Privacy Policy
APPTOMI has no accounts and keeps none of your data on its servers. Your apps, your data, and your prompts stay on your device. Data only leaves it when you paste a request into an AI chat yourself, when you send one to an AI provider using your own key, or when an app you approved talks to a website it declared, to a nearby phone, or to someone you paired with for internet play.
Who is responsible
APPTOMI, a business registered in Israel, is responsible for the small amount of personal data described here (“we”). You can reach us at support@apptomi.com.
This policy covers APPTOMI, not what people make with it. Tools and games are made by the people who use APPTOMI, with an AI they choose. We never see them. If a tool or game sends data to a website, or to a friend, the person who made it and that website are responsible for what happens to it, not us. Read what each one asks for before you allow it. If you put other people’s details into a tool you make, looking after them is up to you.
What APPTOMI does not collect
- APPTOMI does not collect or store your app code, app data, prompts, or generated outputs on APPTOMI servers. The server that helps phones find each other for internet play never receives them.
- We don’t sell your data or share it for advertising. APPTOMI shows no ads.
- Your app logic, configuration, and saved data stay locally on your device.
- When you share an app, the file is locked with a passphrase you choose and encrypted with AES-256-GCM before it leaves your device.
- App state, cache, and files are stored in per-app sandboxed directories on your device.
Device capabilities
Each app lists the features it needs, and the install screen shows them before you install. Depending on what you approve, an app can:
- Contacts: get the name and number (or email) of a contact you pick in your phone’s own contact picker, or open your phone’s own screen to add a new contact. Apps can’t read your other contacts.
- Calendar: read, add, or change calendar events.
- Location: read your location while the app is open. On Android, some apps, such as a run tracker, can keep reading it with the screen off; while they do, a notification shows with a Stop button. APPTOMI itself never tracks or collects your location: it goes only to the app you made or installed, on your phone, and only if you approved location for that app.
- Camera, microphone, and speech recognition: take a photo, record audio, or turn your speech into text when you tap to do so.
- Files: open a file you pick, and save files to your Downloads folder.
- Notifications from other apps (Android): read the notifications on your phone. This only works after you also turn on APPTOMI in Android’s “Notification access” settings.
- App usage (Android): see which apps you’ve used and for how long. This only works after you also turn on APPTOMI in Android’s “Usage access” settings.
- Nearby devices: find and connect to other phones over Bluetooth, for example to play a two-player game.
- Internet play: connect directly with people you pair with using a code, for example to play a two-player game from different places.
- Text messages: APPTOMI can’t send a text message by itself. An app can open your messaging app with a message filled in, and you decide whether to send it.
- Other: clipboard, text-to-speech, vibration, sensors such as motion, device info (model, battery, network, screen), fingerprint or face unlock, reminders and alarms, and network access to the websites the app declares.
You stay in control. Sensitive features, such as camera, microphone, location, contacts, calendar and files, need your approval in APPTOMI for each app, and your phone asks for its own permission too. You can turn them off at any time in App Management. A few simple features, such as saving the app’s own data, sound, vibration and notifications, don’t ask: they are listed on the install screen instead.
Where that data goes
- It stays on your device unless the app sends it somewhere. An app can only reach the websites it lists, and the install screen shows that list before you install.
- Nearby play sends data only between the phones in the same game, directly over Bluetooth.
- Internet play sends data directly between your phone and the phones you paired with. It doesn’t pass through APPTOMI. See Internet play below.
- Reminders are scheduled on your device.
Internet play
- What our server sees: while the app is open and your friend isn’t connected yet, your phone stays connected to APPTOMI’s handshake server. The server sees your phone’s internet (IP) address and when it’s connected. It passes on setup messages that are encrypted so it can’t read them, and it stores nothing.
- Cloudflare: the server runs on Cloudflare, as our service provider, and may process your address outside your country. Cloudflare keeps its standard request logs under its own privacy policy. Each phone also asks Cloudflare what its public internet address is.
- Relay: when a network blocks a direct connection (common on mobile data), the connection goes through Cloudflare’s relay instead. What you send stays encrypted end to end, so Cloudflare can’t read it; it sees both phones’ internet addresses, when you’re connected and how much data passes. Your friend then sees the relay’s address instead of your phone’s. On a direct connection the relay isn’t used.
- Relay and your purchase: the relay comes with Unlimited. To get it, APPTOMI sends our server the store’s own record of your Unlimited purchase (from Apple or Google) about once a day. The server checks it and keeps nothing from it, and we keep no list that links you to the code below. A scrambled code made from the purchase goes on your relay use in Cloudflare’s reports, and it counts how much relay each purchase uses in a day (up to 1 GB), so one purchase can’t be shared without limit.
- What your friend sees: your phone’s internet address (unless the relay is used) and the name you enter when pairing.
- Why: we use your address only to connect you with the people you paired with, because you asked to play with them.
- How to stop: turn off Peers for that app in App Management, or delete the app. Deleting it also removes its pairings.
Friends
- What it is: you add a friend once in APPTOMI with a code, then chat and use apps together without a new code for each app. Your friends list, chats and invites are kept only on your phone.
- What our server sees: while APPTOMI is open and you have friends, your phone stays connected to the same handshake server as for internet play, with the same limits: your internet address and when you’re connected, never your messages.
- What your friend sees: your name, your messages, and the apps you invite them to, one app at a time. They never see your list of apps. An app you use with a friend gets a key made for that app only, so it can’t reach your friend anywhere else.
- How to stop: remove the friend on their page in Friends. Messages that haven’t reached them yet are deleted with the chat.
AI and LLM usage
- Building in an AI chat app (the default). When you tap Copy and open, APPTOMI puts a request on your phone’s clipboard and opens the AI chat you picked, such as Claude, Gemini or ChatGPT. You paste it and send it yourself. The request contains your idea and APPTOMI’s building instructions, and, when you change an existing app, that app’s code. The chat is between you and that service and is covered by its privacy terms; APPTOMI never sees it.
- Reading the reply. When you tap Paste reply, APPTOMI reads your clipboard once to get the app the chat made. It does not read your clipboard at any other time while building.
- Building with your own AI key. If you add a key, the request goes directly from your device to the AI provider you chose, using your own account with them. Before the first request goes to a company, APPTOMI names it, says what will be sent — what you type, any pictures you add, the code you are changing, and, when you ask for a fix, its recent error messages — and sends nothing until you tap Allow. Nothing else from your phone is sent. Switching to another company asks again, and deleting the key takes your permission back.
- No relay. APPTOMI does not proxy, relay, or store your prompts or the generated output.
- Your API keys. Keys are stored in the platform keystore — the Keychain on iOS, Android Keystore on Android — and are sent only to the provider you chose.
- Provider policies. Each provider has its own privacy terms, and your usage is governed by them. Review them before use.
- On-device AI. When your phone supports it (Gemini Nano on Android, Apple Intelligence on iPhone), AI runs on the device and nothing leaves it.
- Voice typing. When you tap the microphone to describe an app, your phone’s own speech service turns what you say into text. Depending on your phone and its settings, Apple or Google may process the audio on their servers, under their own privacy terms. APPTOMI gets only the text and doesn’t keep the audio.
Diagnostics and logs
- APPTOMI keeps local diagnostic logs on your device for troubleshooting.
- These logs are never uploaded. You choose whether to share them, and with whom, using the share button in Settings.
- When you ask an AI to fix an app, error details can be included in the request. Common personal details, such as API keys, email addresses, and phone numbers, are removed first.
- You can delete them at any time with “Clear log” in Settings.
Sharing and export
When you share an app, it is locked with a passphrase you choose, and the file is sent directly by whatever method you choose — email, AirDrop, file transfer. APPTOMI has no access to shared files, and no access to your passphrase. The recipient decrypts it locally.
Reporting and blocking
You can report an app to support@apptomi.com from inside APPTOMI. A report contains the app’s name, version, identifier, and a content hash that identifies the exact file, plus whatever you write. It is an email you send; nothing is transmitted automatically.
You can also report a friend from your chat with them. That report contains their friend ID and the name you know them by, plus whatever you write. If you choose, it also contains their last messages. You see the email and decide whether to send it.
You can also block an app on your device. Blocks are stored locally and are never transmitted. See the Acceptable Use Policy for what happens after a report.
APPTOMI downloads two signed lists from apptomi.com, at most twice a day: tools and games reported as harmful, and tools and games for adults (18+). Your phone downloads each whole list and checks it on the phone, so we never learn which tools and games you have. Like any website, apptomi.com sees your phone’s internet address when a list is downloaded.
Emails to support
When you email support@apptomi.com, we get what you send: your email address, your message, and anything you include, such as a report, a log or a friend’s messages. Nothing is sent to us without you sending it. Our mailbox is hosted by Google Workspace.
We use your email only to answer you, to act on a report and to fix APPTOMI. We delete it after 12 months, or sooner if you ask. We keep it longer only if a report is still open or the law requires it.
What is kept, and for how long
- On your phone: everything in APPTOMI, until you delete it or uninstall APPTOMI.
- Emails to support and reports: up to 12 months, as described above.
- Your internet address on our server: only while you are connected. Our server stores nothing.
- Cloudflare’s logs and reports (request logs, and relay use by scrambled code): for as long as Cloudflare keeps them, under its own policy.
- The store’s record of your purchase: Apple or Google keeps it. Our server only reads it.
Why we can use this data
- Because you asked: connecting you with friends, giving you the relay you paid for, and answering you.
- To keep APPTOMI working and safe: stopping abuse, limiting the relay, and acting on reports. This is our legitimate interest.
- Because you agreed: sending a request to an AI provider, or sending us a report or a log.
- Because the law requires it: for example, if a court or an authority lawfully asks. That is the only other time we pass on anything we hold, and we hold very little.
Data outside your country
Cloudflare and Google work around the world, so what they handle for us may be processed outside your country, including in the United States. We use them under their standard data protection terms.
On-device storage
- Settings and configuration — UserDefaults on iOS, SharedPreferences on Android, inside the app sandbox.
- Sensitive values such as API keys — the Keychain on iOS, Android Keystore-backed encryption on Android.
- Per-app data — private sandboxed directories, one per app.
Security
We work to protect APPTOMI, but no phone, software or network is completely safe.
- Export: AES-256-GCM with PBKDF2-HMAC-SHA256 key derivation (250,000 iterations).
- Secrets: API keys and credentials are never stored in plaintext.
- Sandboxing: each app runs in its own restricted runtime.
- Domain allowlist: an app can only reach the domains its manifest declares and you approved.
Third-party services
APPTOMI itself uses no analytics, no crash reporting, and no trackers.
When you choose to use a cloud AI provider, your requests go directly to that provider — currently Anthropic, OpenAI, Google, Groq, or GitHub Models depending on your choice — under their own privacy policy.
APPTOMI is installed and updated through Google Play or the App Store, under Google’s or Apple’s privacy policy. Purchases go through Google Play billing or Apple’s App Store; APPTOMI never sees your payment details. It asks the store whether this phone has Unlimited, and sends the store’s record of the purchase to our server to get the relay (see Internet play).
Internet play uses a small server that runs on Cloudflare. See Internet play.
Age check
When you first open APPTOMI, it asks whether you are 18 or older, so that tools and games marked for adults (18+) open only for adults. On iPhone it asks through Apple’s age range sharing where it can; you choose on Apple’s own screen whether to share, and APPTOMI gets only whether you are 18 or older. Otherwise APPTOMI asks the question itself. The answer is kept only on your phone and is never sent anywhere. You can change it in Settings.
Children
APPTOMI is not directed at children under 13, and we don’t knowingly collect their data. If you are 13 to 17, a parent or guardian should agree to your use of APPTOMI. If you think a child under 13 has written to us, tell us and we will delete it.
Your rights
Almost everything stays on your device, so you manage it there:
- Review every app permission in App Management.
- Revoke any capability at any time.
- Delete app data, logs, or entire apps. Deleting an app also removes its internet-play pairings.
- Export your apps as files you keep.
- Opt out of cloud AI entirely.
- Erase everything by uninstalling APPTOMI. We hold no copy. The only thing we may have is an email you sent us; ask us and we will delete it.
For anything we hold, such as an email you sent us, you can ask to see it, correct it, delete it, or object to how we use it, by emailing support@apptomi.com. Because APPTOMI has no accounts, we can only find what is linked to the email address you write from. You can also complain to your data protection authority; in Israel, that is the Privacy Protection Authority.
Changes to this policy
We may update this policy. Where changes are significant, we will notify you in the app.
Contact
APPTOMI, Israel