1. Who we are
COSYPIXEL (“we,” “us,” or “our”) provides Reten and is responsible for the personal information processed to operate it. This policy covers the Reten app, its related services, and reten.cosypixel.net. You can contact us at support@cosypixel.net.
Reten stores your intentions and messages on your device and our servers. It uses external services to sign you in, generate encouragement, and deliver notifications. Using Reten as a guest does not make your data local-only.
2. Information we process
- Account information. Account identifiers, whether you use guest access or Sign in with Apple, authentication credentials and tokens, and account creation, update, or deletion status. Reten does not request your name or email address through Sign in with Apple, and we do not receive your Apple password.
- Your intentions and messages. The text you enter, generated messages, related identifiers and timestamps, and the information needed to save, restore, and manage this content.
- Notification settings. Your chosen frequency, allowed hours, time zone, language, and whether each intention is active.
- Device and delivery information. An app installation identifier, push notification token, notification permission status, and delivery or error records. These help us send messages to the correct device.
- Technical information. Our infrastructure and authentication providers process information such as IP addresses, user-agent information, request times, and security or error logs. AI processing also produces records such as the model used, request identifiers, processing time, and token usage.
- Support messages. If you email us, we receive your email address and any information or attachments you choose to include.
Some preferences and cached content are also stored on your device and shared with the Reten widget so it can display your latest message. A time zone is used for scheduling; Reten does not request precise location access.
3. How we use information
We use this information to manage your account, save and restore your content, generate messages related to your intentions, schedule and deliver notifications, display widgets, respond to support requests, and keep the service secure and reliable.
Where data protection law requires a legal basis, we process the information needed to provide the service you request to perform our agreement with you. We rely on legitimate interests for proportionate security, abuse prevention, and troubleshooting, and on legal obligations where required. Where consent is required, we ask for it separately; you may withdraw it without affecting processing that was lawful before withdrawal.
We do not sell your personal information or share it for cross-context behavioral advertising. Reten does not use advertising trackers. Its AI messages do not make decisions about you that have legal or similarly significant effects.
4. AI message generation
To write a message, Reten sends your intention, selected language, local date and time, and up to five recent messages through Cloudflare AI Gateway and OpenRouter to a model provider. Recent messages help reduce repetition. The model used may change or a different provider may handle a request if the first is unavailable.
We do not add your Apple account credentials, push token, or email address to the message-generation prompt. However, anything you write in an intention becomes part of that prompt. Please avoid including passwords, financial details, health records, or other sensitive information.
Our AI Gateway integration enables logging of request and response content. These logs can include your intention and generated messages and are used to diagnose problems and review message quality. Deleting content in the app does not automatically delete these separate logs.
Model providers have their own rules for retaining and using inputs and outputs. We do not promise that every request has zero retention or that every provider excludes all use for model improvement. See OpenRouter’s Privacy Policy for its handling of requests and links to model-provider terms. Contact us if you need help with a deletion request involving AI processing.
5. Who processes your data
- Google Firebase Authentication handles guest authentication and Sign in with Apple credentials, account identifiers, and authentication-related technical data. See Firebase’s privacy information.
- Cloudflare hosts the website and backend, stores app data, runs delivery tasks, and routes and logs AI requests. See Cloudflare’s Privacy Policy and AI Gateway logging information.
- OpenRouter and the model providers it routes requests to process the input and output used to generate messages, as described above. The current production model choices include models from OpenAI, Google, and DeepSeek; the hosting provider can vary with routing.
- Apple provides Sign in with Apple and Apple Push Notification service. Notification delivery involves your device’s push token, the generated message, and identifiers used to open it in the app. See Apple’s privacy information.
- Email service providers process correspondence when you contact us for support.
We may also disclose information when required by law or when necessary to protect people, address fraud or security incidents, or establish or defend legal claims. We do not make your intentions or messages public.
6. Retention and deletion
Intentions and message history. We retain these to provide your account history until you remove them or delete your account. Deleting an intention stops future messages for it but does not erase messages already received. Clearing received messages removes their content from the app and, once the change reaches the server, from the active message store. Minimal identifiers remain to prevent deleted messages from reappearing after a retry.
Account deletion. If you use Sign in with Apple, open the Account section in Reten’s settings and choose Delete account. You will need to authenticate again. The deletion flow removes intentions, messages, device registrations, and related delivery tasks from the active service, then revokes the Apple connection and requests deletion of the Firebase user. We retain a minimal account identifier and deletion record to prevent old credentials from recreating the deleted account; that record does not contain your intentions or messages.
Guest accounts and device removal. Guest users can contact us for help deleting their account. Please contact us before uninstalling so we can help verify which account belongs to you. Signing out, uninstalling the app, or resetting app content is not the same as deleting an account.
Delivery records. Finished delivery tasks are scheduled for cleanup after seven days. This does not set the retention period for your saved message history or separate service logs.
Logs, backups, and support. These are separate from the active app database. Their retention depends on the provider, service configuration, and the time needed for security, troubleshooting, support, or legal obligations. Deletion from the active app does not immediately remove every backup or provider log. Firebase states that authentication data is removed from its live and backup systems within 180 days after user deletion is initiated. You can contact us about remaining records and applicable retention periods.
Offline changes take effect on the server only after a successful connection. If a deletion fails or you are unsure whether it finished, contact us for help.
7. Your choices and rights
You can edit or delete intentions, clear received messages, change language and notification settings, pause intentions, and remove widgets. You can turn off notifications or hide their previews in iOS settings. Messages and intention titles may otherwise be visible to someone who can see your screen.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, restrict processing, object to certain uses, or withdraw consent. You may also complain to your local data protection authority.
Send requests to support@cosypixel.net. We may need to verify your identity before acting on a request. Please do not send passwords or sign-in tokens. We will respond within the period required by applicable law.
8. Security and international processing
Reten uses encrypted network connections and account-based access controls. No storage or transmission method is completely secure. Your intentions and messages are processed by our servers and AI providers, so the service is not end-to-end encrypted.
Our providers operate internationally, and your information may be processed outside the country where you live. Firebase Authentication processes data in the United States; other processing locations depend on the infrastructure and model provider used. Those countries may have different data protection laws. Where applicable law requires safeguards for international transfers, those requirements apply to our use of these providers. Contact us for information about the providers and transfer arrangements relevant to your data.
9. Website and cookies
The Reten website is an informational site. Its example messages are fixed demonstrations; selecting an example does not submit an intention or call an AI service. We do not add advertising cookies, analytics scripts, or third-party font requests to this site.
Cloudflare processes normal connection and request information to serve and protect the site. Following an external link takes you to a service with its own privacy practices.
10. Children’s privacy
Reten is intended for people aged 14 and over, subject to any higher minimum age required where they live. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information in violation of this policy, contact us so we can investigate and arrange deletion as appropriate.
11. Changes and contact
We will update this policy when our practices change and revise the date above. For material changes, we will provide additional notice through the app or website and obtain consent where required.
For privacy questions or requests, contact COSYPIXEL at support@cosypixel.net. You can also read our Terms of Service.