It stays on your phone, and we can’t read it.

What the app stores, and where

Photos you capture or pick, item prices, installment details, written thoughts and your burn history are saved in the app's private storage on your phone.

The database is encrypted at rest with SQLCipher, using a key generated on first launch and held in the iOS Keychain — not in the app bundle. Photos and thought pages are written with complete data protection, which means they are unreadable while the device is locked.

This data is included in your device backup (iCloud or local) under Apple's standard mechanisms. None of it is sent to us or to any third party. The only things that leave the phone at all are described below: purchase validation, handled by Apple and RevenueCat; a request for public stock-index prices about once a week, which carries nothing about you; and an encrypted export file, only if you make one and choose where it goes.

No accounts, by design

There is no sign-up, no email address and no password, so there is nothing an account could unlock and nothing for us to hold. Nothing you burn is ever sent to us — that is the promise, and it holds without exception.

Nothing about what you burn reaches outside the phone. The app's only network traffic is purchase validation and public index prices, both described below.

A local PIN or Face ID is the only gate on the app, and the PIN is stored as a salted SHA-256 hash in the iOS Keychain.

Camera and photo access

The app asks for camera and photo-library permission solely so you can add a picture of the thing you crave. The images stay in the app's private storage; nothing uploads them.

Erasing everything

"Erase everything" in Settings destroys the database, the stored images, your preferences and the encryption key. Because the app keeps no copy anywhere else, there is nothing left afterwards — including with us.

The one thing it can't reach is an encrypted export file, if you ever made one — that copy lives wherever you saved it, so delete it there too.

Purchases

Optional paid purchases are processed by Apple and, for receipt validation, RevenueCat. RevenueCat identifies your installation with a random ID it generates on the phone — the same Support ID shown in Settings — not with your name or Apple ID. We receive no payment details. See Apple's and RevenueCat's privacy policies for how they handle purchase data.

This website

burnmydesire.com sets no cookies and runs no analytics or trackers. The contact form composes a mail draft in your own mail client — it does not post anything to a server.

Share-to-unlock claims

If you claim a reward for posting about the app, you email us a link to your post and, for some rewards, the anonymous Support ID shown in the app's Settings. That ID identifies an installation, not a person, and the app still sends us nothing about what you burn.

Claim emails are kept only until the reward is issued, then deleted. The reward itself is an App Store code or an entitlement grant — neither creates an account anywhere.

Index prices

To show what a purchase could become if invested, the app ships with historical prices for a handful of public stock indices. About once a week it asks Yahoo Finance for newer prices. The request names only the index — nothing you logged, no identifier, nothing about you — though, like any web request, it reaches Yahoo's servers from your phone's internet connection.

If the request fails or you're offline, the app keeps using the prices it already has.

The world counter

The current version of the app does not send anything to a world counter. The feature is designed but not switched on.

If that changes, this page will say so first, with a new date, and the app will show you exactly what would be sent — with a way to stay out of it — before anything goes.

The AI encouragement

After a burn the app can offer one short line of encouragement. It is generated by Apple's on-device model, which means the words you wrote are handed to a model running on your own phone and never sent anywhere — there is no API call, and the feature works in aeroplane mode.

It is a toggle in Settings, and the app tells you whether the model is available on your device. It never gives medical, financial or clinical advice, by instruction and by design.

If this changes

The description above is what the app does today, not a promise about every version of it forever. A future feature could need data to leave the device to work at all.

If that day comes, we will update this page with a new date, say plainly what is sent and why, and tell you inside the app before it starts. What we will not do is quietly widen what we collect and leave this page saying otherwise.

Contact

Questions about privacy go to privacy@burnmydesire.com and are answered by a person.