passwords, because there are no accounts to have passwords. Access to the licence database is restricted to a single service role with the narrowest permissions that let it function.

No system is perfectly secure. What we have done instead is reduce what there is to lose: the interesting data about you is on your phone, and we deliberately do not have a copy.

12. Transfers and legal basis

Our servers are in Amazon Web Services' Mumbai (ap-south-1) region, in India. Firebase, AdMob and RevenueCat process data in the United States and elsewhere under their own transfer mechanisms, including the European Commission's standard contractual clauses where applicable.

Where the UK GDPR or EU GDPR applies, our legal bases are: contract, for the processing needed to give you the app and a subscription you paid for; consent, for diagnostics and for notifications, each of which you can withdraw; and legitimate interests, for rate limiting and licence binding, without which the service could not be offered at a sustainable price.

13. Changes

If we change this policy in a way that affects what we collect or where it goes, we will change the date at the top and tell you inside the app before the change takes effect. We will not quietly start collecting something new.

14. Contact

AiAstra Innovations Private Limited
Email: support@cryphone.com
Data deletion: cryphone.com/delete-data