Privacy Policy
Last updated: October 27, 2026
This policy explains what the Caipher iOS app collects, why, who processes it, how long it's kept, and the choices you have. Caipher is made by Madigan Technologies LLC, a Florida company ("we", "us"). Questions: support@madigantechnologies.com. It also covers the launch waitlist on caipher.dev (section 17).
1. Who we are
Caipher helps TikTok Shop affiliate creators manage brand deals in their email, appeal violations, write video scripts, understand their TikTok and TikTok Shop results, and get answers from an AI assistant. Caipher is for people 18 and older.
2. What we collect
- Your account: your email address, an account identifier we create, your name if you add it, your sign in details (handled by our sign in provider; we never see your Apple, Google or TikTok password), your time zone and the content category you choose.
- What you create in Caipher: violations and appeals, brands and brand contacts, scripts, deals and drafted replies, your rates and media kit choices, questions you ask and their answers, and feedback you send.
- Photos, screenshots and video frames you attach (section 5).
- Gmail data, if you connect Gmail (section 3).
- TikTok data, if you connect TikTok (section 4).
- Your TikTok Shop numbers, if you add them (section 4.6).
- Speech: the words spoken in clips you edit in Studio are turned into text on your phone by Apple's speech recognition. What you dictate, and what you say to Ask in voice mode, is turned into text by Apple's speech recognition, on your phone or, when your phone needs it, by Apple's servers under Apple's privacy policy. We receive only the text, never the audio.
- Subscription status: your plan and renewal date, from Apple through our subscription provider. We never see your payment details.
- Usage records: how many AI answers and Studio edits you use, and how many seconds of the Caipher voice, for your plan's limits and to prevent abuse, and the steps you confirm in the app (for example linking a posted video to a deal, or saving an edited video). These records hold counts and confirmations, not the content of your questions or your videos.
- Usage events: which features you use and when (for example that you opened the app, asked a question by voice, or exported a Studio video), with counts and short codes such as your plan, the app version and an error's code. They never include what you write, say, earn or upload: no email content, questions, answers, names, brand names, amounts or screenshots. They're stored only on our own servers, never shared with an analytics company, and used to understand which features help and to fix problems. You can turn them off in Settings, Privacy, "Share usage data to improve Caipher".
- Crash reports: if you've chosen to share analytics with app developers in your iPhone's settings (Privacy & Security, Analytics & Improvements), Apple sends us crash reports and basic performance data for Caipher, under Apple's privacy policy. They describe what went wrong in the app and don't include your content.
- Answers you report: when you tap Report this answer on an AI answer, script, appeal or voice reply, Caipher sends us that one answer and the reason you pick (section 7).
3. Gmail
Caipher can connect to your Gmail through Google's official sign in, so it can find the brand offers in your inbox. Connecting is optional, and you can disconnect at any time.
3.1 What we read
Caipher asks Google for one Gmail permission: read only access to your email (gmail.readonly). Google shows you this permission before you allow it. When you first connect, Caipher reads your inbox from the last 90 days, then new mail as it arrives:
- the senders and recipients, the subject, the message text and the date;
- whether each message is read, and the names and types of its attachments.
We don't open or store attachments. Caipher can't send, delete, label, or change anything in your Gmail. Receipts, newsletters and notifications are recognized without AI and aren't sent to our AI provider.
3.2 How we use it
- Find the offers: spot which emails are brand partnership offers.
- Read the details: each offer's payment amount, deliverables and deadline.
- Label and rank them: offer type, priority, fit with your niche, a short summary, whose move it is, and whether the deal is closed (for example, moved to WhatsApp).
- Save a brand: fill in a brand's contact details from that brand's emails to you, for you to review before anything is saved (section 6).
- Answer questions about your offers, when you ask Caipher.
- Draft replies: you read them, edit them and send them yourself. Caipher never sends email for you.
Mail you forward to your Gmail. If you forward another email account (for example Proton, Outlook, iCloud or Yahoo) to the Gmail you connected, Caipher reads that forwarded mail like the rest of your Gmail. If you add your other email addresses in Inbox setup, Caipher saves them in your account so it can tell your own replies from a brand's, and read a forwarded email as coming from the brand that sent it. Forwarding is set up in your other provider, never by Caipher, and Caipher gets no access to that account.
3.3 Who we share it with
- Anthropic, our AI provider, receives the relevant email text to label offers, draft replies, fill in brand details and answer your questions. Anthropic processes it to return a result and doesn't use it to train its models.
- ElevenLabs, our voice provider, receives only the short spoken part of an answer when you use Ask's voice mode with the Caipher voice, as text. That text can mention details from your emails, such as a brand's name or an offer amount. ElevenLabs uses it only to return the audio and doesn't use it to train its models, and Caipher deletes it from our ElevenLabs account as soon as the audio is made.
- Supabase, our database host, stores your synced emails, Caipher's labels and your drafts.
- No one else. We don't sell Gmail data, use it for advertising, or share it with data brokers.
3.4 Limited Use
Caipher's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide and improve the Inbox features above; transfer it only to provide them, to comply with the law, for security, or as part of a merger or acquisition with notice to you; never use it for advertising; don't let people read it unless you ask us to, for security or abuse investigations, or when the law requires it; and don't use it to develop, improve or train generalized AI or machine learning models.
3.5 How long we keep it
- While Gmail is connected: your synced emails, labels and drafts, so your Inbox works.
- Disconnect Gmail (Settings, Gmail, Disconnect Gmail): Caipher asks Google to revoke its access (unless another of your Caipher accounts still uses that Gmail) and deletes its access keys from our servers at once. You choose to delete your synced email now, or keep it for 30 days in case you reconnect. After 30 days without a reconnection, it's deleted automatically, with its offers, drafted replies and linked posted videos.
- Remove Caipher in your Google account (myaccount.google.com/connections): Caipher can't read new email. To delete what was already synced, disconnect in Caipher or write to us.
4. TikTok and TikTok Shop
Caipher can connect to your TikTok account through TikTok's official Login Kit, and you can sign in to Caipher with TikTok (section 4.7). Both are optional, and you can disconnect at any time.
4.1 What we read from TikTok
TikTok shows you the permissions Caipher asks for, and you can turn off the optional ones. We read only what you allow:
| TikTok permission | What Caipher reads |
|---|---|
| Basic profile (user.info.basic) | Your display name, profile photo, and an account identifier TikTok creates for Caipher |
| Profile (user.info.profile) | Your TikTok username |
| Stats (user.info.stats) | Your follower, following, total like and video counts |
| Videos (video.list) | Your recent public videos: title, description, cover image, link, posting date, length, and view, like, comment and share counts |
We don't read your private videos, messages, drafts or your followers' identities. Caipher can't post, comment, like, or change anything on TikTok.
4.2 Why we use it
- To show your profile and stats, and fill in your name and username in Caipher if you haven't.
- To suggest your main content category from your recent video titles and hashtags (you accept, change or dismiss it).
- To track your growth: once a day, Caipher saves your follower, following, like and video counts.
- To show your top videos and, on plans that include them, your best times to post and the patterns in your recent videos.
- On plans that include it, to give AI advice and write scripts that use your real numbers.
- To build your media kit, a page in Caipher showing what a brand would see. It isn't shared with anyone.
- On plans that include it, to spot when a video you posted mentions a brand you have a deal with, so you can mark the deal as posted and see a campaign report. Nothing is linked unless you confirm it.
4.3 AI processing
To suggest your content category, Caipher sends Anthropic the titles of up to 20 of your recent public videos and their hashtags, once. On plans that include TikTok coaching, a short summary of your TikTok numbers built on our servers (top videos, best time and length, posting by month) goes with your questions and scripts; it isn't saved. Your TikTok sign in tokens, account identifier and profile photo are never sent. This happens only after you've agreed to Caipher's AI data use.
4.4 What we keep, and for how long
| Data | How long |
|---|---|
| TikTok access tokens (encrypted, on our servers only, never on your phone) | Until you disconnect or delete your account. If TikTok stops accepting them, they're deleted at once. |
| Profile and current stats | Until you disconnect or delete your account |
| Daily account stats (your growth history) | Up to 400 days, then deleted automatically. If you disconnect TikTok, kept for 30 days in case you reconnect the same TikTok account, then deleted; or deleted at once if you choose Delete my TikTok data now |
| Videos you link to a deal (video identifier, posting date, last counts seen) | Until you unlink the video, disconnect or delete your account; the counts are deleted after 400 days |
| Media kit choices, including up to 6 videos you pick | Until you change them or delete your account; the picked videos are removed when you disconnect TikTok |
| The link between your TikTok and your Caipher account (the account identifier TikTok creates for Caipher) | Until you disconnect TikTok or delete your account |
| Your other videos and the insights built from them | Not stored: fetched from TikTok when you open a screen, used, and not kept |
4.5 Removing it
- Disconnect TikTok in Caipher: Caipher asks TikTok to revoke access and deletes your TikTok tokens, profile, current stats, unaccepted category suggestion, linked deal videos and media kit video picks at once. Your daily growth history is kept for 30 days, so it comes back if you reconnect the same TikTok account (connecting a different one deletes it); after 30 days it's deleted automatically. Your deals keep their Posted status.
- Delete my TikTok data now (Settings, TikTok; or What Caipher knows): Caipher asks TikTok to revoke access and deletes all of your TikTok data at once, your daily growth history included.
- If TikTok access ends (you remove Caipher in TikTok's settings, or TikTok stops accepting the connection): the tokens are deleted at once, and if you don't reconnect within 30 days, the rest of your TikTok data is deleted automatically.
4.6 Your TikTok Shop numbers
What Caipher remembers about your shop. When you add TikTok Shop screenshots, Caipher reads the numbers on them (sales, commissions, items sold, views, clicks and your top products and videos) and saves those numbers, with the date range they cover, so you can see how your shop changes week to week. Screenshots you add to update your shop numbers are sent once to be read and then discarded: Caipher doesn't store them. Screenshots you attach to a question in Ask are kept with that conversation, like any photo in Ask (section 5). A number that isn't on the screenshot is never saved. When you set up your shop, Caipher saves your answers (how you film, your niche, your goals and the ranges you choose). When you add your best videos, Caipher saves a short breakdown of how each is made (its hook, format, length and pacing), never the video or its words. Caipher uses all of this only to personalize your answers, scripts and insights. To read screenshots and videos, Caipher sends them (still frames, for videos) to Anthropic, which doesn't use them to train its models.
Screenshots only. Caipher doesn't connect to your TikTok Shop account or to TikTok Shop's API. Your shop numbers come only from the screenshots you choose to add.
You can see, change or delete any of your shop data in Settings, What Caipher knows, and it's deleted with your account.
4.7 Signing in with TikTok
You can sign in to Caipher with your TikTok account, through TikTok's official Login Kit, on the same consent screen and with the same permissions as connecting TikTok (section 4.1). TikTok never shares your TikTok password with us.
- Which account it opens: we keep the account identifier TikTok creates for Caipher, linked to your Caipher account, only to know which account to open when you sign in. A TikTok account is linked to one Caipher account at a time. Connecting TikTok in Caipher links it for sign in too.
- A new Caipher account: if your TikTok isn't linked to an account yet, Caipher asks for your email and sends a 6 digit code to it. The account is created only after you enter the code, and its email is used for receipts, account recovery and service messages, as for every Caipher account. Until then, your TikTok profile and access are held encrypted on our servers for up to 30 minutes; if you don't finish, they're deleted and TikTok access is revoked within a day.
- An email that already has a Caipher account: after you enter the code sent to it, Caipher asks whether to link your TikTok to that account, and links it only if you say yes.
- Removing it: disconnecting TikTok in Settings, or deleting your account, removes the link at once. Your account keeps its email sign in.
5. Photos, screenshots and video frames
- Every photo you attach (Ask, violations, feedback) is saved again as a new picture on your phone before it's sent, which removes its location and other hidden details.
- In Ask, you can attach up to 15 photos or screenshots to a question. They're sent to Anthropic with your question and kept with that conversation so you can see them in your history, until you delete the conversation or your account.
- Videos you attach in Ask. Caipher takes a few still pictures from the video on your phone (up to 8, evenly spaced) and sends those with your question. The video itself and its sound are never sent or stored. The pictures are kept with that conversation, the same as your other Ask conversations.
- Product screenshots for scripts. Sent to Anthropic to read the product's name, features, price, offer and claims, then discarded: Caipher doesn't store them. The details you confirm are saved with that script.
- Videos you attach to scripts. Up to 8 still frames are sent to read the product's details or, if you choose Reference style, how the video is put together (never its words). The video and its sound never leave your phone, and the frames aren't stored.
- Videos you edit in Studio. Studio edits your clips on your phone. To plan an edit, Caipher sends our AI provider the words found in your clips (transcribed on your phone), up to 12 small still frames from them (up to 20 when your clips run longer than 45 seconds in total), the product details you enter and the format you pick. Your video files and their sound never leave your phone. The words and frames are used for that edit and aren't stored. When you save a video, Caipher keeps a short record of it (its format, length and number of cuts, never the video) for your Saved with Caipher totals and plan limits. The finished video goes to your Photos only when you save it.
- Screenshots you add to fill in a brand are used only to read them and aren't saved.
- Violation screenshots are stored with that violation until you delete it or your account.
6. Brands you save
A brand you save can include details about the people you deal with there: a contact's name, email address, WhatsApp or phone number, and the brand's TikTok handle, TikTok Shop link, website, products and rates. These come from what you type, from that brand's emails to you, or from a message or screenshot you add. Caipher fills in only what the email, message or screenshot actually says, never looks brands up on the web or on TikTok, and saves nothing until you tap Save. Caipher never contacts the people in your brand list and never shares their details except with our service providers. Brand details stay until you delete the brand or your account. If you're a brand contact and your details are in a creator's Caipher account, ask us at support@madigantechnologies.com and we'll remove them within 30 days.
7. AI features and your consent
Caipher's AI features are provided by Anthropic. Before you use them, Caipher asks you to agree to how your data is used for AI. Studio asks again before its first edit, because it sends words and frames from your clips. Requests go through Caipher's own servers, which check your account and limits, then to Anthropic. Anthropic uses what it receives only to return a result, doesn't use it to train its models, and deletes it within 30 days (longer only if it's flagged for a policy violation).
Voice mode in Ask. When you talk to Ask, your question is turned into text as described in section 2 and sent like a typed question. The answer can be read aloud. With your iPhone's own voice, this happens on your phone and sends nothing more. On plans that include the Caipher voice (a computer generated voice, labeled as one in the app), Caipher's servers send the short spoken part of the answer, as text (never your microphone audio), to ElevenLabs, our voice provider, which returns the audio. So that Caipher can react the moment you finish talking, the words heard so far also go, as text, to our AI provider while you talk, for a short reaction that is then read aloud the same way. ElevenLabs uses the text only to return the audio and doesn't use it to train its models (we've turned that off for our account). ElevenLabs keeps a copy of each request in our account's history; Caipher deletes it as soon as the audio is made. Caipher doesn't store the audio: it's played on your phone and then deleted. We keep only how many seconds and characters were spoken, never the words.
Reporting an answer. If an AI answer looks wrong, unsafe or off, you can tap Report this answer. Caipher sends us only that answer's text, the reason you pick and where it appeared (Ask, a script, an appeal or voice), linked to your account so we can look into it. Nothing else from the conversation is sent. That answer can include details from your email or TikTok, and sending it is your request for us to read it. We use reports only to fix and improve Caipher's answers and keep them safe, never share them except with our service providers, and delete them after 12 months.
8. Feedback you send
When you send feedback from Settings, Caipher saves your message and any screenshots you add, and emails them to our support inbox so we can read and answer it. The email includes your message, your plan, the app version, your account email and links to your screenshots that stop working after 72 hours. It's sent through Resend, the service that sends Caipher's emails.
9. What we don't collect or do
No third party analytics, advertising networks, tracking technologies, advertising identifiers or location data. Caipher's usage events (section 2) are first party: they stay on our own servers and no analytics company receives them. We never sell your data or share it with advertisers or data brokers.
10. Service providers
- Supabase: sign in, database, file storage and our servers. Your data is stored in the United States (Amazon Web Services, Oregon).
- Anthropic: AI processing (section 7).
- ElevenLabs: the Caipher voice, which reads answers aloud (sections 3.3 and 7).
- Google: Gmail (if you connect it), including Google Cloud Pub/Sub, which tells Caipher's servers that new mail has arrived (the notice carries your Gmail address and a change number, never the email itself), and Sign in with Google.
- TikTok: your TikTok data (if you connect it).
- Apple: Sign in with Apple, dictation and speech recognition, the App Store and in-app purchases.
- RevenueCat: manages your subscription status (no payment details).
- Resend: sends sign in codes, password reset codes, feedback notices and waitlist emails (section 17); its records are stored in the United States.
- Cloudflare: our domain's DNS, the caipher.dev website including its waitlist form (section 17), and the page that hands TikTok's sign in back to the app (it sends TikTok's one time code straight to our server, passes the app only Caipher's own one time code, and stores nothing). Cloudflare Turnstile also checks that sign in and sign up requests come from a person and not a bot, using technical signals from your phone such as its IP address, under Cloudflare's privacy policy; it doesn't use advertising identifiers or track you across apps.
Requests may pass through these providers' global networks on the way.
11. How long we keep your data
| Data | How long |
|---|---|
| Your account and what you create in Caipher | Until you delete it or your account |
| Synced email | While Gmail is connected; deleted within 30 days of disconnecting (or at once, if you choose) |
| TikTok data | Deleted at once when you disconnect, except your daily growth history, kept 30 days in case you reconnect (or deleted at once if you choose Delete my TikTok data now); within 30 days if TikTok access ends and you don't reconnect; daily stats after 400 days |
| TikTok Shop numbers and your shop profile | Until you delete them or your account |
| AI usage records (counts, no content) | 12 months |
| Usage events (no content) | 13 months, then deleted automatically |
| Answers you report | 12 months |
| Feedback and its screenshots | 24 months, or until you ask us to delete it |
| Launch waitlist email address | Until you unsubscribe, then deleted within 30 days; if you never confirm, deleted 30 days after our last email; never longer than 12 months |
| AI requests at Anthropic | Deleted by Anthropic within 30 days |
| Caipher voice audio | Not stored: played on your phone, then deleted |
| Caipher voice requests at ElevenLabs | Deleted from our ElevenLabs account as soon as the audio is made; any records ElevenLabs keeps on its own are covered by its privacy policy |
| Encrypted database backups | Up to 7 days, then overwritten |
Deleting your account (Settings, Delete account) revokes Caipher's Gmail and TikTok access and deletes your data and files at once; anything a failed deletion leaves behind is removed by a daily check, so everything is gone within 30 days (backups roll off within 7 more). You can also ask us by email, and we'll complete it within 30 days.
12. Data security
- Every connection between the app, our servers and our providers is encrypted (HTTPS).
- Your data is encrypted at rest by our hosting provider. The lasting access Google and TikTok grant Caipher is kept only on our servers, additionally encrypted with AES-256 using keys in a separate secure vault, in storage the app itself can't read. While the app syncs your email, it gets only a short lived Gmail key (about an hour), kept in memory and never stored.
- Access rules let only your own account read your data.
- On your iPhone, Caipher keeps your sign in in the iOS Keychain. The app contains no secret keys.
- No system is completely secure. If an incident affects your personal data, we'll tell you without undue delay and within the time the law requires.
Report a security issue: security@caipher.dev. Our security page is at caipher.dev/security.
13. Your choices and rights
- Disconnect Gmail or TikTok, or delete your TikTok data at once (Delete my TikTok data now); see, change or delete what Caipher knows about your shop (Settings, What Caipher knows); delete any item you created; turn usage events off (Settings, Privacy); delete your account.
- Ask us for a copy of your data, or to correct or delete it, at support@madigantechnologies.com. We'll answer within 30 days.
- Depending on where you live, laws such as the GDPR or the CCPA may give you more rights. Contact us to use them.
14. Age requirement
Caipher is for people 18 and older. If we learn we have information from someone under 18, we delete it.
15. Changes to this policy
When we change this policy, we update the date at the top and, for significant changes, tell you in the app. If Caipher starts reading more from Gmail, TikTok or TikTok Shop, we'll update this policy first and ask for the new permission on that service's own consent screen before reading anything new.
16. Contact
Madigan Technologies LLC, Florida, United States. support@madigantechnologies.com. Security issues: security@caipher.dev.
17. The launch waitlist
On caipher.dev you can leave your email address to hear when Caipher launches. We save your address, when you signed up, whether you confirmed, and whether you came from our TikTok link. We send one email asking you to confirm, and once you confirm, we email you about the launch. We use your address for nothing else, never sell or share it except with the providers that run the waitlist, and never add it to other lists.
- Who processes it: Cloudflare runs the caipher.dev page and passes your address to our servers at Supabase, where it's stored. Resend sends the emails. Cloudflare and our servers see your IP address to stop abuse; we don't store it with your address, and our rate limits keep it only as a one way code for about a day.
- Unsubscribe anytime: every email has an unsubscribe link, or email support@madigantechnologies.com. We stop emailing you at once.
- How long we keep it: until you unsubscribe, then deleted within 30 days. If you don't confirm, it's deleted 30 days after our last email. It's never kept longer than 12 months.
- The waitlist is separate from a Caipher account. Joining it doesn't create one, and nothing in this section changes how the app uses your data.