Privacy Policy

Who we are

Irmigo is made by Diego Kakihara, an independent developer based in Japan. Questions or deletion requests can be sent to contact@irmigo.app.

Early-access waitlist

When you join the waitlist, we store your normalized email address, the date of consent, and limited first-touch attribution such as the campaign label, landing path, and referring website hostname. This is stored in Cloudflare D1 and used only to send the early-access invitation and understand which launch channels work.

Duplicate email addresses are not added again. You can ask us to remove your waitlist record at any time by emailing the address above.

Anonymous website analytics

The early-access page uses PostHog, whose servers are in the United States, to record two events: that the page was viewed and that a waitlist submission succeeded. Events may include campaign labels, the landing path, the referring website hostname, and whether the top or bottom form was used.

We disable automatic click collection, session recording, heatmaps, error capture, person profiles, and browser persistence. We do not identify visitors and do not send email addresses or form contents to PostHog. We require the PostHog project not to retain IP addresses before analytics is enabled. Browser Do Not Track preferences are respected.

What stays on your device

Irmigo is built local-first. Captures, plans, sessions, daily journal summaries, companion memories, and the conversation text shown to you — both your words and the companion's displayed replies — are stored in a database on your iPhone. Notifications and alarms are scheduled on the device too. Irmigo does not save raw live-voice audio as conversation history; it saves the final transcript and displayed reply text.

If you delete the app, that on-device data is deleted with it. You can also delete data from inside the app without uninstalling. When you do, the rows are removed and the database file is rewritten so the deleted text is not left behind in free space.

Each day, Irmigo can review completed small talk to decide whether something would be useful as a separate note. This is housekeeping, not deletion: the original conversation stays in your journal until you delete it yourself. If Irmigo is unsure whether something is worth keeping as a note, it leaves the conversation alone.

What leaves your device in the app

• Text AI. When you ask the companion to plan or respond, the text you wrote and the minimum context needed are sent over an encrypted connection through our server to OpenAI. Our server relays the request and does not keep a database of your notes, plans, or conversations.
• Voice input and replies. When voice mode is active, each finished audio turn is sent over an encrypted connection through our server to ElevenLabs for transcription. The resulting text follows the Text AI process above. The companion's reply text is then sent to ElevenLabs to create spoken audio. Irmigo does not keep raw voice audio as conversation history; the final transcript and displayed reply stay on your iPhone.
• Service access and purchases. The app creates a random anonymous service identifier to verify access and enforce subscription usage limits. Apple and RevenueCat handle subscriptions with another random identifier. Our server keeps transaction links, billing periods, request counts, audio durations, and salted request fingerprints needed to prevent duplicate use and enforce the allowance. It does not keep the text or audio itself. We do not receive your name, email address, or Apple ID from Apple or RevenueCat.

OpenAI and ElevenLabs process API data as our service providers. By default, OpenAI does not use API inputs or outputs to train its models. Its standard abuse-monitoring logs may retain API content for up to 30 days, unless law requires longer retention or different data controls apply to our account.

Your controls

• See what it knows. Settings shows everything the companion remembers about you.
• Forget one thing. Tap Forget on any memory. It is deleted from the database, not hidden.
• Delete a conversation. Use Delete this conversation in the journal to remove its saved text and that day's summary. Plans or notes you separately saved from the conversation stay, but their link back to the deleted conversation is removed.
• Delete an errand. Open Change or stop on anything you asked for and choose Delete this — and what I said. Its alarms are cancelled first, then the plan and the words you entered for it are erased.
• Delete everything. One control in Settings clears every alarm first, then deletes the app's anonymous service identity, then erases all local data — captures, plans, sessions, conversations, summaries, memories, and your name. The app starts over as if you had just installed it. This does not cancel an App Store subscription. Apple and RevenueCat retain the purchase record, and transaction-based usage accounting stays for the current subscription period so deleting data cannot reset a paid allowance.

What we do not do

• No advertising and no advertising SDKs.
• No tracking across other apps or websites.
• No selling or renting your data.
• No account is required to use the iPhone app.
• No medical diagnosis or treatment is provided.

Children

Irmigo is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes and contact

Material changes will be stated plainly on this page. For access, correction, deletion, or privacy questions, email contact@irmigo.app.