Privacy Policy.
Pyren is built around a simple principle: your data is yours, not a product. This page explains what we collect, why, and what we never do.
Who we are
Pyren is operated by Pyren LLC, a Michigan limited liability company ("Pyren," "we," "us"). You can reach us about anything in this policy at privacy@pyren.app.
What we collect
Account information
When you sign in with Apple, Apple sends us a unique identifier for your account and — only if you choose to share it — your email address. You can revoke this any time in Settings → Apple ID → Sign in with Apple. We never see your Apple password.
Your content
Tasks, projects, notes, captures, transcripts, and any other content you create in the app. The bulk of this lives in your private iCloud database (synced via CloudKit), which only your Apple ID can access — Pyren can't read it. A small subset is sent to our backend (described below) when you ask the AI to do something.
AI requests
When you use AI features — capture structuring, project decomposition, the daily plan, the chat — the relevant text is sent to our backend, then forwarded to Anthropic's Claude API for processing. We log the request for usage accounting (counting it toward your monthly quota and cost cap), but we do not retain the content of your prompts after the response is delivered. We do not use your content to train models.
Voice capture
Voice transcription happens on your device using Apple's on-device speech recognition. The audio itself never leaves your phone. Only the resulting text — the same text you'd see on screen — gets used by the rest of the app.
Subscription information
Subscription status (active, trial, expired) is managed by Apple's StoreKit and our partner RevenueCat. Apple handles all payment information. We never see your credit card or payment details.
Diagnostics
Pyren v1.0 does not collect crash reports or usage analytics. If we add diagnostic reporting in a future release we'll update this policy first and disclose the specific data collected.
What we don't collect
- Advertising identifiers (IDFA). Pyren does not use ad networks.
- Cross-app or cross-site tracking.
- Location data.
- Contacts, photos, or files outside the ones you explicitly share with the app.
- Any biometric data (Face ID / Touch ID is handled by Apple — we only receive a yes/no result).
How we use the information
- To run the service: authenticate you, sync your content, deliver AI responses.
- To enforce subscription and usage limits.
- To diagnose crashes and improve the app.
- To communicate with you about your account or material changes to the service.
We do not use your information for advertising, profiling, or sale to third parties.
Who we share data with
We use a small number of vendors to operate the service. Each is bound by their own privacy terms:
- Apple — Sign in with Apple, App Store / StoreKit, CloudKit, on-device speech recognition.
- Cloudflare — backend infrastructure (Workers, D1 database, R2 storage).
- Anthropic — the Claude AI models that power our AI features.
- RevenueCat — subscription management and receipt validation.
We do not sell your data, share it with advertisers, or transfer it to anyone outside the vendors above.
Data retention
Your account and content are retained as long as your account is active. If you delete your account, we delete the associated server-side records (account row, usage logs, subscription history) within 30 days. Content stored in your iCloud private database is yours and persists or deletes according to your iCloud settings — Pyren cannot delete it on your behalf.
Anonymized aggregate analytics may be retained indefinitely.
Your rights
Depending on where you live, you may have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Delete your data.
- Object to or restrict certain processing.
- Receive a copy of your data in a portable format.
To exercise any of these, email privacy@pyren.app. We will respond within 30 days. Residents of California, the EU/UK, and other jurisdictions with specific privacy laws have these rights as a matter of law.
Children
Pyren is not directed to children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has provided us data, contact us and we'll delete it.
Security
Sign-in tokens are stored in iOS Keychain. Backend traffic is encrypted in transit (HTTPS/TLS). Server-side data is encrypted at rest by our infrastructure providers. Despite these measures, no system is perfectly secure — if we ever discover a breach affecting your data, we'll notify affected users without undue delay.
International transfers
Pyren is operated from the United States. If you use the app from outside the US, your data is transferred to and processed in the US (and in our vendors' regional data centers, which may include the EU). By using Pyren you consent to that transfer.
Changes to this policy
If we make material changes, we will notify users in-app and update the "Last updated" date at the top of this page. Continued use of Pyren after a change constitutes acceptance.
Contact
Pyren LLC
privacy@pyren.app
