Privacy policy

What Onread does

You add a conversation (as screenshots or text), check it and ask for a read. Onread returns an AI reading of what the other person seems to mean, the evidence it rests on and reply drafts. If the conversation shows signs of a safety concern, Onread shows a safety response and support lines instead.

Screenshots stay on your phone

When you choose screenshots, Onread reads the text in them on your device, using Apple Vision on iPhone and Google ML Kit on Android. The images are never uploaded to Onread or to anyone else. Onread only sees the screenshots you pick in the system photo picker or share into it; it has no access to the rest of your photos.

On Android, ML Kit sends Google basic diagnostics about its own work: the phone’s make, model and system version, the app’s name and version, how long recognition took, image sizes and error codes, with an identifier for this installation. It never sends the screenshots or the text in them.

Conversation text, and only when you ask

When you ask for a read, the text of the conversation you checked (with any names you chose to hide replaced by [name]) and the optional context you added are sent over an encrypted connection to Onread’s server, which runs on Cloudflare. The server screens the text for safety concerns, sends it to our AI provider to produce the read, checks the result and returns it to your phone. A second look sends the same text with the note you add. A reply check sends the recent part of the conversation with the reply you wrote; the checks Onread makes on your phone as you type send nothing.

Onread’s server does not store the conversation, your question or the read. It keeps them in memory only for the time it takes to make the read. Its records contain counts, token numbers and costs per day, nothing that could hold your words.

Before any text is sent, Onread asks for your permission. You can withdraw it at any time in Settings, Privacy and data. Conversations that trip the safety check on your phone are not sent at all.

Our AI providers

Reads are made by OpenAI (GPT models) and, if OpenAI is unavailable, by Anthropic (Claude models). Both are based in the United States, so your conversation text is processed overseas.

The providers keep a copy to check for abuse: OpenAI for up to 30 days, or longer if the law requires it or to prevent harm; Anthropic for up to 30 days, or up to two years if its safety systems flag the conversation. Neither uses it to train AI models. Onread does not control that retention; it is set by each provider’s policy, and this page changes if they do.

A random device id

Onread creates a random id for your phone. It is not linked to your name, email, phone number or advertising id. The server uses it to count your free reads each week, to apply fair-use limits, to check your subscription with RevenueCat and to keep costs under control. Deleting everything in Settings replaces it and asks the server to delete the counters for the old id; if your phone is offline at that moment, they expire on their own within 90 days. On iPhone, the id, your settings and your weekly read count are kept in the phone’s keychain, which iOS keeps even when an app is deleted, so they are still there if you reinstall Onread; Delete everything in Settings removes them.

Your internet address, and what the server counts

Like any website, Onread’s server receives your phone’s internet (IP) address with each request. Cloudflare, which runs the server, processes it to deliver the request. Onread uses it only to slow down floods of requests from one network. Where it is counted, it is stored as a one-way code that changes every day and deleted after two days.

The server keeps counts and costs per day for each device id (for 90 days), the free reads used each week (for six weeks), whether a subscription was active (for seven days) and short-lived rate limit counters (for two days). None of these can hold your words.

Subscriptions

Payments are handled by Apple or Google. Onread never sees your card details. We use RevenueCat to check whether your phone has an active subscription; RevenueCat receives the random device id, your purchase receipts from the store and basic details of your phone and the app (such as the system and app versions), and nothing from your conversations.

Reports

If you report a read or a reply check, Onread sends the category you picked and the AI model and prompt version that made it, with the kind of result it was: a read, a safety check or a reply check. Your phone’s random id is used only to stop floods of reports and is not kept with the report. Reports are kept for up to two years to improve Onread. The conversation, your draft and the result itself are never sent with a report.

What stays on your phone

Your settings, your weekly read count and, only if you turn it on, your saved reads. Saved reads are encrypted on your phone with a key held in its secure storage. You can delete one read, all reads or everything, at any time, in History and in Settings.

Reads from your current session are kept in memory until you close the app, so you can go back to them, even when saving is off.

If you choose to keep reads about one person, they are saved the same way, encrypted on your phone, under a nickname you type, with your own answers to each "how you will know" line. Nothing else about that person is kept: no profile, no photos, no handles. A person and their reads are deleted after 60 days without a new read unless you pin them, and "Close this chapter" deletes them at once.

What Onread never does

No advertising. No tracking across apps or websites. No analytics or crash reporting tools of Onread’s own, and nothing that collects your content. No selling or sharing of your information for marketing.

The other person in the conversation

A conversation includes someone else’s words. Onread never needs their name, suggests hiding names before a read and does not keep their messages on its servers. Please use Onread to understand a conversation, not to share someone’s private messages more widely.

Adults only

Onread is for people aged 18 and over. Your year of birth is checked on your phone and not stored or sent.

Your choices and rights

Because Onread keeps no account and no conversation content on its servers, there is nothing of yours for us to look up or delete there beyond the per-day counts linked to the random device id. You can delete everything on your phone yourself in Settings. For any privacy question or request, email contact@novairedigital.com. We handle personal information in line with the Australian Privacy Principles, and you can complain to the Office of the Australian Information Commissioner if you are not satisfied with our answer.

Changes

If this policy changes, the new version will appear in the app and on our website with a new date. If a change affects what happens to your conversations, Onread will ask for your permission again.