Privacy Policy

Proof is built by SUUR LLC. This policy describes what the Proof iOS app collects, what it deliberately does not collect, where your data lives, and who processes it. It also covers this website, which is handled separately at the end.

What the app collects

Three categories leave your device. None of them are linked to your identity, and none of them are used to track you.

Chat messages

When you write to the AI companion, the text you type is transmitted for processing so the model can reply. In App Store terms this is Other User Content, collected for app functionality, not linked to your identity, and not used for tracking. We do not retain the contents on our servers, and we do not train on them.

Product interaction analytics

Proof uses Firebase Analytics (Google) to record which screens and features are used — a milestone was opened, a conversation was started, a milestone was reached. In App Store terms this is Product Interaction, collected for analytics, not linked to your identity, and not used for tracking.

Being specific, because "usage analytics" is vague: these events carry the day number you are on, and when you log a slip they record how long the streak was that ended. That is behavioural context about your drinking, and we would rather say so than let you assume otherwise.

What they never carry: the text of your conversations, and any Apple Health value. Firebase does assign a per-install identifier so that repeat sessions from one device count as one user. It is not your name, your email, or your Apple ID, and we do not combine it with anything that would tell us who you are.

Purchase and subscription data

Subscription status and purchase events are processed by RevenueCat, which acts as our processor for billing state. Apple handles the payment itself. We do not receive your name, email address, or payment details from Apple.

Apple Health stays on your device

If you connect Apple Health, Proof reads heart rate variability, resting heart rate, and sleep data to contextualize your timeline. That data is read on-device only. It is never transmitted to us, never sent to Anthropic, and never included in any AI prompt. It is not part of any analytics event. Proof never writes to Apple Health.

This is a deliberate design decision, not an oversight. The app's privacy manifest does not declare health data as collected, because it is not collected. If that ever changes, this policy changes with it before the change ships.

What we never collect

• Your name, email address, phone number, or account identifier.
• Your location.
• Your browsing or search history.
• Your contacts or photos.
• Your Apple Health data, as described above.

We do not track you

Proof does not track you across apps or websites. There are no advertising SDKs, no ad networks, and no data brokers. The app does not ask for permission to track, because it has nothing to track you with. Nothing we collect is combined with data from other companies to build a profile of you.

Where your data lives

Everything you create in Proof — your timeline state, slip log, milestones you have talked to, achievements — lives in two places:

• Locally on your iPhone, in app-private storage.
• In your own private iCloud (CloudKit), encrypted in transit and at rest by Apple. That container belongs to your Apple account, not to us. We cannot read it.

SUUR LLC does not run a database of your timeline or your conversations.

How AI conversations work

When you write a message, it is sent through a Cloudflare Worker proxy operated by SUUR LLC to Anthropic, who runs the Claude model that replies. The proxy attaches the API key and forwards the request. We do not log the contents.

Anthropic is a sub-processor for the duration of the API call. Their data handling for API traffic is described at anthropic.com/legal/privacy.

Your Apple Health data is not part of this. No health value enters any prompt.

Processors we use

• Anthropic — runs the model that replies to your messages.
• Cloudflare — operates the proxy that forwards those requests.
• Google (Firebase Analytics) — product interaction analytics.
• RevenueCat — subscription and purchase state.
• Apple — payments, iCloud sync, and opt-in crash diagnostics.

Crash diagnostics

If you opted in at the OS level, Apple collects an anonymous crash log when the app crashes and shares it with us. We use these to fix bugs. They do not contain your conversations or your health data.

Age

Proof is rated 17+ on the App Store because the AI can discuss subjects that are not appropriate for minors. The app is not directed at children under 13, and we do not knowingly collect any information from them.

Your rights

Deleting Proof from your iPhone removes the copy stored on the device. Because we do not hold your timeline or your conversations on our servers, there is no account on our side to close.

To have your iCloud-synced data and any records held by our processors erased, write to proof@suur.io. We will action the request and confirm when it is done, within 30 days.

If you are in the EU/UK, this satisfies your right to erasure under GDPR. If you are in California, the same applies to your CCPA rights. We do not sell or share personal information as those terms are defined under CCPA.

This website

proof.suur.io uses Google Analytics 4 to count page views and understand which pages people find useful. This is separate from the app. The site sets no advertising cookies and runs no ad networks. If you prefer not to be counted, browser-level tracking protection or an analytics blocker will stop it.

Changes

If this policy changes, we update the effective date above. Material changes are also noted in the app's About screen so you can see them without leaving the app.

Contact

Questions about this policy: proof@suur.io.

SUUR LLC, Fort Collins, Colorado.