The short version
Your goals live on your phone unless you sign in. If you sign in, they sync to our server. If you ask Thaki to plan a goal, and only after you agree on a sheet that tells you so, its title and a few of your answers go to a third-party AI service to draft that plan, and nothing else does. We show no ads and track you across no apps.
If you never sign in and never ask Thaki to plan, your goals, milestones, tiny steps and journal never leave your phone. What does leave it then: usage events, which you can switch off (You → Share usage stats), and the requests the app makes to RevenueCat to show Thaki Pro’s prices and to handle a purchase.
1.Who we are#
Thaki is offered by Tural Mustafayev, an individual developer in Baku, Azerbaijan, who decides how your data is used (the “controller”). You can reach me about anything in this policy at mustafayev.t@outlook.com.
Effective 19 October 2026, version 2.
2.What we collect#
This is everything, with why we use it, the legal basis under the GDPR and similar laws, how long we keep it, and who receives it.
| Data | Why | Legal basis | How long | Who receives it |
|---|---|---|---|---|
| Sign in with Apple: the identifier Apple gives us for you, and the email address Apple shares (which can be Apple’s private relay address) | Your account and sync | Contract | Until you delete your account. The Apple token is revoked when you delete the account, so Thaki no longer has access through your Apple Account | Supabase, Apple |
| Account ID, a random id our server creates when you sign in | Your account, sync and purchases | Contract | Until you delete your account | Supabase, RevenueCat |
| Display name, if you give one | Greeting you, and sync | Contract | Until you delete your account | Supabase |
| Your answers to the first-run questions: multiple choice, never free text (how much time you have, your pace, what gets in the way, and where you heard about Thaki if you say) | Shaping a plan, and sync | Contract, and your consent when you plan | On your phone; on our server while you are signed in, until you delete your account | Supabase; when you plan, the third-party AI service receives your time, pace and what gets in the way (never where you heard about Thaki) |
| Goals, milestones and tiny steps: their titles, a goal’s note, which tiny steps and milestones are done, and when goals and milestones were reached | The app itself, and sync | Contract | On your phone, and on our server while you are signed in, until you delete them or your account | Supabase; when you plan, the third-party AI service receives the goal’s title |
| Your agreement to planning: that you agreed, this policy’s version and the date | Showing that you agreed | Legal obligation | Until you delete your account | Supabase |
| Journal notes, and the journal’s own record of what you walked | They stay on your phone and are never sent to us. (A tiny step you walked is marked done when it syncs, as above, but the journal and its notes are not.) | — | Until you delete them | No one |
| Install id: a random id the app makes on first launch and keeps on your phone. It is not an Apple advertising identifier | Telling one phone’s usage events apart, and recognising your phone in support mail | Legitimate interest | As long as the app is installed on your phone; on our server, as long as the usage events that carry it (180 days). It is not removed when you delete your account, because it identifies a phone, not an account | Supabase; RevenueCat, as an attribute on the purchase record; us, if you use Contact us (the mail it opens is pre-filled with it, and you can delete it before sending) |
| Usage events: what you do in the app, never what your goals say, with the install id and, when signed in, your account id, plus the app version and your App Store country and language | Product analytics: learning which parts of Thaki help and which don’t | Legitimate interest, and you can switch it off: You → Share usage stats | 180 days. When you delete your account, your account id is removed from them | Supabase |
| IP address, when you plan | Abuse and rate limits | Legitimate interest | 30 days, and removed at once when you delete your account | Supabase |
| Plan usage records: how many plans an account has used, when, which AI model answered and whether it succeeded | Pro’s fair use | Legitimate interest | While you have an account. After you delete it they are kept without your account id or IP, as anonymous counts we use to watch costs and abuse; they are not tied to your phone either. We also keep a one-way fingerprint of your Apple ID and email address with the number of plans you used, so deleting your account and signing up again does not reset a plan allowance; the fingerprint can’t be turned back into your Apple ID or email; we keep the fingerprint only for as long as an allowance could return | Supabase |
| Purchase status: whether you have Thaki Pro, which plan, when it renews or ends | Thaki Pro | Contract | Until you delete your account, when we delete it from RevenueCat too. If you buy without an account, RevenueCat keeps it under a random id until you sign in. Apple keeps its own purchase records | RevenueCat, Apple, Supabase |
| Device and app information RevenueCat’s software collects: iOS version, app version, language, and a country worked out from your IP address | Showing prices in your currency and handling purchases | Contract and legitimate interest | Until you delete your account (see RevenueCat’s privacy policy for its own logs) | RevenueCat |
| Server logs: our hosting provider’s technical logs of requests to our server, which can include your account id and IP address | Security and fixing faults | Legitimate interest | Up to 7 days | Supabase |
| Messages you send us, with the facts Contact us pre-fills (the app build, iOS version, App Store country and install id) | Answering you | Legitimate interest, or a legal obligation when you exercise a right | Until the matter is closed, then only as long as we need to show we answered | Microsoft, which hosts our mailbox (Outlook) |
Giving us any of this is optional. Thaki works on your phone without an account; you need one only to sync and to plan with Thaki (planning also needs Thaki Pro). We don’t make decisions about you by automated means that have legal or similarly significant effects.
Your phone’s own backups (iCloud or your computer) may include Thaki’s data. Those are between you and Apple.
3.Planning with Thaki#
Planning is optional. It is a Thaki Pro feature and needs an account. Building your plan yourself sends nothing.
Who gets your data. When you agree and ask Thaki to plan a goal, our server sends the request to OpenRouter, a third-party AI service in the United States. OpenRouter passes it to a third-party AI model run by a model provider it picks, and that provider writes the plan. Neither OpenRouter nor the providers are part of Thaki.
What is sent: the goal as you typed it; your answers about how much time you have each day, how often you want a tiny step (your pace) and what usually gets in the way; and, if you have already finished a goal, how many days a week you walked it and about how many tiny steps each milestone held (as bands, not dates). Nothing else is added to the request. What is never sent: your name, your email, your other goals, your journal, your contacts or your location. The request carries no account id, email address or IP address of yours.
Keeping and training. Each request asks OpenRouter to route it only to model providers that keep no copy and don’t train on it (OpenRouter’s zero-data-retention and no-data-collection settings). We rely on OpenRouter and the providers to honour that; we can’t inspect their systems, and we can’t promise how they handle data once they have it. OpenRouter’s own policy (openrouter.ai/privacy) says how it handles requests.
Crisis check. Before anything is sent, the app and our server check the goal’s title for words that suggest a crisis. If they find them, nothing goes to the AI service and the app shows where to find help.
Your agreement. Before your first plan, Thaki shows a short sheet, titled “Let Thaki plan” and your goal’s name, that says what is sent and that it goes to a third-party AI service. Nothing is sent until you tap “Agree and plan”; “Not now” sends nothing. Signing in is not agreement. You are asked once per account, and we keep your agreement on your account, with this policy’s version and the date, so a second phone signed in to the same account doesn’t ask again. If we change what planning sends, we change this policy’s version and ask you again before your next plan.
Plans from Thaki are suggestions generated automatically. They can be wrong or unsuitable, and you can change or delete anything in them.
Withdrawing. Stop tapping Let Thaki plan it: nothing is sent unless you tap it. To remove the record of your agreement and everything else on our server, delete your account, or write to us. Withdrawing doesn’t affect plans you already have.
4.Who processes your data, and where#
| Service | What it does for us | Where |
|---|---|---|
| Supabase | Our server: accounts, sync, planning requests, usage events | Stored in Tokyo, Japan (Amazon Web Services); Supabase Inc. in the United States supports and operates it |
| OpenRouter | Third-party AI service: passes a planning request to an AI model provider | United States |
| The model providers behind OpenRouter | Third-party AI models that draft the plan; each request asks for providers that keep no data and don’t train on it | United States and other countries |
| RevenueCat | Manages Thaki Pro subscriptions | United States |
| Apple | Sign in with Apple, App Store purchases | United States, Ireland |
| Microsoft | Hosts our mailbox (Outlook), which receives the messages you send us | United States and other countries |
| Cloudflare | Hosts this website, heythaki.com | United States, and its global network |
Transfers. Japan has an adequacy decision from the European Commission, and the UK recognises it, so storing your data in Tokyo needs no further safeguard. For every service in the United States, the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum in that service’s data-processing agreement protect your data. You can ask us for a copy of the relevant safeguards.
If you are in Japan. Your data is stored in Japan and also handled in the United States by the services above. The United States has no comprehensive federal privacy law; some states, such as California, have their own. Each service that receives your data from us is bound by a contract that requires it to take measures equivalent to those the Act on the Protection of Personal Information requires of us.
If you are in South Korea. With your use of the features below, your data is transferred abroad as follows (Personal Information Protection Act, Article 28-8). It is sent over an encrypted connection each time the app talks to the service.
| Recipient and contact | Country | Items | Purpose | Kept for |
|---|---|---|---|---|
| Supabase Inc. (supabase.com/privacy) | Japan (storage), United States | Everything in the table above that reaches our server | Accounts, sync, planning requests, usage events | As in the table above |
| OpenRouter, Inc. (openrouter.ai/privacy) and its model providers | United States and other countries | The goal’s title, your answers about time, pace and what gets in the way, and the pace of your last finished goal | Drafting a plan you asked for | Each request asks for zero retention; see “Planning with Thaki” |
| RevenueCat, Inc. (revenuecat.com/privacy) | United States | Account ID, purchase status, device and app information | Thaki Pro | Until you delete your account |
To refuse: don’t sign in (nothing syncs), don’t use Let Thaki plan it (nothing goes to the AI service), switch off You → Share usage stats, and don’t buy Thaki Pro. Refusing means you can’t use that feature; the rest of Thaki still works on your phone.
5.Equal protection#
Every service that receives your data from us is bound to protect it at least as well as this policy does.
6.How long we keep it#
As the table in “What we collect” says. In short: account data until you delete your account; usage events 180 days; IP addresses 30 days; server logs up to 7 days; plan usage records kept without anything that identifies you after you delete your account. Everything on your phone stays until you delete it or the app.
7.Your rights#
Depending on where you live, you can ask us to:
- tell you what we hold about you, and give you a copy (as a file you can take elsewhere);
- correct it;
- delete it;
- restrict how we use it;
- stop using it for something we do on the basis of legitimate interest (for usage events, switch off You → Share usage stats);
- withdraw a consent you gave, without affecting what we did before.
Write to mustafayev.t@outlook.com. If you use Sign in with Apple, say so and we will tell you how to confirm it’s you. We answer within one month, or sooner where your local law sets a shorter deadline.
You have the right to complain to the data-protection authority where you live: in the EU, your country’s supervisory authority; in the UK, the Information Commissioner’s Office (ICO); in Japan, the Personal Information Protection Commission (PPC); in South Korea, the Personal Information Protection Commission (PIPC). We’d be glad to try to help first.
8.Deleting your account#
You → the profile card → Account → Delete account. Your account and everything on our server go; the goals on your phone stay. Thaki Pro is billed by Apple and keeps renewing until you cancel it in your Apple Account.
When you delete your account we also ask Apple to revoke Thaki’s access if you used Sign in with Apple, delete your record at RevenueCat, remove your IP address and account id from plan usage records, and remove your account id from usage events. To remove the goals on your phone too, delete the app.
If you never signed in, nothing on our server is linked to you. Usage events from your phone are deleted after 180 days, and you can stop them with You → Share usage stats.
9.Children#
Thaki is for people 13 and older (14 in South Korea).
If a parent or guardian withdraws consent for a child’s use of the app through Apple, Apple tells us and we keep that notice so we can act on it.
If you believe a child under 13 uses Thaki, write to us and we will delete the account.
10.No ads, no tracking#
Thaki contains no advertising software and never reads your device’s advertising identifier (IDFA). We don’t sell your data or share it for advertising, and we don’t track you across other companies’ apps or websites.
Because we don’t track you, there is nothing for a Do Not Track or Global Privacy Control signal to switch off; we treat both as already honoured.
11.Security#
Every connection between the app and our services is encrypted (TLS). On our server, row-level security means an account can reach only its own data. On your phone, your sign-in is kept in the iOS Keychain.
12.Changes#
If we make a material change to this policy, we will tell you in the app before it takes effect, and ask for your consent again where the law requires it. Each version has a number and an effective date; earlier versions stay available on this site.