WuMen — Privacy Policy

WuMen is a light, humorous app that “translates” everyday phrases between partners and gives friendly advice. We respect your privacy and keep data collection to the minimum needed to make the app work.

What we process

• Text you type and speech transcripts for translation or advice are sent over encrypted HTTPS to a dedicated WuMen Cloudflare Worker and then to Anthropic to generate a response. We do not retain the text or AI response in our own database or logs, and we do not associate it with the App Attest security record. Anthropic may retain API inputs and outputs for up to 30 days under its standard retention policy, subject to limited exceptions for legal obligations and Usage Policy enforcement. This content is not used for advertising or tracking.
• Speech recognition uses Apple’s Speech framework to convert voice to text. Where supported, recognition happens on-device; otherwise Apple may process the audio. Raw microphone audio is not sent to our Cloudflare Worker or Anthropic and is not stored by us.
• Photos and face data (Mood scanner). When you choose a photo for the Mood scanner, the app uses Apple’s on-device Vision framework to detect a face and its facial landmarks (such as mouth and smile geometry) solely to generate a playful mood reading. All face detection happens entirely on your device. The photo and the detected face data are processed in memory only: they are never uploaded, never stored, never shared with us or with any third party, and are discarded immediately after the reading is shown. We do not create biometric templates and cannot identify anyone from this data. The Mood scanner is an entertainment feature and not a real emotion detector.
• App integrity and abuse prevention uses Apple’s App Attest. The private key remains on the device. Our Worker stores a pseudonymous App Attest public key, the latest assertion counter, app validation/build information, security timestamps, and daily quota counters to verify genuine app requests, prevent replay attacks, and enforce service limits. The request IP address is processed transiently for rate limiting and is not stored in WuMen application logs or databases. The security record is deleted after 180 days without a valid request. This information is not combined with account or contact information and is not used for advertising or tracking.

What we do NOT do

• No account or sign-up.
• No advertising and no third-party analytics/tracking SDKs.
• We do not sell personal data or share it for advertising or tracking.

Service providers and retention

Cloudflare operates the dedicated WuMen Worker that receives, verifies, and forwards HTTPS requests. We use Cloudflare only to deliver and secure the service. The Worker is configured not to log request bodies or AI responses.

Anthropic processes the text and generated response through its commercial API. Under Anthropic’s standard retention policy, API inputs and outputs are deleted within 30 days, except where longer retention is required by law, for Usage Policy enforcement, or under another retention arrangement. Learn more from Anthropic.

Children

WuMen is intended for a general audience (12+) and is not directed at children.

Contact

Questions about this policy: npans1354@gmail.com