1. Who we are
textRay is operated by Strategic Minds Group Limited, trading as textRay, a company registered in England with its registered office at 57 Nine Elms Lane, London, SW11 7DF, United Kingdom ("textRay", "we", "us"). We are the data controller for the personal data described in this policy.
Questions, requests, complaints: [email protected].
2. What textRay does
textRay is an iOS app for ages 16 and over. You choose a conversation — a WhatsApp export, screenshots, or pasted text — and, with your explicit consent, we analyse it with AI to produce a report about communication patterns in that conversation. Reports describe patterns in a chat; they are never a diagnosis of a person.
3. What we collect
Account data
- Sign-in identity. Your email address and, if you use Sign in with Apple or Google, the identifier those services share with us.
- Profile. Your first name and date of birth. We use your date of birth to confirm you are 16 or over and to derive your age bracket and star sign for the app's presentation.
- Newsletter. If you tick the newsletter box at sign-up, we store that choice and use your email address to send you our newsletter. Entirely optional, and you can unsubscribe at any time via the link in any email or by contacting us.
Conversation data
- Imports. The conversation you choose to scan: an exported chat file, screenshots, or pasted text, plus the context you select about it (for example "relationship — long term").
- Reports. The analysis we generate from an import, including quotes drawn from the conversation as evidence.
Commercial and technical data
- Purchases. Credit purchases are processed by Apple. We receive purchase confirmations and your credit balance via our purchase-infrastructure provider (RevenueCat). We never see your payment card details.
- Diagnostics. Standard server logs (timestamps, request outcomes, IP addresses) and error diagnostics, used to keep the service working and secure.
- Analytics. In the app we use PostHog (EU-hosted) to record usage events — screens viewed, features used, whether scans succeed or fail, and basic device information — linked to your account identifier so we can fix what breaks. Analytics never includes your conversations, your reports, or anything in them.
We do not run advertising SDKs, we do not sell personal data, and the textray.ai website sets no cookies and runs no analytics at all. The app uses one analytics tool — PostHog, described above.
4. How conversation data moves through textRay
This is the part most people are actually asking about, so here it is end to end:
- On your device. Imported conversations and cached reports are stored with iOS file protection (encrypted at rest on your phone).
- Upload. When you start a scan, the conversation is uploaded over an encrypted connection to our servers. An upload that is never confirmed is automatically purged — draft imports expire within minutes, and imports held for review are purged within 24 hours unless you confirm the scan.
- AI analysis. With your consent — asked before your first scan, withdrawable at any time in the app's Settings — the conversation is sent to AI providers (currently Anthropic and OpenAI) to produce your report. These providers process the content only to generate your report; under the API terms we use, your conversations are not used to train their models.
- Your report. The finished report is stored on our servers so you can reopen it across sessions, and cached on your device. It stays in your history until you delete it.
- Report Q&A. Questions you ask about a report are answered from that report and its underlying analysis. Your Q&A history is stored only on your device — our servers keep no record of the conversation you have with the assistant.
- Deletion. Deleting a report in the app deletes the server copy immediately. Deleting your account removes your account data, imports, and reports.
5. Other people are in your chats
A conversation involves at least one person who is not you. You should only scan conversations you took part in, and you are responsible for making sure you can lawfully share them with us — see our terms. We process the other participants' messages solely on your instruction, to produce your report; we do not use them for anything else, we do not build profiles of people who appear in scanned chats, and reports are written as observations about a conversation, never dossiers on a person.
6. Legal bases
- Contract — providing the app: accounts, imports, analysis, reports, purchases.
- Consent — AI processing of your conversations (nothing is analysed until you explicitly agree; we ask once, before your first scan, and you can withdraw at any time in the app's Settings — withdrawal stops future scans and doesn't affect analysis already done) and the newsletter, if you opt in.
- Legitimate interests — service security, abuse prevention, diagnostics, product analytics, and improving reliability.
- Legal obligation — records we must keep, such as transaction records.
7. Who processes data for us
We use a small set of subprocessors to run textRay:
- Supabase — database, authentication, and file storage.
- Vercel — API hosting.
- Anthropic — AI analysis.
- OpenAI — AI analysis.
- RevenueCat — in-app purchase infrastructure.
- PostHog — product analytics (EU-hosted).
- Apple — app distribution, Sign in with Apple, and payment processing.
- Google — Sign in with Google, if you choose it.
8. When we would share data
Beyond the subprocessors above, there are two situations where personal data could leave our hands. If we are legally required to — a court order, or a valid request from a law-enforcement or government authority — we may have to disclose data, and we will challenge requests we believe are overbroad. And if Strategic Minds Group Limited is ever acquired, merges, or sells its assets, user data may transfer as part of that transaction; the new owner would be bound by this policy, and we would tell you before it happens.
9. International transfers
Some subprocessors process data outside the UK, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses or an applicable adequacy decision (including the UK–US Data Bridge where certified).
10. How long we keep things
- Unconfirmed imports — purged automatically; drafts expire within minutes of upload, review-stage imports within 24 hours.
- Reports and confirmed imports — kept until you delete the report or your account.
- Q&A history — on your device only; removed when you delete the report or the app.
- Account data — kept while your account exists; deleted when you delete your account, except records we are legally required to keep (for example transaction records).
- Server logs — kept for a short rolling window for security and debugging.
- Analytics events — kept for up to 24 months, then deleted.
- Newsletter email address — used until you unsubscribe; removed from the mailing list promptly when you do.
11. Your rights
Under UK GDPR you can ask us for access to your data, correction, deletion, portability, restriction, or to object to processing. The fastest routes are built into the app: delete any report immediately, or delete your whole account from Settings. For anything else, email [email protected] and we will respond within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk.
12. Age 16 and over
textRay is for people aged 16 and over. We ask for your date of birth at sign-up and do not knowingly provide the service to anyone under 16. If you believe someone under 16 is using textRay, contact us and we will remove the account.
13. Security
Conversations and reports are encrypted in transit (TLS) and at rest, on device (iOS file protection) and on our servers. Access to production data is restricted, and our database enforces per-user row-level security so accounts can only ever read their own data. No system is perfectly secure and we will not pretend otherwise, but this is how we stack the odds.
14. Changes
If we change this policy we will update the date at the top, and for material changes we will tell you in the app before they take effect.
15. Contact
Strategic Minds Group Limited (trading as textRay)
57 Nine Elms Lane, London, SW11 7DF, United Kingdom
[email protected]