AnyGraph Privacy Policy

The App runs on your device. The spaces, nodes, relations, custom types, notes and node images you create, and your App settings, are stored on your device.

If you are signed in to iCloud, this graph data syncs between your devices through Apple's CloudKit private database. That database belongs to your iCloud account and is stored and protected by Apple; we have no access to its contents.

The App keeps AI usage statistics on the device (request counts, token usage, latency and failure types). They are shown only on the device and never uploaded. JSON files and PNG images you export are saved and shared by you; we don't receive them.

The Cloud Service needs no registration. When you first use it, the App sends us the Apple-signed App transaction (Apple's record that your Apple Account obtained the App), and we create a Cloud Service account for you from it. Accounts created with Sign in with Apple in App versions before 1.4 keep working. We store the following on our servers:

• The App transaction ID: an identifier Apple assigns to your Apple Account for this App, the same on all your devices, together with its environment (production or test);
• If the App Store can't provide the App transaction, a device ID instead: a random identifier the App generates and keeps in your iCloud Keychain (so your devices usually share it). It contains no device or personal information;
• For accounts created with Sign in with Apple: the account identifier Apple provides (an anonymous ID that is only valid for this App), your email address as provided by Apple (an Apple relay address if you chose Hide My Email), and your name, only if you let Apple share it the first time you signed in;
• Sessions: a hash of the refresh token (never the token itself), the App version, the device model (for example "iPhone17,1"), and when the session was created and last used;
• Account status, how the account was created, plan (Free or Cloud Pro) and its expiry, and when the account was created and last used;
• For accounts created with Sign in with Apple: the refresh token Apple returns, stored encrypted and used only to revoke the App's Sign in with Apple authorization when you delete your account.

We use this information to identify your account, keep you connected, provide your daily AI quota and subscription benefits, and contact you about account issues when needed (only possible for Sign in with Apple accounts, which have an email address). We don't send marketing email.

When you choose AnyGraph Cloud and use an AI feature (such as generating a graph from text, asking questions about a graph, inspecting and repairing a graph, or voice commands), the App sends what the request needs to our servers: the text you enter, transcripts of voice commands, and the related graph content, such as space names, node names, relation labels, notes and custom types. Node images are never sent. The App asks for your consent before the first use.

Our servers forward the request to a third-party large language model provider to generate the reply. The current provider is DeepSeek. What we forward contains only the model name, the conversation messages and generation parameters, never your account identifier, email or name. The provider processes it under its platform's terms of service and privacy policy; DeepSeek's privacy policy allows it to use inputs and outputs, de-identified, to train its models and improve its services. Please don't submit sensitive personal information through AI features.

We don't store the content of your prompts or the AI's replies. For each request we record only usage data: the model used, token counts, the quota charged, cost, latency, outcome, a request ID, the App version and the time. We use it to calculate quotas, account for costs and troubleshoot.

If the provider returns an error, our server log may record the start of the error message (at most 300 bytes) for troubleshooting. Such messages occasionally quote part of what was submitted.

If you configure your own AI service in the App (such as OpenAI, Anthropic, Google Gemini, DeepSeek, Qwen, Kimi, Zhipu GLM or a custom endpoint), requests go directly from your device to that provider, not through our servers, and we can't see them. That provider handles your data under its own policies.

Your API key is stored in the device keychain and never sent to us.

When it launches (at most once a day), the App fetches the list of available AI providers and recommended models from our servers so that providers and models stay up to date. This request needs no sign-in and contains no account information, API key, graph data or anything you enter; it only leaves the IP address and other details in the access logs described in section 7.

• Voice commands need microphone and speech recognition access. Speech is transcribed by Apple's speech recognition, which may run on the device or on Apple's servers under Apple's privacy policy. We never receive or store your recordings.
• App lock: Face ID, Touch ID or your device passcode is checked by the system. The App only learns whether the check passed and never gets biometric data.
• Node images you pick stay on your device and in your iCloud and are never uploaded to our servers.

Payments are handled by Apple through the App Store. We never receive your card or other payment details.

When you use the Cloud Service, the App sends the Apple-signed transaction records of your Cloud Pro subscription to our servers to grant and verify your benefits. We store the original transaction ID, product, purchase and expiry dates, environment, and any refund or revocation. The one-time Pro purchase is verified on the device only and never sent to us.

We also receive App Store Server Notifications (renewals, expirations, refunds and so on) and Sign in with Apple server notifications (for example when you stop using Sign in with Apple with this App or delete your Apple Account), and update your subscription or account accordingly.

For security and troubleshooting, our servers keep access logs: IP address, request method and path, status code, response size, latency and time. Access logs contain no request content. They rotate and are normally kept for no more than 15 days.

We protect your information with reasonable measures: HTTPS for all traffic, tokens stored only as hashes, sensitive credentials encrypted at rest, and access-controlled servers. No system can be guaranteed to be perfectly secure.

Cloud Service servers are located in mainland China (Alibaba Cloud), and the AI provider DeepSeek also processes data in mainland China. If you are outside mainland China, using the Cloud Service means the data described above is transferred to and processed in mainland China.

Your graph data stays on your devices and in Apple iCloud and is not affected by this.

We don't sell or rent your personal information or use it for advertising. We share information only:

• With Apple, to handle sign-in, purchases and subscriptions;
• With the AI provider, forwarding the request content described in section 3 when you use AI features through the Cloud Service;
• When required by law, a court order or a lawful request from a government authority;
• In a merger, acquisition or similar change of the operator, in which case we will require the recipient to keep honoring this policy or notify you beforehand.

• Account information, sign-in sessions and subscription records: until you delete your account.
• AI usage records: when you delete your account, their link to your account is removed; the remaining usage figures (model, tokens, cost and so on) are kept as statistics that cannot identify you, for cost accounting.
• Access logs: rotated, normally within 15 days.
• Security audit records: actions such as deleting an account create an audit record (the account's numeric ID and the request IP), kept as needed for security auditing.

• Delete your Cloud Service data: in the App, go to Settings → AI → AnyGraph Cloud → Delete Cloud Data (Delete Account for Sign in with Apple accounts). This deletes your Cloud Service account, its sessions and subscription link, and for Sign in with Apple accounts revokes the authorization; the App then stops using the Cloud Service until you allow it again. It does not cancel an App Store subscription; manage that in your Apple Account subscription settings. Your graphs stay on your devices and in iCloud.
• Sign out or stop authorization (Sign in with Apple accounts): you can sign out in the App, or stop using Sign in with Apple with this App in your Apple Account settings, which ends all sessions of that account.
• Don't use the Cloud Service: you can leave it off, use your own API key, or not use AI features at all. The rest of the App works the same.
• Delete graph data: delete spaces or nodes in the App, or manage the App's data in your device's iCloud settings.
• Access, correct, export or delete: email riclavaz@gmail.com. After verifying your identity we will respond as soon as possible and within 30 days. You may also lodge a complaint with your local data protection authority.

The App and the Cloud Service are meant for a general audience and are not designed for children. If you are under 14 (or the minimum age for consent where you live), use the Cloud Service only with a parent or guardian's consent. If we learn that we collected a child's personal information without that consent, we will delete it promptly.

This website uses no analytics, advertising or third-party tracking scripts, and loads no third-party resources.

It only uses necessary cookies and local storage: your chosen language (NEXT_LOCALE) and theme (active_theme, and theme in local storage), plus the sign-in cookies operators use for the admin console. Visits are also recorded in the access logs described in section 7.

We may update this policy from time to time. We will change the effective date on this page and, for significant changes, let you know in the App. Continuing to use the App or the Cloud Service after a change takes effect means you accept the updated policy.

For any question or request about this policy or your personal information, email riclavaz@gmail.com. Operator: castorworks.