Palimpsest Privacy Policy
In short
- Palimpsest keeps your information on your device (and in your own iCloud account) and, for the features described under “What leaves your device”, on our server and with the services listed there.
- No tracking and no ads. Palimpsest doesn’t track you across other companies’ apps or websites and doesn’t show ads.
- No analytics or crash-reporting services are built in.
- No account: you don’t sign in, and we don’t know who you are.
- Purchases are handled by Apple. We never see your payment details.
Who we are
Palimpsest (“Palimpsest — Dating Decoder” on the App Store) is published by Marketgence Technologies LLC (“we”, “us”). This policy explains what happens to your information when you use Palimpsest on your iPhone or iPad. Questions: support@marketgence.com.
What stays on your device
Palimpsest keeps these on your device, in the app’s own storage that other apps can’t read:
- Your connections, imported conversations, readings, journal entries, agreements and notes.
- The random relay ID and, if you add one, your own OpenAI key (in this device's Keychain, not synced).
- Per-connection salts used to scramble names in local identifiers (in the Keychain, which syncs through iCloud Keychain if you use it).
- Your pronouns, the name to avoid, and your settings.
- Items shared into the app and the widget's moment, held in the app's own container on the device.
Like other app data, it may be included in your device backups (iCloud Backup or a computer backup) if you use them.
iCloud. When you're signed in to iCloud, your records are also kept in your own private iCloud database (CloudKit) so they sync to your other devices. You can switch this off in Settings ▸ Privacy ▸ Local-only storage; it takes effect the next time the app opens Only you can read it: it’s kept by Apple under Apple’s Privacy Policy, not by us.
What leaves your device
| What | Why | Sent to | When | Linked to you |
|---|---|---|---|---|
| The reviewed conversation text as written, sent in full and not redacted (up to the last 500 messages, each marked as you or them) | AI evidence readings, message decoding, reply drafts and other worded reads | Palimpsest's AI relay, then OpenAI (or straight to OpenAI if you use your own key) | Only after you turn on Enable AI synthesis in Settings. Readings then run after each import you save, and when you ask for a worded read. | No |
| Your notes and context for that connection: its shape, structure, distance and life circumstances, stated intent, your current question, confirmed notes, journal moments (if you include them), debrief answers, drafts you ask about, and figures computed on the device | AI evidence readings, reply drafts and other worded reads | Palimpsest's AI relay, then OpenAI (or straight to OpenAI if you use your own key) | Only after you turn on Enable AI synthesis in Settings. Readings then run after each import you save, and when you ask for a worded read. | No |
| A random ID created by the app for this install | Counting your monthly allowance of AI requests | Palimpsest's AI relay only (it is not passed to OpenAI) | With each AI request that uses the built-in allowance, and when Settings shows the allowance meter | No |
| How many AI requests this install made this month | Enforcing the monthly allowance | Palimpsest's AI relay | When you use AI synthesis with the built-in allowance | No |
| Whether you have Palimpsest Pro (free or pro) | Setting the size of your monthly AI allowance | Palimpsest's AI relay | With each AI request that uses the built-in allowance | No |
We don’t sell your information, and it isn’t used for advertising.
Our server
If you use AI synthesis with the built-in allowance: a random ID that the app created for this install (not your Apple Account or device hardware ID), and a count of AI requests made this month. The relay does not store the text you send.
Where it runs: Palimpsest's AI relay (a Cloudflare Worker deployed through Rork). How long it’s kept: Only the current month's count is kept. Older months are removed the next time that ID makes a request. There is no set expiry for the ID's counter; Delete everything removes the ID from your device, so the counter is no longer used.
Services we use
These outside services receive data from Palimpsest to make it work. Each handles that data under its own privacy policy.
- OpenAI
- Writes AI evidence readings and worded reads (models gpt-5.6-terra and gpt-5.6-luna). What it receives: The prompt: conversation text as written, your notes and context for that connection, figures computed on the device, and any draft you ask about. Through the relay, OpenAI doesn't receive the install ID. With your own key, requests go from your device to your own OpenAI account. Only after you turn on Enable AI synthesis. May keep API requests for a limited time under its API data policy. See OpenAI's policy. Privacy policy: openai.com.
- Cloudflare, through Rork (hosting for the AI relay)
- Runs Palimpsest's AI relay, which forwards requests to OpenAI and keeps the monthly request count. What it receives: Each AI request passes through it (text, install ID, free or Pro tier), plus normal request data such as IP address. Only when you use AI synthesis with the built-in allowance. The relay stores only the request count. The hosting platform may keep request logs, and the relay logs OpenAI's error replies. See their policies.
- Apple (iCloud)
- Syncs your records through your own private iCloud database. What it receives: Your records, stored in your private iCloud database, which Apple keeps for you and we can't read. When you're signed in to iCloud and haven't chosen Local-only storage. Until you delete them; Delete everything also removes them from your private iCloud database. Privacy policy: apple.com.
Artificial intelligence
Worded reads, such as decoding a message, boundary scripts and reading panels, are written by Apple's on-device model when Apple Intelligence is available (on by default). If AI synthesis is on, these reads use OpenAI instead. This runs on your device with Apple’s on-device model; your text isn’t sent anywhere for it.
Optional AI synthesis: evidence readings after each saved import, message decoding, reply rewrites and forecasts, practice replies, boundary scripts, debrief and pre-date reads, and weekly and monthly summaries. It uses OpenAI (gpt-5.6-terra, gpt-5.6-luna) through Palimpsest's own relay (a Cloudflare Worker), or directly from your device if you add your own OpenAI key. It’s off until you choose to use it. When you use it, this is sent: The reviewed conversation text in full, not redacted, plus your context, notes and journal moments you include for that connection, figures computed on the device, and drafts. The relay also receives a random install ID and your free or Pro tier. Your pronouns are not sent. The service generates the answer and may keep request records under its own policy. Don’t include anything you wouldn’t want processed this way.
AI-generated text can be wrong or incomplete; see the Terms of Use.
Permissions
Palimpsest asks for these only when you use the feature that needs them. You can change your answer at any time in the Settings app.
| Permission | Why |
|---|---|
| Microphone | To hear a reflection you speak, only while you are recording it. |
| Speech Recognition | To turn spoken reflections into text on your device; the audio is not sent anywhere. |
| Notifications | Optional reminders you turn on: the post-date debrief, the weekly Mirror, tripwires and next-date nudges. |
Tracking, ads and analytics
Palimpsest doesn’t track you: it doesn’t link information about you with information from other companies’ apps, websites or data brokers, and it doesn’t use an advertising identifier.
Palimpsest doesn’t show ads.
It has no analytics or crash-reporting services. If you’ve chosen to share analytics with app developers in your iPhone’s settings, Apple may share crash reports with us; Apple doesn’t include your identity.
Accounts
There are no accounts in Palimpsest. You don’t sign in or give us your name or email address.
Purchases
Palimpsest offers auto-renewable subscriptions and one-time purchases through Apple’s App Store. Apple processes the payment and knows what you bought; we don’t receive your name, email address or payment details. The app checks what you’ve bought on your device with Apple’s StoreKit. Apple’s Privacy Policy applies to the purchase.
Children
Palimpsest isn’t directed at children under 13, and we don’t knowingly collect personal information from them. Made for adults using it for dating and relationships; not directed to children.
How long data is kept, and deleting it
Information on your device stays until you delete it. You can delete it in the app: Settings ▸ Your data ▸ Delete everything. This also removes your records from your private iCloud database. A single connection can be deleted from its reading screen. Deleting Palimpsest removes the information it keeps in its own storage on your device; copies in your backups or your iCloud account remain until you delete those. If you've bought something, a random purchase identifier that the app keeps in the iOS Keychain can stay on the device after the app is deleted, so your purchases can be matched again; it doesn't identify you.
On our server: Only the current month's count is kept. Older months are removed the next time that ID makes a request. There is no set expiry for the ID's counter; Delete everything removes the ID from your device, so the counter is no longer used. The relay keeps no content. Delete everything removes the install's random relay ID from your device. The monthly request count stored under that ID is not deleted by the app, but it is no longer used.
OpenAI: May keep API requests for a limited time under its API data policy. See OpenAI's policy.
Cloudflare, through Rork (hosting for the AI relay): The relay stores only the request count. The hosting platform may keep request logs, and the relay logs OpenAI's error replies. See their policies.
Apple (iCloud): Until you delete them; Delete everything also removes them from your private iCloud database.
Your rights
Depending on where you live (for example in the European Union, the United Kingdom or California), you may have the right to know what information we hold about you, to get a copy, to correct or delete it, and to object to how it’s used. To make a request or a complaint, email support@marketgence.com. You can also contact your local data-protection authority.
Changes to this policy
If we change how Palimpsest handles information, we’ll update this page and its effective date, and list the change below.
- : First version on apps.marketgence.com; replaces the policy at k0idg6k6r7x1jqc9xzqt0-web-palimpsest.rork.live/privacy. Corrected: AI text is sent in full, not redacted (the old page said names were replaced with tokens); purchases are checked on your device (older text named RevenueCat); iCloud sync is on by default; Delete everything removes the relay ID from your device only.
Contact
Marketgence Technologies LLC · support@marketgence.com