EFFECTIVE OCTOBER 11, 2026
Privacy Policy
SamePage helps people write and respond to difficult messages while collecting as little information as practical. This policy explains how SamePage handles information when you use the app, keyboard, or share extension.
Information you choose to submit
SamePage sends content you choose to SamePage’s backend and OpenAI’s API over an encrypted connection only after you explicitly allow AI processing. You can withdraw this permission at any time under AI Privacy & Consent; doing so blocks new AI requests from the app, keyboard, and share extension.
For subscribers who have allowed AI processing, the app can begin preparing a reply after a brief pause when you enter or paste text into the reply composer, or import text from a screenshot you choose. This sends the composer’s text for AI processing before you tap the reply button, and may include text you later edit or decide not to use. Preparing the reply gives it a head start; SamePage shows the result when you request it and never sends it to your conversation. Free reply generation starts only when you explicitly request a reply and accept the required disclosure. Keyboard AI actions, rewrites, and screenshot-to-keyboard analysis start when you request those tools.
Earlier permission to use Meta does not authorize OpenAI processing. The updated SamePage app asks you to review and allow OpenAI before sending new content to OpenAI. If you decline, normal typing and other features that do not need AI remain available.
If you choose Learn My Style, SamePage temporarily reads a screen recording on your device to recognize messages written by you. The video is not uploaded. Recognized messages are used on-device to create a compact writing-style summary and are not saved as conversation history. When personalization is active, that summary accompanies future reply and rewrite requests.
If you choose Relationship Memory, SamePage temporarily reads a screen recording on your device, recognizes visible message text from both sides, and uses repeated-frame checks to filter interface text and likely text inside photos or videos. The recording itself is not uploaded. With your AI-processing permission, the extracted message transcript is sent to SamePage’s backend and OpenAI’s API to create or update a compact relationship summary. That summary is stored on your device and may accompany later requests when SamePage matches the conversation name.
SamePage does not monitor your conversations in the background or silently read your clipboard, contacts, other messages, or photo library. Normal keyboard input stays on your iPhone and works without Full Access or a network connection.
Information stored on your device
SamePage stores limited app state in a container shared by the app and its extensions. This can include keyboard-verification status, subscription status, request state, generated screenshot suggestions, an optional writing-style summary, and optional relationship summaries.
Screenshot suggestions saved for the keyboard expire after 10 minutes and are deleted after you insert one. You can replace or delete your writing-style summary in the app. Deleting SamePage removes its locally stored data from the device.
Operational information
To operate and protect the service, SamePage may process limited technical information such as the requested endpoint, response time, input and output character or token counts, HTTP status, generic errors, and network information used for security and rate limiting. SamePage is designed not to log message text, rewritten text, screenshot contents, or raw AI output.
Subscriptions
Subscription purchases are processed by Apple through StoreKit. For paid AI requests, the app sends Apple-signed purchase proofs to SamePage’s backend to verify that SamePage Pro is active and belongs to this app. The backend validates the subscription product, status, and expiration, does not log or store the signed proofs, and uses an opaque one-way value for rate limiting. That separate rate-limit value expires from the in-memory limiter after up to 24 hours. SamePage does not receive your full payment-card information.
Versions configured with RevenueCat also send purchase history, subscription status, an anonymous app user identifier, and a free-reply experiment label to RevenueCat for subscription reporting and comparison of offers. RevenueCat does not receive conversation text, screenshots, relationship labels, or the situation you select. Purchase records are retained as needed to provide, restore, and report subscription access.
Free replies and experiments
Versions with free replies let you try the reply composer before subscribing or setting up the keyboard. SamePage verifies Apple’s signed app transaction and derives an opaque identifier to keep your allowance and test group consistent. The server retains that identifier, your assigned allowance, usage count, and request-recovery records for as long as needed to enforce the one-time offer and prevent duplicate use. Reinstalling the app does not necessarily reset the allowance.
Submitted text and screenshot images are not stored in the free-usage database. An explicitly requested free generation may finish after a lost connection so you can recover its successful result without using another free request. Generated free-reply results are stored encrypted for up to 24 hours, then expire and are removed by automatic cleanup. These results may include details from your message. Encrypted infrastructure backups can retain copies longer: Render’s daily disk snapshots are available for at least seven days, until rotated out by the provider. Expired results are not served by the app after a restore. A keyed fingerprint of the request and its status remain to prevent duplicate requests. This limited recovery storage is separate from the AI provider’s retention below.
Optional advertising measurement
Versions configured with Meta advertising measurement offer an optional tracking choice after you have used a reply. Only if you allow tracking through Apple’s App Tracking Transparency prompt does SamePage initialize Meta’s advertising SDK and share generic app activity, such as app activation, a copied first reply, and paywall views, with device and advertising identifiers and associated technical metadata. With that permission, RevenueCat may also send subscription and revenue events to Meta to measure SamePage’s ads. The Meta SDK may process its own diagnostic information. This advertising integration is separate from any AI processing described above.
Conversation content, screenshots, selected situations, relationship details, and free-reply identity records are not sent to Meta for advertising measurement. Declining tracking does not affect free replies, purchases, or other app features. Change your choice in iPhone Settings → Privacy & Security → Tracking. The app checks the current permission when it becomes active and stops new advertising measurement when permission is no longer authorized. Previously sent information is subject to the providers’ retention practices; contact us for privacy or deletion requests.
Optional reminders
If you opt in, your iPhone schedules one discreet local reminder after 72 hours away from the SamePage app, moved to daytime if necessary. Opening the app restarts the timer; keyboard-only use does not. The reminder does not repeat if ignored and contains no conversation details. Turn it off in SamePage → More → Reminders or iPhone notification settings. SamePage does not send message contents or a notification token to a remote push-notification service for these reminders.
How information is used
- Generate the reply, rewrite, or screenshot result you request, including preparing a paid composer reply as described above.
- Personalize results when you enable Learn My Style.
- Maintain subscription access and restore purchases.
- Provide a one-time free allowance, recover interrupted requests, and compare free-reply offers.
- Measure SamePage advertising only when you authorize tracking.
- Schedule a local reminder only when you opt in.
- Protect the service from abuse and diagnose reliability problems.
Service providers and retention
SamePage shares information with providers that host the backend, perform AI inference, deliver network services, or report subscription entitlements, and with Meta for optional advertising measurement as described above. SamePage does not display third-party advertising or use submitted conversation content for cross-app tracking. RevenueCat and Meta process their respective data under their applicable terms and privacy policies.
SamePage uses OpenAI’s API to generate AI results. OpenAI states that API inputs and outputs are not used to train its models by default. SamePage disables optional storage of completed requests. OpenAI may still retain prompts and outputs in standard abuse-monitoring logs for up to 30 days, or longer when required by law or reasonably necessary to protect people or services from harm. Prompt caching may temporarily retain encrypted processing data for up to 24 hours. These controls do not provide zero data retention. See OpenAI’s data controls for details.
Submitted text and screenshots are not intentionally retained by SamePage as conversation history or written to SamePage application logs. Learn My Style and Relationship Memory recordings are deleted from SamePage’s temporary storage after local processing; the original remains in your Photos library. Learn My Style recognized text is not persisted. If a Relationship Memory AI summary is interrupted, a protected recovery copy of the extracted transcript may remain on your device for up to 24 hours so you can retry without rescanning the recording; it is deleted after a successful summary or when you choose a different recording. Relationship Memory transcripts are not intentionally stored by SamePage as conversation history, but the AI provider’s processing described above applies when a summary is requested. The resulting compact summaries remain on your device until you replace or delete them, or delete SamePage. Operational metadata may be retained for a limited period for security, rate limiting, and reliability.
Security, children, and changes
SamePage uses encrypted HTTPS connections and limits access to production systems. No electronic transmission or storage method is completely secure. SamePage is not directed to children under 13 and does not knowingly collect personal information from children under 13. This policy may be updated as SamePage changes, with the effective date revised when material changes are published.
Questions or privacy requests: alan@marketzest.com