CreateDeck
Privacy Policy
Effective date: launch day.
CreateDeck is a creator productivity tool. We take privacy seriously and the product is designed around the principle that your raw ideas stay on your device.
This policy describes what information CreateDeck collects, how it's used, and your choices. By using CreateDeck you agree to this policy.
What we collect
On your device (never sent to us)
- Voice memos stored as audio files in
Documents/Audio/ on your device. Deleted when you delete the corresponding idea or wipe the app.
- Ideas, hooks, posts, beats, platform adaptations in the app's local SwiftData store.
- Voice samples, voice modes, templates, series + theme tags.
If you enable iCloud sync (optional, requires signing in), the above is mirrored to your private iCloud container. Apple stores it; we don't.
Sent to third-party services (only for processing, not retained)
- Transcripts of your voice memos go to Apple Speech (on-device for memos under 30s) or OpenAI Whisper API (longer memos). Neither service retains them or uses them for model training.
- Idea text goes to Anthropic Claude for hook generation, idea distillation, beat-structure generation, and platform-specific adaptations. Anthropic does not train on API data per their API terms.
Sent to our backend (only if you sign in and use Studio features)
- Apple ID identity token is sent to our backend to verify your identity and issue a session token. We store: a hashed user ID, your name (if you choose to share it during Apple Sign In), and your email (if you choose to share it).
- Studio review URLs: post body + timestamp stored so the recipient can view them. Deletable any time.
- Integration tokens (Notion, Slack, ClickUp): encrypted in our token vault. The iOS app never sees the raw tokens.
- Referral data: referral code + invitee's anonymized conversion status.
Not collected
- No IDFA or cross-app advertising identifiers.
- No behavioral analytics SDKs.
- No sale, rental, or sharing of your information with advertisers.
How we use the information
| Information | Purpose |
|---|
| Voice memos + transcripts | To generate hooks, distill ideas, build first cuts |
| Apple ID token | To verify identity once for Studio features |
| Studio review URL contents | To render the post for collaborators |
| Integration tokens | To send your posts to your chosen tools |
| Referral data | To credit you a free month when an invitee converts |
Third-party processors
- Apple Speech (on-device): transcription. Apple privacy.
- OpenAI Whisper API: transcription. No training on API data.
- Anthropic Claude API: hook + adaptation generation. No training on API data.
- Apple Sign In: identity verification.
- CloudKit: encrypted device-to-device sync.
- Vercel (backend host): anonymized logs.
- Supabase (Postgres host): encrypted at rest.
- RevenueCat / StoreKit: subscription state management.
- Notion / Slack / ClickUp / Buffer / Later (optional integrations).
Your choices
- Delete any idea, post, or piece of content at any time from inside the app. Audio files are deleted along with the idea.
- Sign out in Settings clears your session token from the Keychain.
- Revoke Sign in with Apple from iPhone Settings → Apple ID → Password & Security → Apps Using Apple ID.
- Request export: email privacy@createdeck.app.
- Request deletion: email privacy@createdeck.app. Uninstalling the app deletes the on-device store automatically.
Children
CreateDeck is not directed at children under 13. We do not knowingly collect information from anyone under 13.
International transfers
Our backend (Vercel + Supabase) is hosted in the United States. By using CreateDeck you consent to your information being processed in the United States.
Changes
We'll post any material change to this policy at this URL with the updated effective date. For significant changes affecting your privacy, we'll notify you in the app.
Contact
privacy@createdeck.app
Perry Hampton, individual developer.