Privacy policy · Last updated 23 September 2026
What leaves your phone, and what doesn't.
Rizzpond reads a chat and writes your reply. To do that, some of the chat has to leave your phone. This page says exactly what, where it goes, how long it stays and how to delete it. It is written from the app's code, in plain words.
The short version
- The screenshot or text you ask Wink to read goes to our server and on to OpenAI to write your reply, and only after you have said yes to that in the app. We do not keep the screenshot or the chat. The one exception is a short list of named test accounts, today only the maker's own, described below.
- The replies Wink writes are kept on our server for up to two days, so the same request can be answered again if the app has to ask twice. Then they are deleted.
- Everything else about you (your quiz answers, your texting style, saved replies, the chats you have scanned) lives on your phone only, unless you tap Back up.
- No ads, no trackers, no analytics kit, no advertising ID. Nothing is sold or shared for marketing.
- You can delete your account and everything tied to it from inside the app.
Who is responsible
Rizzpond is made and run by Darabos Group. Darabos Group is the data controller for the personal data described here.
Postal address: [POSTAL ADDRESS — David to fill in]
Email: info@rizzpond.app
Your account
You do not sign up. The first time the app talks to our server it creates an anonymous account: a random identifier with no name, no email and no phone number attached. Your daily allowance, your free scan and any subscription are tied to that identifier.
If you choose Sign in with Apple, Apple gives us a stable identifier for you and, if you allow it, your email address or a Hide My Email relay address. We use it only to recognise you again, on this phone or another, so that your account, backup and subscription can follow you. Buying Pro requires signing in, so the purchase can be tied to an account we can restore.
What stays on your phone
These are stored in the app on your phone and go nowhere unless you back up (see below):
- Your quiz answers: who you usually text, your vibes, your spice, effort and humor dials, the persona they add up to, and the messaging apps you picked.
- Your texting style: what the app has learned about how you write, and any sample texts you typed to teach it.
- The chats you have scanned, kept per person so Wink can remember the conversation next time, and the replies you saved.
- Whether you told Wink a reply worked, and what you have copied.
Deleting the app deletes all of this from the phone.
Before anything leaves your phone
Setting the app up ends with a screen called Before you start. It says the chat you show Wink is sent to be read and answered and for nothing else, and it links to this policy, which names OpenAI. Nothing can be sent until you tap I agree: our server keeps that answer and refuses to read a screenshot or write a reply without it. You can take it back at any time under You → Account → Stop sending to OpenAI, and nothing is sent after that.
Your answer is recorded on our server, and it is our server that acts on it: without a yes on record, our server refuses to read a screenshot or write a reply at all, whatever the app says. We keep, for each decision you make, your account identifier, whether you said yes or took it back, the version of the wording you were shown, and the time. Nothing else. Taking a yes back is stored as its own entry rather than erasing the old one, so the record of what you decided and when stays honest. These entries are deleted with your account.
Smart scan: reading a screenshot
When you pick a screenshot, your phone first recognises the text in it on the device. Then the app sends the screenshot itself, together with the lines your phone recognised and where they sit, to our server. Our server passes them to OpenAI, whose vision model reads the chat: who said what, and which message is waiting on you. The read comes back to your phone.
What our server keeps from a scan:
- A count of scans per day for your account (the cap is 40), and whether your free scan has been used. If a read fails or cannot be used, the free scan is given back, and that is recorded too.
- Technical counts in our server logs: how many text tokens the read used, how long it took and which model was used. Never the image and never the text.
What our server does not keep: the screenshot, the recognised lines, or what was read. They exist on our server only for the seconds it takes to answer you.
When the read is confident enough, your phone also asks our server to start writing replies straight away, so they are ready when you tap. That request is described under Replies below. It is only sent when the phone is ready to show you those replies.
Replies: writing your text
When you tap Reply, or when replies are written ahead of your tap as described above, the app sends to our server, and our server sends to OpenAI:
- The conversation, up to the last 40 messages of it, and which message you are answering. If you pasted text instead of a screenshot, that text alone.
- The other person's first name as it appears in the chat, so the reply can use it naturally.
- Your settings for this reply: who you are texting, your vibes and dials, your persona, and the tone you picked.
- Your texting style, and up to three of your own typed texts as examples, so the reply sounds like you.
- Your time zone, so your daily allowance resets at your midnight, not ours.
What our server keeps from a reply request:
- The replies Wink wrote, for up to two days, so that if your phone asks about the same request again it gets the same answer instead of spending a second request. Replies written ahead of your tap are kept for up to one day. The conversation you sent is not kept with them.
- One row per reply set with the model used, your persona and vibes, the number of text tokens and what it cost us. No text from the chat or the replies.
- Your daily count and your time zone.
OpenAI
Reading and writing are done by models run by OpenAI through its API. Your screenshot, the chat and your settings reach OpenAI only through our server, never directly from your phone, and OpenAI never receives your name, email or account identifier. Every request is sent with the API setting that asks OpenAI not to store the exchange for later retrieval, together with a one-way hash of your account identifier that lets OpenAI spot abuse without knowing who you are.
OpenAI processes this data under its own API terms and policies, which you can read at openai.com/policies. OpenAI is based in the United States.
Where the AI comes in
Everything Wink writes is generated by a machine-learning model. There is no human writing replies, no library of pre-written lines, and nobody at Darabos Group reading your conversation to help. We say this plainly because the EU AI Act asks anyone putting an interactive AI system in front of people to make it obvious that it is one, and because you should know before you send a stranger a sentence you did not write.
Three things follow from that, and they matter more than the label:
- It can be wrong. A model can misread who said what in a screenshot, miss a joke, miss a warning sign, or write something that reads fine and lands badly. Read every reply before you use it.
- Nothing is decided about you. We do not score you, rank you, profile you or make any automated decision that has a legal or similarly significant effect on you. The model writes text; that is the entire extent of it.
- Your chats are not used to train a model. Not one of ours — we do not train models — and every request to OpenAI carries the API setting that asks it not to store the exchange for later retrieval. What OpenAI does beyond that is governed by its own API terms, linked above, and we deliberately promise nothing on its behalf that we have not seen in writing.
Rizzpond Pro
Payment is handled entirely by Apple. We never see your card, your bank or your Apple ID password. When you buy, Apple gives the app a signed receipt, which our server checks with Apple and links to your account: we keep the transaction identifier, whether it is a live or a test purchase, and your account identifier. Every time Pro matters, our server asks Apple whether the subscription is still active, so an expired or refunded subscription stops unlocking Pro. A small number of accounts have Pro given to them by hand, for testing; that list is kept by account identifier.
Backups
Nothing is uploaded automatically. If you tap Back up (or Refresh backup) while signed in with Apple, the app uploads one backup of your persona and quiz answers, your messaging-app choices, your saved replies and your outcome notes to our server. The other person's texts are stripped from saved replies before upload, and your scanned chats and screenshots are never included. A backup is at most 2 MB; each new one replaces the last. Restore brings it back to a phone. You can see and control all of this under You → Account.
Test accounts
Everything above says we keep no screenshot and no chat. That is true for everyone except a short list of named test accounts, today only the maker's own. For those accounts, and only those, more is recorded: their reads and replies are kept with names, phone numbers, emails, links and addresses removed, together with timings and what their app showed and did (numbers and fixed labels, never text). Their screenshots and the raw reads are kept in private storage only until they are moved to the maker's computer, then deleted from the server. Nobody is a test account unless we have named them on that list, and the database itself refuses to store this for anyone else. Before anyone but the maker is added, they will be asked first. A test account is deleted like any other: its files and its log go with it.
Limits and safety
To keep the service affordable and to stop abuse, our server caps the size of every request and every screenshot, counts requests per account per day, and adds up what all requests together cost us each day, with a separate total for the part that came from free accounts. When a day's total is reached the app says so and works again the next day. The daily totals hold an amount and a number of calls and no account.
The other person in the chat
A screenshot shows what someone else wrote to you. Their words are read only to write your reply and are not kept by us. The only piece about them the app keeps is on your phone: the chat itself, saved under their first name, so Wink can pick the conversation up next time. We ask you to scan only your own conversations. See the terms.
Where your data is processed
- Our server and database run on Supabase in Frankfurt, Germany (EU).
- OpenAI processes reads and replies in the United States.
- Apple handles payment and Sign in with Apple under its own terms.
- This website is served by Cloudflare, which keeps its own technical logs.
Sending data from the EU to the United States needs a legal safeguard under Chapter V of the GDPR — either the provider's certification under the EU–US Data Privacy Framework, or Standard Contractual Clauses in our contract with them. [TRANSFER MECHANISM — to be named here once the OpenAI data processing addendum is signed]. We will not print a mechanism we have not got in writing, so this sentence stays marked until the paperwork exists. It is the last open item before the app is submitted.
How long we keep things
| What | Where | How long |
|---|---|---|
| Screenshot, recognised lines, the chat, your pasted text | Our server, in memory only | Seconds: while the request is answered |
| Replies Wink wrote for a tapped request | Our database | Up to 2 days |
| Replies written ahead of your tap | Our database | Up to 1 day |
| Daily counts, your time zone, free scan, cost per reply set (no text) | Our database | While your account exists |
| Test accounts only: reads and replies with names removed, timings, what the app showed and did | Our database | While the test account exists |
| Test accounts only: screenshots and raw reads | Private storage | Until moved to the maker's computer, then deleted |
| Anonymous account identifier; Apple identifier and email if you signed in | Our account system | While your account exists |
| Apple subscription link | Our database | While your account exists |
| Backup | Our database | Until you replace or delete it, or delete your account |
| Everything on your phone | Your phone | Until you delete it or the app |
Every row in our database is tied to your account and is deleted with it.
Why we are allowed to
We process your data to provide the service you asked for (reading the chat, writing the reply, your allowance, your subscription and your backup), and, for sending a chat to OpenAI, because you agreed to it in the app before the first one was sent and can take that back at any time. We keep counts and limits because we have a legitimate interest in keeping the service affordable and free of abuse.
Your choices and your rights
- Delete your account in the app under You → Account: Delete account if you signed in with Apple, Delete my data if you never did. The server deletes first, and only when it has answered that nothing is left does the app wipe the phone and return to Welcome. Everything tied to the account on our server goes with it: your account, every count, your subscription link, your backup and, for a test account, its files and log. If you signed in with Apple, the app also asks Apple to disconnect Rizzpond from your Apple ID. If you have a subscription, cancel it with Apple as well; deleting the account does not cancel it, and the confirmation links you to Apple's page for that.
- Sign out at any time; your phone's data stays on the phone. Delete local data on the You tab wipes this phone only, and says so.
- Never back up: nothing about your profile is uploaded unless you tap the button.
- Under EU data protection law you can ask us for a copy of the data we hold about you, have it corrected or deleted, restrict or object to its processing, or take it with you. Write to us at the address above. You can also complain to your local data protection authority; in Denmark that is Datatilsynet.
If you live in the United States
US state privacy laws ask for the same facts in a different vocabulary, and a few extra ones: which statutory categories we collect, whether we sell or share, what counts as sensitive, and how to appeal if we refuse a request. All of that is on the US state privacy notice. The short version: we do not sell your personal information, we do not share it for advertising, and the contents of your chats are treated as sensitive and used only to write your reply.
Age
Rizzpond is for adults. You must be 18 or over to use it. We do not knowingly collect data from anyone younger; if you believe someone under 18 has an account, write to us and we will delete it.
This website
This site sets no cookies and runs no analytics. The only thing it stores is your light or dark theme choice, in your own browser, if you pick one. Fonts are served from this site, not from a third party. Cloudflare, which hosts it, sees your IP address and keeps its own technical logs. The cookies page has the whole of it, which is one table with one row.
Changes
If the app starts doing something new with your data, this page changes first and the date at the top moves, and for a change that matters the app tells you before it applies to you.
Contact
Darabos Group
[POSTAL ADDRESS — David to fill in]
info@rizzpond.app