LEGAL
Privacy Policy
Effective 15 July 2026
The short version. Proof stores what you write so you can look back at it. Nothing you save is public. We don't sell your data, we don't run ads, and there is no analytics or tracking SDK in the app. To organize a moment, its text is sent to OpenAI; everything else stays between your device and our database. You can delete your account, and everything in it, from inside the app.
1. Scope
This policy covers the Proof iPhone app and this website. It explains what we collect, why, who else processes it, and what you can do about it.
2. Who operates Proof
Proof is operated by Proof. For anything in this policy, contact support@tryproof.app.
3. What we collect
Account information
When you sign in with Apple or Google we receive a user identifier and, depending on what you allow, an email address and display name. We never receive your Apple or Google password. If you use Apple's Hide My Email, we only ever see the relay address.
What you save
The content of your moments: your original text, any private note, the people and area you attach, Work Details, and the title and area generated for you. Your original words are stored separately from anything generated and are never overwritten.
Photos, voice recordings and videos
Attachments you add are stored in a private storage bucket scoped to your account. Proof requests camera, photo library or microphone access only at the moment you use that feature.
Purchases
If you subscribe, RevenueCat and Apple tell us whether your subscription is active and which plan it is. We never receive your card number — Apple processes payment.
Support messages
If you email support, we hold that correspondence so we can answer it.
What we do not collect
Proof contains no analytics, crash-reporting, attribution or advertising SDK. We do not track you across apps or websites, and we do not build a profile of you. This website sets no cookies and runs no third-party scripts.
4. How we use it
- To store your moments and show them back to you.
- To sync them across your devices and keep them if you lose your phone.
- To generate a title and area for each moment, and weekly and monthly recaps.
- To tell whether you have Proof Plus.
- To send a weekly recap reminder, if you turn it on.
- To answer your support messages.
5. Cloud synchronization
Proof is local-first: a moment is written to your device before anything is sent anywhere, so capture works offline. When you're signed in and online, moments sync to our database so they survive losing your phone. This means your content leaves your device. Transport uses HTTPS. Our database and storage are hosted by Supabase in the ap-south-1 (Mumbai) region, and access is restricted by row-level security so that a signed-in account can only reach its own rows.
We do not claim end-to-end encryption. Content is encrypted in transit and at rest by our hosting provider, but we — and our providers — are technically capable of accessing it. We access it only to operate Proof, fix a fault you report, or comply with the law.
6. AI processing
What is sent: the text of a moment, at the time you save it, so a short title and an area can be generated.
Where it goes: OpenAI, via their API, from our server — never directly from your device.
What is not sent: your name, your email, your account identifier, your photos, your voice recordings, your videos, or your private notes.
Training: OpenAI's API terms state that data submitted through the API is not used to train their models by default. We have not opted in to any such training. We do not control OpenAI's terms and they can change them; if the position changes materially we will update this policy.
Retention: OpenAI may retain API inputs for a limited period for abuse monitoring under their own policy. We do not control that retention window.
If AI organization fails, Proof keeps your own words as the title. It never invents one.
7. Service providers
These are every third party that processes anything on our behalf:
- Supabase — authentication, database, file storage and server functions. Stores your account and everything you save.
- Apple — Sign in with Apple, subscription billing, and push notification delivery.
- Google — Sign in with Google, if you choose it.
- OpenAI — generates titles and areas from moment text, as described above.
- RevenueCat — records whether your subscription is active.
- Cloudflare — hosts this website. Standard server logs only; no cookies, no analytics.
There are no others. If we add one, this list changes before it ships.
8. When information is shared
Only in these cases: with the providers above, to run Proof; when you deliberately share something yourself (a recap image or PDF, say); when the law requires it; or if the business is transferred, in which case this policy travels with it or you are told first.
When you share a recap, it contains the titles, areas and dates of the moments in it. Your private notes are never included in anything you share.
9. Selling and advertising
We do not sell your personal information. We do not share it for cross-context behavioural advertising. There is no advertising in Proof.
10. Retention and deletion
We keep your moments until you delete them or delete your account — this is a record you're meant to keep, so nothing expires on its own.
Deleting your account from You → Delete account removes your account, your moments, your attachments and your profile from our live systems immediately. It requires you to sign in again first, and it cannot be undone.
Backups. Encrypted backups of our database may retain deleted content for up to 30 days before being overwritten on our provider's normal cycle. We don't restore deleted accounts from backup on request.
Support emails are kept while needed to resolve your issue and for a reasonable period afterwards. Records we must keep by law — a purchase record, for instance — are kept for as long as the law requires.
Deleting your account does not cancel an Apple subscription. See Terms → Cancellation.
11. Security
Transport is HTTPS. Data is encrypted at rest by our hosting provider. Row-level security means an account can only read its own rows, and attachments live in a private bucket keyed to your user id — this is enforced by the database, not just the app. Account deletion runs server-side and verifies your identity from your session token.
No system is perfectly secure, and we don't claim otherwise.
12. International transfers
Our database and storage are in India (ap-south-1). OpenAI processes text in the United States. Apple, Google, RevenueCat and Cloudflare operate globally. If you're in the EEA or UK, this means your information is transferred outside your region and protected by the relevant provider's standard contractual clauses.
13. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your information, to object to or restrict processing, and to complain to your data protection authority. We apply these to everyone, wherever you are. We don't charge for them and we won't treat you differently for using them.
14. Privacy choices
Everything here works from inside the app or by email — you never have to ask permission to leave.
- Delete your account and all your data: You → Delete account. Immediate and permanent.
- See or correct what's stored: your moments are all visible in the app and editable there. For anything else, email support@tryproof.app.
- Get a copy of your data: email support@tryproof.app and we'll send a machine-readable export.
- Turn off the weekly reminder: You → Weekly recap reminder, or revoke notification permission in iOS Settings.
- Revoke camera, photos or microphone access: iOS Settings → Proof.
- Manage or cancel your subscription: Apple subscription settings.
- Ask us anything else: support@tryproof.app.
15. Children
Proof isn't for children under 13. We don't knowingly collect their information. If you believe a child has an account, email support@tryproof.app and we'll delete it.
16. Changes
If this policy changes materially we'll update the effective date and, where it matters, tell you in the app before the change takes effect.
17. Contact
Proof
support@tryproof.app