Privacy Policy

Last updated 2026-09-04. This policy applies to the ChoiceFate app for iPhone, iPad, and Android.

1. What collects nothing

ChoiceFate has no server, no account system, and no third-party analytics, advertising, or crash-reporting SDK. The app does not upload your decisions, your voice, or your device identifiers to the developer or to anyone else.

2. Where your decision data lives

Your questions, options, random results, adoption status, final decisions, and follow-up notes are stored in a local database on your device. They remain there until you delete them or uninstall the app. This data is not sent to us.

3. Voice and speech recognition

Voice input uses the system's on-device speech recognizer provided by your platform (Apple SFSpeechRecognizer on iOS, the system SpeechRecognizer on Android). The audio is held only for the active recognition session — typically a few seconds, at most 30 — and is not saved, uploaded, or kept as a recording. The recognition result is shown to you for confirmation before it becomes part of a decision. The speech model is provided and processed by the operating system on your device, not loaded by the app.

4. Permissions

• Microphone (iOS & Android): used only for on-device voice input.
• Speech recognition (iOS, the NSSpeechRecognitionUsageDescription permission): used only for on-device recognition.
• If you deny microphone or speech permission, ChoiceFate still works: you simply type your choice instead.

5. Network

On Android, the release build does not declare the INTERNET permission, so by operating-system design the app cannot reach the network. This is the strongest possible guarantee about network use. On iOS, the app makes no network requests. Voice recognition is restricted to the on-device recognizer.

6. How long we keep data

Data is kept on your device for as long as you use the app and until you delete it. Drafts are saved locally so that an interrupted session can be resumed.

7. Deletion

You can delete a single record or all of your data from within the app. Deletion is always confirmed first. When you delete, the app clears the current device data it controls — the database, its write-ahead log, indexes, cache, temporary audio, notification content, and local search index. We cannot delete copies that have already left your device; see the next section.

8. What we cannot promise

A few things are outside the app's control, and we state them plainly rather than overpromise:

• System backup, migration, and restore. Your device may back up or transfer app data as part of Apple's or Google's backup and device-to-device migration, controlled by your device settings and their policies. The app neither prevents this nor claims to have cleared such backups.
• Screenshots and diagnostic data. If you create a screenshot, or if the platform collects diagnostics, those are controlled by you and the operating system.
• Copies you share. If you export or share any content yourself, that copy is yours and the developer has no control over it.

9. Children

The app is a general-purpose tool and does not knowingly collect data from anyone — it collects nothing at all. Because no personal data is collected, no special children's protections are required beyond what is described here.

10. Changes to this policy

If this policy changes, the updated version will be posted on this page with a new “Last updated” date. Material changes will be described here. We do not use your data in ways that are not described in this policy.

11. Contact

Questions about privacy? Email privacy@iagent7.com.