Privacy Policy

The short version: IWillBe is built to know as little about you as possible.

Last updated: July 19, 2026

1. Who we are

IWillBe (bundle ID dev.jonp.iwillbe) is published by Illustrious Development ("we," "us"). This policy covers the IWillBe iOS app and the website at iwillbe.illustrious.dev.

2. What we collect

On-device only

• Your profile and library — your answers, favorites, collections, reminders, and generated affirmations live in SwiftData on your iPhone. We do not send free-text onboarding answers or affirmation text to PostHog. Limited personalization data is sent only when an AI feature needs it, as described below.
• Narration cache — when you play an affirmation aloud, audio files are cached locally (up to roughly 200 MB). They are deleted when you uninstall the app or clear cache from settings.

Pseudonymous analytics

• Installation identifier — a random per-install identifier so we can measure conversion and active use. It is not your Apple ID, hardware UDID, IDFA, name, or email.
• Product events — first launch, onboarding step identifiers and completion, practices, favorites, sharing, feature use, paywall views, and purchase outcomes. Some events include a theme identifier, selected referral-source option, or aggregate counts and booleans. They do not include your affirmation text, identity statement, goals, or other free text.
• Subscription state — whether StoreKit reports a trial start, first paid transaction, or later renewal. We do not send PostHog transaction IDs, receipts, prices, or payment details.

Analytics are collected via PostHog. The SDK uses personProfiles = .identifiedOnly, and IWillBe never calls PostHog's identify function, so no named person profile is created. Events remain associated with the random installation identifier so we can calculate funnels and repeat use. Production analytics are disabled in development and automated-test builds.

Subscriptions

• StoreKit status — payments and receipts are handled by Apple. The app sends the coarse subscription events described above to PostHog, but we never receive your card number or other payment details.

AI personalization (when available)

• When personalized affirmations are generated, the app sends your identity statement, pronouns, selected topics, and optional first name to a Cloudflare Worker we operate. The Worker forwards that prompt to Anthropic and returns the generated affirmations.
• The Worker cache stores generated template text, model name, and generation date under a one-way hash derived from the identity statement and topics. It does not store the submitted name, pronouns, literal identity statement, or rendered personalized text in the cache object.

Narration (only if you use it)

• When you tap to play a spoken affirmation, the text of that affirmation is sent to a Cloudflare Worker we operate, which forwards it to ElevenLabs for text-to-speech synthesis. The resulting audio is returned and cached on your device. We do not log who requested which line.

3. What we do not collect

• Your email or account credentials (there is no account).
• GPS or precise location. Service providers receive an IP address as part of ordinary HTTPS requests and may derive approximate location under their own policies.
• Contacts, calendar, photos, microphone, or camera.
• Health, fitness, or HealthKit data.
• Browsing history or any data from outside the app.
• Advertising identifiers (IDFA). The app does not show ads.

4. Third parties

The only outside services that see any data from the app are:

• Apple — App Store, StoreKit, and push notification delivery. Subject to Apple's privacy policy.
• PostHog — pseudonymous product and subscription analytics associated with a random installation identifier; IWillBe does not create identified person profiles. Their privacy policy.
• Anthropic — AI affirmation generation. Receives the personalization fields described above when generation runs. Their privacy policy.
• ElevenLabs — text-to-speech synthesis. Receives only the affirmation text, not any user identifier. Their privacy policy.
• Cloudflare — CDN and the Worker that proxies narration requests. Standard request logging applies (IP address, user-agent), retained briefly for abuse prevention. Their privacy policy.

We do not sell, rent, or trade any data with any party for marketing purposes. We have no marketing partners.

5. Data retention

• App data (selections, favorites, reminders) is stored locally and is removed when you uninstall the app.
• Narration audio is cached locally up to ~200 MB and rolls over on a least-recently-used basis. Uninstalling clears it.
• PostHog events are retained under our PostHog project settings and are associated with a random installation identifier rather than a named account.
• AI template cache objects may remain in Cloudflare R2 until they are replaced or removed. They exclude the submitted name, pronouns, literal identity statement, and rendered personalized text.
• Apple receipts are retained according to Apple's policies.

6. Children

IWillBe is rated 17+ on the App Store and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 (per the U.S. Children's Online Privacy Protection Act, "COPPA"). If you believe a child has used the app, contact us and we will work with Apple to address it.

7. Your rights (GDPR / CCPA)

Uninstalling the app removes its on-device database and cache. It does not automatically remove previously transmitted PostHog events or AI cache templates because there is no account linking those records to your identity.

If you are in the EU/EEA, UK, or California and want to formally exercise your rights of access, deletion, correction, or to object to processing, email us at support@illustrious.dev and we will respond within 30 days. We do not "sell" personal information as defined by the CCPA.

8. Security

Data on your device is protected by iOS's standard sandboxing and Data Protection. Server requests use HTTPS. Narration audio is cached in Cloudflare R2 by affirmation identifier so later requests can reuse it; the narration cache does not include an account identifier.

9. Changes to this policy

If we change anything material, we will update the "Last updated" date above and, where appropriate, prompt you in-app on next launch.

10. Contact

Questions, concerns, or requests: support@illustrious.dev.