Effective date: October 20, 2026
This policy covers the openers app for iPhone, iPad and Android, and the openers.app website. Both are run by DUATECH LLC in Phoenix, Arizona, USA ("we", "us"). It says what leaves your phone, what stays on it, and what you can delete. It's written in plain words on purpose.
What changed in 4.0
openers 4.0 adds features that use our servers, so older lines saying openers never sends anything are gone. AI-written decks send your brief to our server and to AI companies, but only after you say yes. Plan shares your plans with the people you connect with. Deck feedback and card reports come to us. There are still no accounts, and openers still never receives what people say. Deck sharing is not part of 4.0.
openers 4.0 has no sign-in. To tell phones apart, the app makes random IDs: one for analytics, one for the deck writer, one for Plan, and a few one-time keys for smaller jobs. RevenueCat, Expo and Clerk each make their own random ID too. None of them is your name, email address or phone number. Our server keeps the deck writer ID only in a scrambled (hashed) form, and Plan keeps only a hash of your phone's secret key.
The custom openers settings have a tab called account. It isn't an account with us. It lets you save your people and notes to a file on your phone, and restore them from that file.
Some earlier test versions of openers had a sign-in, run by Clerk. 4.0 never asks you to sign in, but the app still includes Clerk's sign-in code and loads it when it opens, so Clerk's servers can see your IP address and basic request details, even if you never signed in. If you signed in on a test version, the account tab shows delete account, or you can email us.
Your brief and deck settings aren't sent until you tap yes, write it. openers remembers your yes on this phone. You can change it any time in create settings, under cloud writing. On Android, this cloud writer is the only writer. On an iPhone with Apple Intelligence, you can pick this iphone instead.
When you say yes, openers sends your brief, who the deck is for, the level, the language and a few deck settings. Names or details you type in the brief go too, so leave out anything you don't want to share. It also sends the deck's own ID, a request ID, the writer ID, whether you spoke the brief, and your RevenueCat ID so our server can ask RevenueCat whether you have a subscription. We don't store the RevenueCat ID.
Your brief goes to our server, then through Vercel AI Gateway to AI companies: Anthropic writes the questions, and OpenAI and Google can check them or pick a search topic. TypeSafe also reads your brief and each question, to check them for safety and to decide whether light swearing fits. We use the gateway's zero data retention setting, so your brief only goes to AI companies that agree not to keep it.
If a deck needs fresh facts, like a new show, a short public topic picked from your brief goes to Exa to search the web. Your brief itself never goes to Exa.
On our server, your brief and the questions are kept for 30 days, then the text is wiped. Records without the text, like when a deck was made, its settings and how many decks this phone has made, may stay so we can run deck limits, control costs and stop abuse. To stop abuse, our server also keeps a scrambled (hashed) form of your network address for 7 days.
If you make a deck from a plan, the brief box starts with the plan's name and notes. Nothing is sent until you tap yes, write it.
You can report a card in a cloud-written deck. That sends the deck ID, the card ID, the reason you picked and the writer ID to our server, never your words, and we get an email about it so a person can review it.
The app sends usage events to PostHog: screens you open, features you use, and taps, as the name of the button you touched and where on the screen. They come with the analytics ID and basic device facts: model, operating system, app version, language and time zone. PostHog sees your IP address and may estimate a rough location from it, like your city or country. Session replay is off. We also use PostHog to switch features on and off. We no longer use Amplitude.
Some events carry a little more:
There's no switch to turn off basic analytics.
Share what i write is off unless you turn it on, in the custom openers settings. If you do, analytics can also include up to 500 characters of your brief, to help us improve custom decks. If the app shows its help sheet for a hard topic, analytics notes that it was shown, never your words.
Once you've turned it on, the same settings show delete what i shared. That asks PostHog to delete this phone's whole analytics history, words included, and starts a fresh analytics ID. PostHog finishes the deletion on its own schedule. To do it, the app sends its analytics ID to our server, which passes it to PostHog. We keep only a scrambled copy, with a scrambled form of your network address, for 7 days to stop abuse.
Plan is optional. If you use it, our Plan server stores:
Your plans, answers and first name are shown to the people you share with. If you share a plan with everyone, they can repost it to their own circle unless you turn reposts off for that plan. The people they show it to see the plan and your first name, and can answer it. Your plan link shows your first name and how many plans you have coming up to anyone who opens it, and to apps that preview links. A link works for 24 hours, and you can make a new one any time.
We delete plans from our server 14 days after they pass. Your phone keeps its own copy.
openers reads your clipboard only when you tap paste, and uses only a Plan code from it. On Android, the app reads Google Play's install referrer once, to catch a Plan code from a link you tapped.
If you delete the app without leaving Plan first, your Plan name, connections, groups and feedback stay on our server, and we may not be able to find them. Plans themselves are still deleted 14 days after they pass.
You can mute or remove someone at any time. To stop using Plan and delete what it stored, go to Plan → ••• → this phone → leave plan. That deletes this phone's Plan identity and everything tied to it on our server: your name, plans, answers, connections, groups, push tokens and feedback.
Reminders are scheduled on your phone. If you allow notifications for openers and this phone has a Plan identity, your phone's push token, made by Expo, goes to our Plan server so it can send Plan messages. Using Plan or rating a deck makes that identity. Plan messages include the first names of the people involved, the plan's name and its time, and pass through Expo and Apple or Google to reach you.
You can rate a deck with a face. The face goes to us as soon as you tap it, with facts about the deck: whether it's from the catalog or custom-made, its ID, its level, how many cards it has, which card you were on, and when it was made. We also get the app version, platform and language. You can add a note of up to 500 characters, which goes only if you tap send. Before sending, the app removes email addresses, links and phone numbers from the note. We never get the questions or your brief. Feedback from the app's account settings works the same way, without the deck facts.
Feedback is stored on our Plan server under this phone's anonymous Plan identity. If you don't have one, rating a deck makes one, named "you". We keep feedback until you leave Plan.
The Provide Feedback link in the app opens a form hosted by Notion in your browser. What you type there goes to us and to Notion.
Deck sharing is off in 4.0, but an older deck link someone sends you still opens. The app then downloads that deck from our server. From the deck's menu you can hide its maker or report the deck, which opens a report page on openers.app. More details on a deck you received shows that deck's openers.app page inside the app, so the website rules below apply to it.
Apple or Google handle payment, and we never see your card. RevenueCat gets an anonymous ID, your receipts or purchase tokens, and what you bought, so it can unlock your purchase and restore it. On iPhone, RevenueCat also gets an Apple Search Ads token that says whether an install came from an Apple ad. That isn't used to track you across apps.
On iPhone, if you're signed in to Game Center, your achievements, your scores and the topic or deck you're playing go to Apple, under Apple's privacy policy. We don't send your Game Center details to our servers.
You can talk instead of type, and mini pods can caption what you say. Both use your phone's own speech recognizer. Voice typing asks it to listen on the phone first; when it can't, Apple on iPhone or Google on Android may process the audio. Mini pod captions don't ask for on-phone listening, so Apple or Google may process that audio on their servers. openers never receives or keeps your voice. Only the finished text lands in your brief, and it goes wherever typed briefs go.
Expo delivers app updates. When the app checks for one, Expo's servers see your IP address, the app version and the random ID Expo makes. On iPhone the app also asks Apple's App Store which version is newest, and Apple sees your IP address and your store's country. The past updates list loads from our website, which sees your IP address.
Vercel hosts the website. It counts page visits and download taps with Vercel Web Analytics, which uses no cookies. Like any website, its servers see your IP address and browser details to deliver pages and stop abuse.
These companies handle data for us, only to run openers:
We don't sell your data, and we don't share it with anyone for ads.
Our main servers and most of these companies are in the United States. Some AI companies may process a brief in other countries. If you live outside the US, your data is moved to the US. Where the law asks for it, we rely on the safeguards in our providers' terms, such as the EU Standard Contractual Clauses.
Deleting data doesn't cancel a subscription. Cancel it in the App Store or Google Play.
Depending on where you live, for example the EU, the UK, California or another US state, you can ask to see, correct, delete or get a copy of your data, object to how we use it, or withdraw your consent. Because openers has no accounts, the delete options above are the way to reach most of your data. You can also email us, and complain to your local data protection authority.
If you're in the EU or UK, these are our legal reasons for using your data:
If you're in California: we don't sell or share personal information as the California Consumer Privacy Act (CCPA) defines those words, and we don't use sensitive personal information to infer things about you.
openers is made for teens and adults. It isn't meant for children under 13, and we don't knowingly collect data from them. If you think a child under 13 sent us data, email us and we'll delete it.
If we change this policy, we'll update the date at the top. For big changes, we'll tell you in the app or in the release notes first.
openers never receives or keeps what people say. Question Video and mini pods record only on your phone, and only when you start them.
Only if you say yes to the cloud writer. Then it goes to our server and the AI companies named above, and our server wipes the text after 30 days. With this iphone, the brief and the questions stay on the phone. Either way, analytics note the brief's kind, length, language and who it's for, but not its words, unless you turn on share what i write. If you speak your brief, your phone's speech service may process it.
No. openers 4.0 has no sign-in.
The people you share them with, and the people they repost a plan to, unless you turn reposts off. Plans are deleted from our server 14 days after they pass.
No. We don't sell it, and we don't use it for ads.
Tap delete what this phone shared in the custom openers settings, and leave plan in Plan. If you turned on share what i write, also tap delete what i shared.
DUATECH LLC, Phoenix, Arizona, USA. Email: support@opnrs.app
This policy is in English. If a translation ever differs, the English version controls.
Revisa qué puedes eliminar desde la app y cómo pedir la eliminación. Ver pasos para eliminar.