Privacy Policy

Information you provide

• Account information — your email address and the name you choose to display. If you sign in with Apple or Google, we receive a unique identifier and the email and name you authorize that provider to share. We never receive your Apple or Google password.
• Profile and onboarding answers — optional details you give during setup, such as your primary goal, how often you intend to train, and your self-reported familiarity with AI tools. These personalize your plan.
• Voice recordings — when you do a verbal/communication exercise, the app records a short audio clip (up to 60 seconds) through your microphone so it can be transcribed and scored. See Section 4.
• Communications — if you email our support address, we receive your message and contact details.

Information created when you train

• Training and performance data — your scores, accuracy, reaction times, exercise type, duration, and streaks. For speaking exercises this includes the transcript of what you said and derived metrics such as clarity score, word count, filler-word count, and speaking rate.
• Social data — your friend code, the friends you connect with, and challenges you send or accept. Your display name and aggregate stats are visible to friends you connect with and on shared leaderboards.

Information collected automatically

• Device and app data — app version, device model, operating-system version, and language/region, along with a randomly generated analytics identifier. We use Aptabase, a privacy-first analytics tool that does not use cookies and is designed not to collect IP addresses or persistent identifiers for cross-app tracking.
• Usage events — in-app actions such as sessions started and completed and screens viewed, used to understand and improve the product in aggregate.
• Subscription data — whether you have an active subscription or free trial, plus related receipt and entitlement information processed through Apple and RevenueCat (see Section 6). We do not receive or store your full payment-card number; Apple processes payments.
• Diagnostics — where enabled at the OS level, Apple may share aggregated crash and performance data with us.

We use the information above to:

• Create and maintain your account and sign you in securely.
• Deliver core features — run exercises, transcribe and score your speaking practice, track streaks and progress, and power friends, challenges, and leaderboards.
• Personalize your training plan and recommendations.
• Process subscriptions, free trials, and restores, and detect and prevent fraud or abuse.
• Send you service messages and, if you enable them, daily-reminder and streak push notifications.
• Analyze aggregate usage to fix bugs, improve performance, and decide what to build next.
• Maintain the security and integrity of the Service and comply with our legal obligations.

We do not sell your personal information, and we do not use your voice recordings or transcripts to advertise to you.

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to provide the Service you sign up for); consent (for microphone access, push notifications, and other optional features — you can withdraw consent at any time); legitimate interests (to secure, analyze, and improve the Service in ways that do not override your rights); and legal obligation (to comply with applicable law).

Speaking exercises rely on your voice, so we handle that data with extra care.

• Microphone use is on your terms. We access the microphone only during a speaking exercise, only after iOS has granted permission, and only while you are recording. You can revoke microphone access at any time in iOS Settings.
• How a recording is processed. The audio clip is sent over an encrypted connection to our backend (Supabase) and then to trusted third-party AI providers (currently OpenAI, with OpenRouter as a routing layer) that transcribe the speech and generate your feedback.
• What we keep. We store the resulting transcript and scores with your account so you can see your history and progress. We do not retain the raw audio long-term: the recording is created in a temporary location on your device, uploaded for analysis, and discarded after processing.
• Not used to identify you, and not for ads. We do not use voice recordings to identify you biometrically, and we never use them for advertising. Our AI providers process your content only to return a result to us and, under their API terms, do not use it to train their models.

We share personal information only as described here, and we never sell it.

• Service providers (sub-processors) that run the Service on our behalf, under contract and only for the purposes we direct: Supabase (database, authentication, file and function hosting), OpenAI and OpenRouter (speech transcription and scoring), Apple (Sign in with Apple, push notifications, payments), RevenueCat (subscription management), and Aptabase (privacy-first analytics).
• Other users, where you choose to be social: friends you connect with can see your display name, friend code, streak, and aggregate stats; challenges you start share your relevant scores with your opponent.
• Legal and safety — when we believe in good faith that disclosure is required by law, regulation, legal process, or a valid government request, or is necessary to protect the rights, property, or safety of Rusty, our users, or the public.
• Business transfers — if Rusty is involved in a merger, acquisition, financing, or sale of assets, your information may transfer as part of that transaction. We will notify you of any change in ownership or in how your personal information is used, and of any choices you may have.

Rusty Premium is sold as an auto-renewable subscription through the Apple App Store. Apple processes your payment and is the merchant of record; we never receive your card details. We use RevenueCat to validate your purchase receipt and tell the app whether your subscription is active. Apple's and RevenueCat's own privacy policies govern their handling of that data. You can manage or cancel your subscription anytime in iOS Settings → your name → Subscriptions.

We keep your account and training data for as long as your account is active. Voice recordings are not retained after processing (see Section 4). If you delete your account, we delete or irreversibly anonymize your personal data from our active systems within 30 days, except where we must keep limited records to comply with law, resolve disputes, or enforce our agreements. Aggregated or de-identified data that can no longer be linked to you may be retained.

Depending on where you live, you may have the right to access, correct, delete, export (port), or restrict or object to the processing of your personal data, and to withdraw consent at any time. You also have the right not to be discriminated against for exercising these rights.

How to exercise them

• In the app: open Settings → Privacy & Data to edit your profile, request an export of your data, or permanently delete your account and data.
• Microphone & notifications: control these anytime in iOS Settings.
• By email: contact us at privacy@userusty.xyz. We respond within 30 days (or as required by law) and may need to verify your identity first.

California residents have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. We use sensitive personal information (such as voice recordings) only to provide the Service, not to infer characteristics about you. To exercise your rights, use Settings → Privacy & Data or email privacy@userusty.xyz. We will not discriminate against you for doing so.

Rusty is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the minimum age of digital consent in your country, where that age is higher). If you believe a child has provided us personal information, email privacy@userusty.xyz and we will delete it.

We use industry-standard safeguards — including encryption in transit (TLS), encrypted credential storage in the iOS Keychain, and access controls — to protect your information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

Rusty is operated from the United States, and our providers may process data in the United States and other countries. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for these transfers.

We may update this Policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect and update the "Last updated" date above. Your continued use of the Service after an update means you accept the revised Policy.

Questions or requests about your privacy? Reach us at: