Privacy policy
The short version. Wantless has no accounts and never asks who you are. What you log stays on your iPhone, and in your own iCloud when your phone is signed in to it. We do not hold a copy. The only thing that ever leaves your records is what the optional AI features send after you agree: a small set of numbers, and a single sentence when you type one to be read. No advertising. No tracking. Nothing is sold.
1. Who we are
Wantless is made and run by Sho Ayuba, an independent developer. Write to support@wantless.app.
2. What stays on your iPhone
Everything you record: puffs, check-ins, notes, tags, goals, your day one, and the prices you enter. The counts the app shows — days, savings, totals, weekly patterns — are worked out from those records on the phone itself. All of it lives in the app's own database on your device.
We do not run a server that keeps records, so there is no copy with us to read, lose or hand over.
3. Your own iCloud
When your iPhone is signed in to iCloud, the app keeps a private copy of your records in your own iCloud, so a new iPhone signed in to the same Apple Account picks up where the old one left off. Apple holds that copy under your Apple Account, on Apple's infrastructure and under Apple's terms. Wantless cannot read it.
If the phone is not signed in to iCloud, everything stays on the phone and nothing is copied anywhere. The iCloud sync line in the app's Settings shows which of the two is happening right now.
4. Purchases
Plus is sold through Apple's App Store. Apple handles the payment; we never see your payment details.
To manage purchases the app uses RevenueCat, Inc. The RevenueCat SDK generates an anonymous identifier on your device, and what reaches RevenueCat is that identifier and the purchase history: which plan, when it was bought, and whether it is active. Your name, your email address and your records are not part of it — we could not send them, because we never have them. Cancelling and refunds run through Apple; the Terms describe how.
5. Analytics
The app sends no usage analytics at all. Nothing about how you use it — which screens you open, which features you reach for, how often you come back — leaves your iPhone.
The consent screen the app shows at the start, and one line in Settings, still mention anonymous usage data. That wording is left over from an earlier build and is being removed: whichever way the switch is set, no usage event is sent to anyone.
A later version may add anonymous usage measurement through TelemetryDeck GmbH, a company in Germany. If it does, this policy is revised here with a new date, and the app asks for your agreement, before any event is sent.
There is no advertising, no advertising identifier, and no tracking across apps or websites. The app never shows Apple's tracking prompt because it does nothing the prompt covers.
6. The AI features, only on Plus and only if you agree
Plus has three features whose wording is written by Claude, an AI service run by Anthropic PBC: the weekly insight sentence, the headline on the check-in after you log one, and the reading of a sentence you type into the sentence logger. The first time you use one, the app asks for a separate agreement and lists exactly what is sent. You can take that agreement back in Settings at any time; every Plus feature keeps working with fixed phrases instead.
What is sent. Totals and times of day as whole numbers — for example: 36 puffs this week, 21 of them between 3 and 5 PM — and a tag from a fixed list, such as "stress". In the sentence logger, and only there, the one sentence you typed and chose to send.
What is never sent. Your notes. Your check-in history. Your goals. Calendar dates. Your name, because Wantless never asks for one. There is no identifier of you in any request.
What happens to it. The request goes through our relay server, hosted on Fly.io in the United States, to Anthropic's Claude API, and the sentence comes back the same way. The relay stores nothing: no database, no sessions, and it does not log what you sent or what came back. Anthropic processes the request to return the sentence. Under the API terms we use, what is sent and what comes back are not used to train Anthropic's models. Anthropic may keep content for up to two years where a legal requirement applies or their trust and safety systems flag it, so deleting your data in the app cannot reach a copy a provider keeps under its own policies.
Like every internet request, a call to the relay carries your device's IP address. The relay does not log it. As with any internet service, our hosting provider may process your IP address transiently to route and secure the connection; we do not store it, and no platform log we control retains it.
7. Health data
What you track is information about your health, and the app is built so that it stays yours: it lives on your device and in your own iCloud, no usage analytics touch it, and the AI features send only what section 6 lists, and only with your agreement.
If you are in the European Economic Area or the United Kingdom: the health-related data we process at all — the aggregated numbers the AI features send, and the single sentence you choose to send — is processed on the basis of your explicit consent, Article 9(2)(a) of the GDPR. You can withdraw that consent in Settings at any time, and every Plus feature keeps working with fixed phrases instead.
8. What we never collect
- No account and no sign-in. There is no user ID of ours anywhere.
- No name, email address, phone number or date of birth.
- No location, contacts, photos or HealthKit data.
- No advertising identifier, and no data bought from or sold to anyone.
9. Deleting your data
Settings has "Delete everything". It removes your records on the iPhone and the private copy in your iCloud, and there is no copy left to restore from. You do not need to write to us to have data deleted, because we hold none.
One thing worth knowing: deleting the app alone removes what is on the phone but leaves the copy in your iCloud, and that copy comes back if you reinstall. Use "Delete everything" first if you want both gone.
Two things sit outside what that button can reach, and follow their keepers' policies: the purchase record held by Apple and RevenueCat, and anything Anthropic keeps for the reasons section 6 describes. Neither can be connected back to you by name, and neither is ours to delete.
10. How long things are kept
- On your iPhone and in your iCloud: until you delete them.
- On our side: nothing is kept. The relay stores nothing.
- Anthropic: up to two years for content held under a legal requirement or flagged by their trust and safety systems, as section 6 describes.
- Apple and RevenueCat: purchase records under their own policies.
11. Your rights
If you are in the European Economic Area or the United Kingdom, you have the rights the GDPR gives you: access, correction, deletion, restriction, objection, portability, and the withdrawal of a consent you gave. Most of them you exercise directly, because the data is in your hands: your records are on your device, correcting them is editing them, deletion is one screen in Settings, and the agreement that covers the AI features can be taken back in Settings at any time.
Because we hold no data that could identify you, an email from you cannot be matched to anything on our side; there is normally nothing for us to look up. Write to support@wantless.app with any question all the same. You can also complain to your local supervisory authority.
12. Children
Wantless is for adults. It is rated 17+ and is not directed at children. Do not use it if you are under 17.
13. This website
wantless.app sets no cookies and runs no analytics. The landing page loads one graphics library from a public content delivery network, and that request carries your IP address to the network, as any web request does. The document pages, including this one, load nothing from outside wantless.app.
14. Changes
If this policy changes, the new version appears here with a new date. If a change materially affects what the AI features send, the app asks for your agreement again before anything new is sent — it does not rely on you noticing this page.