About this policy
Delia is operated by Arshia Mashhadikordi (“Delia,” “we,” “us”), the developer named on our App Store listing and responsible for the personal information described here. This policy covers the Delia app and this legal and support website. You can contact us using the support button below.
Information stored by Delia
The app stores your chosen display name, onboarding answers, personal context, intentions, generated stories and images, affirmation favorites, journal and dream entries, mood ratings, practice progress, reference photos, preferences, and subscription-access status. Generated audio and other regenerable caches are stored locally on your device.
Private iCloud synchronization
When iCloud is available, durable app content can synchronize through Apple CloudKit in your private iCloud database. Apple operates that database under your iCloud account. Changes and deletions can propagate to your other devices. The app can use its local store when iCloud is unavailable; its sync status appears in Settings. Sign in with Apple inside Delia is separate from signing in to iCloud.
Optional account backup and restoration
If you choose Sign in with Apple, Delia uses Apple’s app-specific account identifier and any name supplied on first authorization to establish your account. Delia does not receive your Apple password. A private archive on Cloudflare infrastructure lets you restore your saved profile and durable content on another signed-in device.
The archive can include your personal context, intentions, stories and images, journals, dreams, photos, favorites, progress, and preferences. It excludes generated audio and other regenerable caches. Signing out retains the archive; use Delete Delia Data while signed in to request its deletion.
Cloud generation and personalization
When you request cloud features, Delia sends relevant information through its Cloudflare service to OpenAI for text or image generation and to Cartesia for narration. Depending on the feature, requests can include your name, onboarding answers, personal context, intentions, dream text, recent journal excerpts, story text, reference images, and voice settings. Network access is required.
The Settings option “Use journal entries to personalize your experience” is enabled by default. While enabled, recent journal excerpts can be included in requests for personalized stories and affirmations. You can turn it off to stop that use in future requests; this does not delete existing results or remove journals from an optional account archive.
Provider retention, security processing, and any permitted service or model improvement depend on the provider’s applicable terms and account settings. OpenAI states that API content is not used for model training by default. Cartesia’s published policy permits content use for model improvement unless limited by an applicable opt-out or agreement. We do not promise zero retention or that every provider excludes all content from training. See OpenAI’s business data terms and Cartesia’s privacy policy.
Avoid including sensitive information that is unnecessary for a feature, and only upload information and photos you have permission to use.
Subscriptions and purchase information
Apple processes purchases, payments, offer redemption, renewals, and refunds. Delia 1.1 verifies subscription access and restores purchases directly through Apple. Delia receives the product, transaction, access, and expiration information needed for these functions, not your full payment-card details.
Apple’s subscription server notifications are also configured to reach RevenueCat for subscription lifecycle records and reporting. RevenueCat may therefore process transaction and subscription information, including records associated with earlier app versions that used its SDK. Delia 1.1 does not use RevenueCat to decide access or send a new Sign in with Apple identifier to RevenueCat. Earlier versions used RevenueCat for access verification and could associate an app-specific derivative of the Apple sign-in identifier with subscription records. See RevenueCat’s privacy policy.
Invite rewards and offer codes
Delia’s Cloudflare service stores persistent app and referral identifiers, invite codes, inviter/invitee relationships, verified invite counts, reward and code assignments, and timestamps. Claims for individual campaign codes also use a hashed claimant identifier. These records let us allocate codes, show progress, enforce campaign limits, and prevent repeat or self-referrals. Apple verifies the redeemed offer before access is granted.
Public offer links that allocate individual codes use a secure first-party cookie to remember the code assigned to your browser for up to 180 days. Our Cloudflare service stores a hash of that browser identifier with the assignment. This cookie supports the offer you requested; it is not used for advertising or cross-site tracking. Clearing it or using another browser can prevent us from recognizing your earlier assignment.
Shared public Apple codes do not require a browser cookie or an individual code assignment. Apple handles their redemption limits and eligibility.
App and referral identifiers are stored in the device’s Keychain and can survive an ordinary uninstall and reinstall. They are not cleared by deleting a Delia profile. Referral and offer records are separate from the account archive and are not automatically removed by Delete Delia Data. Contact support about deletion of these records.
Delia does not read your address book or automatically message your contacts. You choose whether, where, and with whom to share an invite.
Photos, microphone, and reminders
Photos you select may be stored with your profile and included in requested image generation or account backup. If you use journal dictation and grant microphone and speech-recognition access, Apple’s speech-recognition service processes the recording to produce text; processing may occur on Apple’s servers. Delia does not save a separate dictation audio file. The resulting journal text is treated like other journal content.
Optional reminders are scheduled locally. Delia does not operate a push-notification server or receive reminder delivery events. You can change microphone, speech-recognition, and notification permissions in iOS Settings, and choose which photos to supply in the photo picker.
Support, diagnostics, and website operation
The app keeps local diagnostics for troubleshooting generation, purchases, and playback. When you send feedback, we receive your email, message, and the app/build, iOS version, and device type included in the message, plus any information you choose to attach. We use this to respond and investigate issues. Support correspondence is handled through Gmail.
Cloudflare processes network and security information such as IP addresses, request timing, and errors to deliver and protect Delia’s service. This website is hosted on GitHub Pages; GitHub logs visitors’ IP addresses for security. See Cloudflare’s privacy policy and GitHub’s privacy statement.
We do not sell personal information, show third-party ads, or track you across other companies’ apps and websites. This website has no advertising or third-party analytics scripts. Revealing the support address does not send an email; you choose whether to send one.
How and why information is used
We use information to provide requested features, personalize content, synchronize or restore saved data, verify paid access, administer offers, prevent abuse, provide support, and meet legal obligations. We share the information needed for those purposes with Apple, Cloudflare, OpenAI, Cartesia, RevenueCat, GitHub for website hosting, and Google for support email. We may also disclose information when legally required or necessary to protect rights and security.
Where UK or EEA data-protection law applies, our legal bases are performance of our agreement for requested services, legitimate interests in service security, fraud prevention and support, compliance with legal obligations, and consent where required for optional processing. Our providers operate internationally, including in the United States. Their applicable data-processing terms and transfer arrangements govern that processing; contact us for details about the safeguards applicable to your information.
Retention and security
Saved content remains until you delete it or the relevant account archive. Signing out retains the optional Delia account archive. Uninstalling alone does not necessarily erase content in iCloud or that archive. Referral and offer records can remain after profile deletion to preserve code assignments, enforce eligibility, prevent repeated claims, and resolve disputes. These records do not currently have an automatic expiry-based deletion schedule. Support correspondence and security records are kept as needed to resolve requests, protect the service, and meet legal requirements.
Apple and other providers may retain their own transaction, request, or security records under their policies. In-app deletion does not erase all such records. We use encrypted connections and access controls for our service, but cannot guarantee that any system is completely secure.
Your choices and rights
You can edit personal context, disable journal personalization, delete individual entries, or use Delete Delia Data in Settings. That action deletes your saved app profile and content; synchronized deletions can propagate to private iCloud. While signed in, it also requests deletion of your Delia account archive. Remote deletion needs a connection and may need to be retried if it fails. To remove an archive retained after signing out, sign back in first or contact support.
Deleting Delia data does not cancel an Apple subscription, erase Apple’s purchase history, or automatically clear retained referral records, Keychain identifiers, provider logs, and local diagnostics or caches. Manage or cancel subscriptions in Delia or your Apple Account settings.
Depending on your location, you may have rights to access, correct, delete, obtain a copy of, or restrict use of your information. You may object to processing based on legitimate interests and withdraw consent for future consent-based processing. Contact us to exercise these rights; we may need information to verify and locate your records. You may complain to your local data-protection authority, including the UK Information Commissioner’s Office.
Children
Delia is not directed to children under 13, or a higher minimum age required where they live. If you believe a child has supplied personal information, contact us so we can investigate and address it.
Changes to this policy
We will update the date above when this policy changes and provide further notice where required. A policy update does not replace any consent required by law.
Contact
Questions about this policy? Contact our support team below.