Ultron AI

Privacy Policy

Last updated October 28, 2026

Ultron AI answers questions using AI. This policy explains what leaves your device when you use it, where it goes, and how long it is kept. Ultron AI is provided by Anton Mitrafanau, IE (“we”).

1What you send, and where it goes

To answer you, the app sends what you type or dictate, and any photos you attach, to our server, which passes them to OpenAI, whose models write the answer. The app asks for your permission before the first message is sent, and sends nothing if you decline.

Without a subscription, once your free messages are used, and for anyone without a connection, questions in words are answered by Apple Intelligence on your iPhone, where it is switched on. Those questions and answers stay on your device; nothing goes to our server or to OpenAI.

When you take a photo to ask about, the app also reads the text in it on your device and sends that text with the photo, which helps with small print such as a menu’s prices. Nothing is sent until you choose what to do with the photo.

Our server does not store your messages or photos. OpenAI does not use them to train its models, and keeps them for up to 30 days to detect abuse, unless the law requires it to keep them longer.

Your conversations are stored only on your device, in the app’s history. Deleting a conversation, or the app, deletes them. So are your projects: a project’s instructions are sent with each message in one of its chats, like the message itself, and are not kept on our server.

Some questions need the web — the latest version of something, a price, a score. For those, OpenAI searches the web while writing the answer, and the pages it relies on are listed under it. Opening that list loads each site’s icon from the site itself, as a browser would, and tapping a page opens it inside the app.

With a subscription, Ultron can remember things about you that you choose — your work, the tools you use, how you like answers. After an answer, the app may offer to remember something you said about yourself; nothing is remembered unless you tap Remember, and it is told not to offer anything about your health, beliefs, money or other people. What is remembered is kept only on your device, where you can see, change and delete all of it in Settings, under Memory, or switch memory off. While it is on, it is sent with each message, like the message itself, and is not kept on our server.

When you ask for a reminder, the app sends your device’s time zone with the message, so that “tomorrow at 10” means your tomorrow. It is used for nothing else and not kept. The reminder is shown to you first; it is added to your Reminders, on your device, only when you tap Create, and the app asks for access to Reminders the first time you do.

With a subscription, you can make actions of your own, each with an instruction you write. They are kept on your device; an action’s instruction is sent with each message in its chats, like the message itself, and is not kept on our server.

With a subscription, you can ask for a research report. Your question goes through our server to OpenAI, which plans a few web searches; you see them before anything else happens. When you start it, OpenAI runs the searches, reads the pages they find and writes the report, which lists the pages it relies on. The report is kept on your device, in your Library, and not on our server.

With a subscription, you can attach a document to a chat — a PDF, a Word or text file, or a photo of a page — and ask about it. The app reads it on your device, and recognizes the text in photos of pages there too. The file itself never leaves your device. To find the parts that bear on a question, the app sends the text once, in pieces, through our server to OpenAI, which returns a numerical fingerprint of each piece (an embedding). The pieces and their fingerprints are kept on your device with the chat, and deleted with it. With each question, only the few pieces most like it are sent, together with the question.

You can ask Ultron to make a picture from a description. The description, and the style and shape you choose, go through our server to OpenAI, which draws the picture. It comes back to your device and is kept there, in the chat, until you delete it; our server keeps neither the description nor the picture. Without a subscription you can make one picture, and it counts as one of your free messages.

You can also start a picture from a photo of your own, or change a picture already made: the photo, or the picture, is sent the same way, with your words about it, and kept only on your device. A picture you share from the app carries a small “Made with Ultron AI” in its corner, which subscribers can turn off in Settings; the picture in the app, and one you save to Photos, never does.

With a subscription, you can photograph pages with the document camera to ask about them. The pages are made into one document on your device and read there, as a PDF you attach is; the photographs themselves never leave your device.

2Voice

Dictation, and what you say in a voice conversation, is recognized on your device by iOS. Only the resulting text is sent, as a message; the audio never leaves your device. In a voice conversation the answer is read aloud by your device’s own speech synthesizer.

A recording you make in the app, or an audio file you open in it, is written down on your device by iOS. The audio and its transcript are kept on your device, in your Library, until you delete them; nothing is sent while you record. With a subscription, when you ask for a summary of a recording or ask about it, its transcript is treated as a document: it is sent once, in pieces, to be indexed, and then the pieces that bear on each question are sent with it, as described above. The audio itself never leaves your device.

3An identifier for your device

The app creates a random identifier and keeps it in your device’s keychain. It is not your name, your email, your Apple ID or the advertising identifier. On devices that support it, the app also uses Apple’s App Attest, which creates a key on your device, to prove that requests come from the genuine app. We use them to count your free messages, and how many of them were photos or pictures, to stop abuse, and, once, to learn which Apple Search Ads campaign, if any, led to the install (see section 7).

The identifier stays in the keychain if you delete the app, so that reinstalling does not renew the free messages. Erasing the device removes it.

4Records of each request

For each request our server records the time, your device identifier, whether the request was attested, the category you chose (or that a document was being indexed), the model that answered, how many tokens the question and the answer took, how many web searches it ran, whether your subscription was active, and whether the answer completed. Never the content of your messages.

For each research report, it also records when it was started, your device identifier, how many searches it planned, what it could cost at most and did cost, and whether it finished — never the question or the report.

We use these records to limit how much one device can use in a day, to find abuse, and to keep the cost of the service in check. They are deleted after 90 days.

5Server logs and crash reports

Our server’s logs hold the same details, together with the IP address and the time of each request. They are deleted after 90 days. IP addresses are also held in memory for ten minutes to limit how quickly requests can be made.

When the app crashes or freezes, iOS prepares a report of it (Apple’s MetricKit): the app and iOS versions, the device model, and where in the app’s code it happened, as addresses in the app. The app sends these reports, and a daily summary of its launch times and memory use, to our server, so we can fix what went wrong. They carry no identifier of your device or of you, and nothing you wrote, asked, photographed or recorded. They are deleted after 90 days.

6Subscriptions

Payments are handled entirely by Apple; we never see your payment details. The app sends our server the transaction Apple signed, so that the server can check your subscription itself. We check it and do not keep it; the request records only note whether a subscription was active.

7Measuring our advertising

We advertise the app, and need to know which ads bring people who find it worth paying for. We do this with Apple’s own tools, which do not identify you:

• Subscriptions. When you subscribe, the app sets a random identifier on the purchase, which Apple calls an app account token. Apple then tells our server about the subscription — when it starts, renews, is refunded or ends, the plan, the price and the country of the App Store — under that identifier. It is not your name, your Apple ID or your payment details.
• Apple Search Ads. Once after installation, the app asks Apple’s AdServices framework for a token and sends it to our server with the app’s random identifiers. Our server asks Apple whether the install came from an Apple Search Ads campaign, and keeps the answer: the campaign, ad group, keyword and country, or that there was none. Next to it, our server notes the last time the app sent it a question, to see whether the people an ad brought keep using the app. This does not use the advertising identifier and does not need permission to track.
• The app’s first steps. We try different ways of showing the plans on the subscription screen: which of them, in what order, and which one is chosen first. The prices and the trials are the same in every one. The app asks our server which way to show, and tells it as you go which pages of the introduction you saw, when the subscription screen was shown and which plan you tapped, and a few other steps: that you reached the free limit, opened an action, or started a research report. It sends these under the same random identifier it sets on purchases, never with your messages or anything you write.
• Install reports. Through Apple’s SKAdNetwork and AdAttributionKit, the app reports how far an install has got — through onboarding, a first answer, a trial or a subscription. Only when an ad led to the install, Apple’s system sends these reports to the ad network that showed it, after a random delay and without anything that identifies you or your device, and sends us a copy.

We keep these records for 400 days — long enough to see a yearly plan renew once — and use them only to measure what our advertising and the app earn.

8What we don’t do

The app shows no advertising, contains no third-party analytics or advertising libraries, does not use the advertising identifier, and does not track you across other companies’ apps or websites. We do not sell your data, and do not share it with anyone except as described here. In the words of the California Consumer Privacy Act, we do not sell or share your personal information.

Apart from the reports the app sends, described above, iOS keeps crash and performance reports of its own. Those stay on your device unless you choose in iOS Settings to share them with app developers, in which case Apple passes them to us without identifying you.

9Who handles your data

They process your data only to provide the service, under terms that protect it at least as well as this policy.

10How long it is kept

11Your choices and rights

You can decline when the app asks, and none of your messages are sent. You can delete any chat from the history, and anything Ultron remembers in Settings, under Memory. To stop sending data once you have agreed, stop using the app and delete it; the records of your requests are deleted within 90 days, and the subscription, attribution and first-step records within 400.

Depending on where you live, you may have the right to access, correct or delete personal data about you, or to object to how it is used. Write to us to exercise any of them. The records hold no name or email, so we may not be able to tell which are yours; they are deleted after 90 days in any case.

12This website

This website sets no cookies, runs no analytics and keeps no log of visits.

13Children

Ultron AI is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has used it, contact us.

14Changes

When this policy changes, the new version is published here with a new date. If a change means sending your data somewhere new, the app will ask for your permission again.

15Contact