Developer area · Team app # Team app: what it keeps, what it sends, and to whom This is the privacy page of the Team app, the team’s own app. The public PrompTugal app has [its own page](../privacy.md), and it has no team data and no messages. The Team app has no account system, no analytics, no advertising and no tracking. It has no server of its own that collects data about you. Some features do send what you write to other services, and only when you use them. This page lists every one. ## What stays on your device - **Your schedule, saved sessions and cached feeds,** in the app’s private storage, so the reader works offline. - **Who you are on the team** (the name you pick in “Who are you?”), your settings and your reminder times. - **Reminders.** They are local notifications, scheduled on the device. Nothing is sent to a push server. The app asks for notification permission only after you tap to turn reminders on. - **Website data.** Cookies and storage of the websites you open in the app, one separate store per website, kept apart from Safari. - **Your Ask conversation,** only if you turn on “Keep the conversation on this device”. It is off by default. - **The debug panels’ logs** (requests, vault traffic, bridge messages). They stay on the device, record no message bodies and never record keys. Deleting the app removes all of it from the device. ## What the app sends, and where **Public feeds** The agenda, the news and the newsroom’s status come from `promptugal.news`; the team’s dashboards come from the team’s site, `web-summit.sgit.ai`. These are reads of public files. The app sends nothing about you with them. **Ask (AI chat)** When you use Ask, your question, the conversation so far and the kinds of context you switch on are sent with your own key to `openrouter.ai`, which passes them to the maker of the AI model you chose. Before the first message, Ask shows what it sends and to whom, and sends nothing until you tap **Allow**. Each kind of context (the public agenda, your picks, your team’s status, the current page, your day plan, your agents) has its own switch; only the public agenda is on by default. You can withdraw permission in Ask → Key and settings. **Messages and notes** Messages to teammates and notes to the newsroom are encrypted on your device and sent to an append-only lane on `dev.send.sgraph.ai` (or the server named in the lane’s address). The server stores only ciphertext. Only the holder of the lane’s private key can read them. **Your vault** Vault reads and writes go to the vault server, `dev.send.sgraph.ai`. Everything is encrypted on the device before it leaves; the server stores ciphertext and opaque file names. What the app may write to your vault: your picks, a shared day plan, notes, and your OpenRouter key if you choose to save it there. **Dictation** Voice notes are transcribed on the device when your language allows it. Otherwise iOS sends the audio to Apple’s speech service, and the app tells you which is happening. The app does not keep the audio. **Purchases** In-app purchases go through Apple. The app never sees card details. **Calendar** “Add to Calendar” writes a session to your calendar, only when you ask, with write-only access. The app cannot read your calendar. **The websites you open** Pages load from their own sites, as in a browser. Each site’s privacy policy covers what it does. Links that leave a site open in Safari. ## Where the keys are kept - **Vault keys** are in the Keychain on this device only, behind Face ID (or your device passcode where Face ID is not set up), and wrapped by a Secure Enclave key where the device has one. They are never synced to iCloud. - **Your OpenRouter key** is in the Keychain on this device only, readable after the first unlock. It is not behind Face ID, so Ask can work without a prompt, and it is never synced to iCloud. - **Your lane’s private key** is in the Keychain on this device only. - No key appears in logs, the debug panels or crash reports. The debug panels list which keys exist and where, never their values. ## What the app never does - No tracking, no analytics, no advertising, and no third-party SDKs: the app uses Apple’s frameworks only. - It does not sell or share data with data brokers, and it does not use your data to follow you across other apps or websites. - It does not read your contacts, photos, location or calendar. ## The beta The Team app is installed from Xcode or through the team’s TestFlight. If you join through TestFlight, Apple shares your email address, device model, OS version and any feedback or crash reports you send with the team. [Apple’s TestFlight privacy notice](https://www.apple.com/legal/privacy/data/en/testflight/) has the details. ## Checking this, and questions The whole app is open source on [GitHub](https://github.com/PrompTugal/PrompTugal__App__iOS). In debug mode the app lists every network request it makes, with its host, size and timing. Questions about privacy: see [Contact](../support.html#contact).