Iki: Privacy Policy

Last updated: 23 September 2026

Iki is a journey of thirty short questions toward your ikigai, made by Rocky Solutions, walked one a day or in one sitting. You write or speak a short reflection for each; the app answers in a sentence that proves it listened, and at the end it gives you a statement and a guide. This page says exactly what that means for your data. It is short because the app collects little.

The short version

• Your reflections are yours. They are stored so the app can give them back to you on another phone, and so the last day can read the whole month. Nobody at Rocky Solutions reads them as a matter of course.
• Your voice never leaves your phone. Dictation is recognised on the device. No audio is recorded, stored or transmitted, ever.
• We show no ads, use no analytics or advertising SDKs, and do not track you across other apps or websites. There is nothing to opt out of, because there is nothing running.
• We never sell or share your data with anyone for their own purposes.
• You can take everything with you or delete all of it from inside the app, at any time, in two taps: You → Privacy.

What Iki collects, and why

Your account. Iki asks you to sign in with Apple or with Google, and with nothing else: there are no passwords and no email codes. From that sign-in we receive an account identifier and an email address, which is what lets your garden follow you to a new phone. If you use Sign in with Apple's Hide My Email, we only ever see the relay address Apple gives us, and that is fine.

What you write and say. The answers you type, the words dictation turns into text, what you choose in the quick steps at the start, anything you write on the evening path, and the questions you ask the garden after day thirty. This is the app.

What the app writes about you. The one-sentence mirrors, the stones (insights and reviews), the first reading, the day-thirty statement, the guide and the shape it names.

How the journey is going. Which day you are on, the dates of your sessions, and a small number of events: that a day was completed, that the reveal was seen, that a question was asked. These carry counts and day numbers only. They never carry a word you wrote.

Your settings. The name you chose to be called (if any), the time of day you picked, your preference for typing or speaking, light or dusk, and your phone's time zone, which is used only to work out when your day turns over.

What the AI cost. For every call the app makes on your behalf we record the day, the kind of call, whether it succeeded, and how many tokens it used, so we can see the bill and stop runaway spending. No content is stored in that record.

What Iki does not collect

• No audio. Speech recognition runs on your device. Nothing is recorded and nothing is sent.
• No photos, contacts, location, health data or calendar. The app asks for none of them. The photo permission explained in the App Store listing exists only because the system share sheet (which Iki uses if you choose to share your statement) references the photo library.
• No device advertising identifier, no fingerprinting, no cross-app or cross-site tracking. There is no analytics SDK in the app at all.
• No third-party cookies or trackers. Iki has no web view and no ads.

Who else sees it

Three companies are involved, and no others.

Anthropic. To write the mirror, the stones, the reading and the day-thirty guide, the app sends the relevant answers to Anthropic's Claude API through our own server. Anthropic processes them to produce the reply and, under their commercial terms, does not use them to train their models. Nothing is sent for any other purpose, and the calls carry no name, no email and no account identifier: only the words and the day they belong to.

Supabase. Our database and server host. Your rows live there, on servers in the European Union, behind row-level security: every table is scoped so that only your own account can read your own rows.

Apple and Google. Only for the sign-in itself. They tell us who you are; we tell them nothing about what you write.

RevenueCat. Keeps the record of your purchase (which door, when, and Apple's receipt) under your account identifier, so the door can be restored on a new phone. It receives nothing you wrote and no email address.

We do not sell data, we do not share it for anyone else's marketing, and there is no data broker anywhere in this list.

One place other people can read something you wrote

After day thirty, Iki may offer you the chance to leave one anonymous sentence for people who finish with the same shape as you. This is the only thing you can write that another person may ever see, and it is entirely optional.

If you leave one: it is stored without your name, it is read by a human before anyone else sees it, and it is shown to nobody until then. A sentence you leave replaces any earlier one. Deleting your account deletes it too.

If you read a sentence that should not be there, Report a sentence sits under the wall. One tap takes it down for everybody immediately and sends it back to be read again.

Everything else you write is private to your account.

How long it is kept

As long as you keep your account. There is no separate retention clock: the month you walked is the thing the app exists to give back to you.

When you delete your account (You → Privacy → Delete everything), the server deletes your authentication record, and every row in every table that belongs to it goes with it, by cascade: your answers, your stones, your statement, your events, your anonymous sentence. Iki also asks Apple to revoke the sign-in grant, so the connection between your Apple ID and this app is undone. The copy on your phone is wiped in the same action.

This is not reversible, and we keep no backup copy for ourselves.

Taking it with you

You → Privacy → Export writes everything Iki holds about you into a readable JSON file and hands it to the system share sheet, so you can save it, mail it to yourself, or AirDrop it. No account, no request form and no waiting.

Children

Iki is not directed at children and is rated 13+ on the App Store. We do not knowingly collect anything from a child under 13. If you believe a child has created an account, write to the address below and we will delete it.

Your rights

Wherever you live, and whatever your local law calls them, you can: see everything we hold (Export), have it corrected (edit it in the app), have it erased (Delete everything), and object to any of it by not using the app. If you are in the EU or the UK, Rocky Solutions is the data controller and the legal basis for processing is the performance of our contract with you (the app cannot do what it promises without your reflections), except for the journey counts, which rest on our legitimate interest in knowing whether the thirty days work.

You may lodge a complaint with your local data protection authority at any time; in France that is the CNIL (www.cnil.fr).

Changes

If this policy changes in a way that matters, the date at the top changes and the app will say so before the change takes effect.

Contact

Rocky Solutions, contact@rockysolutions.co. We answer every message about data ourselves, usually within a few days. Our full company details are on the legal notice.