Ouf Privacy Policy
Last updated: 21 July 2026
Ouf is an iPhone app for sorting out messy personal admin. You write down a stuck matter in your own words, an AI turns it into a case with a plan, and you keep working the case over time.
This policy explains what Ouf stores, what leaves your phone, who receives it, and what you can turn off. It covers the Ouf iOS app and the website at ouf-app.pages.dev.
Who we are
Ouf is made by two people and published on the App Store by Anton Vronskii, an individual developer. There is no company behind it.
Questions, requests, complaints: vronskii.anton@gmail.com. We read every message.
There is no account
Ouf has no sign-up, no login, no email address, no password. We never ask for your name, your phone number, or your contacts.
On first launch the app creates one random identifier and keeps it on the device. It is a random number. It is not derived from your device, your Apple ID, or anything about you, and it is not shared with other apps.
That identifier does two things:
- It identifies this installation to our server, so the app can use the AI.
- If usage statistics are on, it lets us tell "one person opened the app five times" apart from "five people opened it once". That is the only reason it touches analytics.
What stays on your phone
Everything you create in Ouf — case titles, goals, the facts the app collects, plan steps, and the full text of your conversation with it — is stored in the app's own storage on your device.
We have no copy. We cannot read your cases, list them, or recover them. If iCloud Drive is enabled on your device, Ouf also writes backup copies into your own private iCloud container; that is your iCloud account, under Apple's terms, not ours.
Deleting a case removes it from the device. Deleting the app removes everything Ouf kept on the device — but not the backup copies in your iCloud, which stay in your iCloud account until you delete them there.
Voice input uses the iPhone's built-in dictation and reaches Ouf as text. Apple handles the audio under Apple's terms; Ouf neither stores it nor passes it on.
What leaves your phone
Five things, each for a stated reason.
1. The text you submit goes to an AI
When you submit a dump, an update, or a question, that text — plus the current state of the case it belongs to, so the AI can answer in context — is sent over an encrypted connection to OpenRouter (openrouter.ai, OpenRouter Inc., USA). OpenRouter passes it to the AI model that answers you.
Which model that is can change, and Ouf may use more than one for different parts of a turn. We pick models on quality, speed, and cost, and we may switch at any time without changing this policy. Today they are supplied by large model providers in the United States, reached through OpenRouter.
The app asks for your permission before your text is sent for the first time, and names OpenRouter when it asks. There is no version of Ouf that works without this — sorting out what you wrote is the whole app. If you would rather your text not go to an AI, don't use Ouf.
Every request we send asks OpenRouter for a model provider that does not store your text and does not keep it after answering. That is our default and it is what happens today. It is a request, not a guarantee: if no such provider is available at that moment, OpenRouter may use an ordinary one instead, because an app that fails outright is worse for you than one that answers. We would rather tell you that than promise something routing can't always deliver.
Once your text reaches OpenRouter, it is handled under OpenRouter's privacy policy and the model provider's policy, not ours. We do not receive a copy back, and we have no arrangement that lets your text be used to train models.
- OpenRouter: https://openrouter.ai/privacy
2. Search queries, when a case needs a fact from the web
Some cases need a real-world detail — an official procedure, an opening time, a phone number. When that happens, the AI writes a short search query and Ouf shows you what it is about to look up. The query goes to OpenRouter's web search, which runs it against a search provider. The query is written by the model and is normally a few words about the topic; it is not your full case text.
3. A check-in with our server
Before the app can use the AI, it checks in with our server. That request carries the random installation identifier and a security check from the operating system. Nothing you have written ever reaches it.
4. Usage statistics, if you leave them on
Ouf sends anonymous events to TelemetryDeck (telemetrydeck.com, TelemetryDeck GmbH, Germany), a privacy-focused analytics service that is paid for by subscription rather than by data.
An event records that something happened and how it went — the app was opened, something was submitted, an answer came back, how long it took, whether it worked. It never carries what you wrote, or any part of it. There is no way to read a case, or anything you typed, out of this data.
This exists so we can tell whether the app is useful to people we cannot talk to. Turn it off with the Share anonymous usage statistics switch in Settings, and nothing more is sent.
5. Feedback you choose to send
The feedback sheet has a checkbox that attaches the current case data to your message. If you leave it on and send, we receive that data by email, because you decided to show it to us. Uncheck it and we get only what you typed. Sending nothing sends nothing.
What we never do
- We do not sell or rent your data. There is nothing to sell.
- We do not show ads and we do not work with ad networks or attribution SDKs.
- We do not track you across apps or websites, which is why Ouf never shows the "Ask App Not to Track" prompt.
- We do not use device fingerprinting, advertising identifiers, or cross-app identifiers.
- We do not build profiles about you, and nothing in the app makes automated decisions with a legal or similarly significant effect.
How long things are kept
- Your cases: on your device until you delete them or delete the app. Backup copies live in your iCloud until you delete them there.
- The record on our server: for as long as the installation is in use.
- Analytics events: kept by TelemetryDeck under their retention terms. They are anonymous and cannot be traced back to a person.
- Text sent to the AI: kept, if at all, by OpenRouter and the model provider under their own policies. We hold none of it.
- Feedback emails: kept in our mailbox until we have dealt with them. Ask us and we will delete yours.
Your choices
- Turn usage statistics off — the Share anonymous usage statistics switch in Settings.
- Revoke microphone access — in iOS Settings › Ouf.
- Delete everything — Remove all user data in Settings, or delete a case, or delete the app. Backups in your iCloud have to be removed there.
- Ask us anything else — including deleting the record tied to your installation. Write to vronskii.anton@gmail.com.
Children
Ouf is not designed for children and is not directed at anyone under 13. We do not knowingly collect anything from a child. If you believe a child has used the app and you want the associated record removed, write to us.
Where Ouf is available
Ouf is offered in a limited set of countries. It is not offered in the European Union, the European Economic Area, the United Kingdom, or Switzerland, and we do not aim it at people there.
Changes to this policy
If we change what Ouf collects or who receives it, we update this page and change the date at the top. We don't send notifications about it, so the date is how you tell.