Privacy Policy

Updated 13 October 2026

The short version: TALISMAN requires no account and shows no advertising. Your reflections, edited actions and personal notes stay in app-private storage. They are not included in analytics or widgets. Apple handles purchases and RevenueCat observes subscription transactions. Optional product-milestone analytics sent to RevenueCat is off by default and needs your separate permission. From version 3.0.3, anonymous usage statistics (which screens were reached, no personal text) are sent to PostHog; you can turn them off in the app (section 05). Personal stories are optional and involve sending your vision profile, with your permission, to an AI provider (Anthropic's Claude, reached through OpenRouter) to write your story. Earlier-version behavior is explained below. If you export or share your writing, you choose where it goes.

01Who we are

TALISMAN ("the app," "we") is a daily-affirmations app for iOS, published at talismandaily.com. This policy describes what information the app handles and where it lives. Questions: support@talismandaily.com.

02What we collect

There is no app account, advertising SDK or cross-app advertising tracking. We do not sell your data. The app does make network requests through StoreKit and the RevenueCat SDK. RevenueCat receives an assigned app-user identifier, purchase/subscription information and technical information used to provide its service, such as device/operating-system details and service activity timestamps. The identifier does not require your name or email, but it allows activity to be associated with the same subscriber record. Purchase observation continues regardless of the optional analytics choice; that choice does not disable StoreKit or all RevenueCat network requests.

Optional product analytics in version 2.2.0

Optional milestone analytics is off by default. Only if you enable it do we send timestamps for these milestones: onboarding completed, paywall shown, verified purchase, legacy streak extension, sample completed, practice saved, action reviewed, practice returned to, and widget setup viewed. Approved metadata is limited to a plan label, screen context, count, or day-since-install index. Only the latest occurrence and approved metadata are stored as subscriber attributes; they are not a transcript of your activity. Role choices, card identifiers, review outcomes and anything you write are not included in those uploads.

You can enable or withdraw permission using the in-app privacy controls, available from the membership screen and Settings without requiring an active membership. Declining does not prevent purchasing or using your membership. Turning it off stops the app from adding newly occurring optional milestones for upload. Data already queued by the SDK may finish syncing; withdrawal does not automatically erase queued or previously uploaded records, or cancel a subscription. Contact us to request deletion of previously collected optional records.

Earlier versions

Earlier versions, including 2.1.0, can send legacy onboarding, paywall, purchase and streak milestones without the separate opt-in control described above. This policy does not imply that version 2.2.0's consent controls exist in earlier versions. You can request deletion of earlier optional records using the contact details below.

03What stays on your device

To function, the app stores the following locally:

• Your onboarding draft, chosen role and practice preferences.
• Your reflections, edited actions, review notes and saved practice records, kept in app-private storage.
• Reminder preferences, favorites, custom lines and legacy saved content.
• Constrained diagnostic events in Apple's logging system. Their approved labels can include a role, public card ID and review-outcome category, but never reflection, action or note text. The app does not upload these logs. Logs may be included if you deliberately share a device diagnostic report.

The widget's shared container holds only public authored content, the selected role and the access state needed to display it. It never contains your edited action, reflection or note. If you use iCloud device backup, Apple may include app data in your own backup under Apple's terms. TALISMAN does not provide a separate cloud journal or guarantee recovery after reinstalling. Export records before removing the app.

You can access, export and delete existing private practice records even when your membership has ended. An export uses the destination you choose in Apple's share sheet; that destination has its own privacy practices. Deleting local records does not cancel a subscription or erase copies you exported, device backups or transaction records held by Apple and RevenueCat.

04Personal stories (optional AI processing)

When you enable personal stories in the app, TALISMAN can generate daily personalized stories using artificial intelligence. This feature is optional and requires your explicit consent in the app. If you choose this feature:

• You provide your selected life areas, vision phrases, chosen obstacle, and optionally your first name during onboarding and in the You tab.
• When a story is generated, this profile data, the current date and the titles of your recent stories (so a new story doesn't repeat them) are sent over HTTPS to Talisman's server (hosted on Vercel). The server does not store or log the request or the generated story.
• The server forwards your profile to Anthropic's Claude model to compose the story and affirmations tailored to your vision. The request may be routed through OpenRouter, an AI model routing service, which we configure not to log your prompts or allow providers that collect data for training. If we change how requests are routed, we will update this policy.
• Anthropic processes this data as a service provider under its commercial terms, which state that customer API data is not used to train its models. Anthropic may keep API inputs and outputs for a limited period for safety and abuse monitoring under its own policies. Anthropic's full privacy policy is at anthropic.com/legal/privacy.
• The generated story is returned to your device and stored locally in app-private storage. It does not leave your device again.
• Membership is verified using your App Store transaction record, which contains only product and transaction IDs — not your name, email, or payment details.
• You can turn personal stories off at any time in the You tab. When disabled, stories are written locally from authored templates without sending data to the server.
• Narration (version 3.0.1 and later): to read your story in a natural voice, the text of each story segment is sent over HTTPS to Talisman's server, which passes it through OpenRouter to OpenAI's speech model and returns the audio. This also applies to the first story you hear during setup. Neither our server nor the request stores the text; the audio is cached only on your device so replays work offline. Only the story's own words are sent for narration; they can include the first name you chose for the narrator. If you're offline or choose the on-device voice in the You tab, Apple's on-device speech is used and nothing is sent.
• You can export or delete all your profile data and stories using the controls in the app.

05Anonymous usage statistics

From version 3.0.3, TALISMAN sends anonymous usage statistics to PostHog (US cloud) so we can see where the app is unclear: which onboarding screen was reached, the multiple-choice answers given as fixed labels (for example the main obstacle, a phone-hours range or an age range), whether the membership screen was shown, which plan was selected and whether a purchase or restore succeeded, and whether a story was started or finished. Each event also carries the app version, install channel, language and App Store country.

• Events are tied to a random identifier created on your phone. It is not your advertising identifier, is not linked to an account, your name or your Apple ID, and is not used to track you across apps or websites.
• We never send your name, your vision words, story text, reflections or any other free text.
• PostHog receives your IP address as part of the network request; we do not use it to locate or identify you.
• This is on by default. Turn it off anytime in You → Privacy & data choices → "Share anonymous usage stats". Sending stops immediately, queued events are deleted and the random identifier is forgotten.

06Purchases & RevenueCat

Subscriptions and legacy Lifetime purchases are billed entirely by Apple through your Apple Account. We never receive your payment details, billing address, or identity from Apple directly. Apple's handling of your purchase data is governed by Apple's Privacy Policy.

StoreKit verifies the access used by the app. We use RevenueCat to observe transactions and understand subscriptions. Its assigned app-user ID is associated with purchase records and, when applicable, the limited milestone attributes described in section 02. These records are visible to us in RevenueCat's dashboard. We do not use this data for advertising and do not sell it.

RevenueCat describes its role for app end-user data as a processor acting on the developer's behalf. Its published Data Processing Addendum sets out processing under customer instructions, technical and organizational security measures, and obligations requiring its subprocessors to provide no less protective terms. Its Privacy Policy explains that app end-user processing is governed by the customer agreement and DPA, rather than by the policy provisions for RevenueCat's own website visitors. These are provider obligations, not a promise that any system is immune to unauthorized access.

07Retention & deletion

App-private writing and preferences remain on your device until you delete them in the app or delete the app's data by uninstalling it. Device backups and copies you export are separate and remain under your or your chosen destination's control.

Optional milestone attributes may remain with our provider while needed for subscription and product-use analysis, or until you request their deletion. We do not promise a fixed retention period. To request access, correction or deletion, contact support@talismandaily.com. We may need information to locate and verify your subscriber record; do not send your password, payment-card details or private journal.

Apple and RevenueCat may retain transaction or related records for subscription operations, legal obligations, fraud prevention or disputes for as long as those purposes require. Withdrawing optional analytics permission or deleting local writing does not erase those records or cancel billing. RevenueCat's published policy provides for customer-directed deletion requests subject to legal, dispute and agreement-enforcement requirements; provider backups may also follow separate retention practices.

08Notifications

Daily reminders are local notifications, scheduled and delivered by your phone itself. No push-notification server is involved. Reminders use public authored lines, never private practice notes. You choose whether to enable notifications and can change them in iPhone Settings.

09Children

The app is intended for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided data through the app, contact us so we can address the request.

10Changes to this policy

We will update this policy when the information handled by the app changes. Material changes will also be described in release notes.

11Contact

For privacy questions or requests concerning subscription records held by us or our provider, write to support@talismandaily.com.