Legal
Where your data lives
The iPhone app, plainly: what it asks for, why, and how to take it all back.
This page covers the Keleinik app for iPhone, published by CITRUSTACK LLC. The app is a second door into the assistant you already have: the same conversation, the same reminders, the same memory as your Keleinik in Telegram. Our main privacy policy governs the service as a whole and applies here too; this page says what is true of the phone in particular.
What the app sends us
- Who you are. Your name and email address, from Sign in with Apple, Sign in with Google, or an email and password you choose. If you use Apple’s Hide My Email, we only ever see the relay address, and that is enough — we never need your real one.
- What you say to your assistant. Your messages, and any photo, voice note or file you attach, so that it can answer you. These join the same private transcript your Telegram chat writes to.
- What you ask it to remember. Parish notes and memory files you save from the Memory screen.
- Your reminders — what to be reminded of, and when.
- A notification token for this phone, if you turn notifications on, so a reminder can reach you here as well as in Telegram.
What the app does not do
- No tracking. The app contains no advertising, no analytics SDK and no third-party tracker. It talks to our server and to Apple’s and Google’s sign-in services, and to nothing else. It never asks to track you across other companies’ apps, because it has nothing to do with the answer.
- No location. The app never asks for it and never reads it.
- No contacts, no calendar, no health data.
- Nothing is sold. Not your messages, not your address, not anything else — to anyone, ever.
- Not training data. What you tell your assistant is not used to train anyone’s models.
The permissions it asks for
Each one is asked for at the moment you first do the thing that needs it, never at launch, and the app works without any of them.
- Photos — only when you attach a picture to a message. The app reads the one picture you pick. It does not browse your library, and it does not add anything to it.
- Camera — only when you choose to take a picture to send. Nothing is captured outside that moment.
- Microphone — only while you record a voice message for your assistant. Nothing is recorded in the background; the app records nothing once it is off the screen.
- Notifications — only if you say yes to the offer the app makes, and used only for your own reminders. Declining costs you nothing: your reminders still arrive in Telegram.
How your words are answered
Your assistant runs on our server, not on your phone. To answer you, the relevant part of your conversation and memory is sent to our AI provider, Anthropic, which processes it to generate the reply and does not use it to train its models. Your transcript is yours: it is not pooled with other priests’ and is not read for any purpose other than answering you.
Sign in with Apple and Sign in with Google
Both hand us an identity token that proves the address is yours. We keep the address and your name, and nothing else. Sign in with Apple’s nonce is generated on your phone and checked on our server, so the token cannot be replayed by anyone who intercepts it. Signing in with Google here grants no access to your Gmail — connecting a mailbox is a separate, optional step that lives on the website and is described in the main policy.
What is kept on the phone itself
Your sign-in tokens are held in the iOS keychain, encrypted by the system and readable only by this app. Alongside them the app keeps a few small preferences — your theme, and whether you have already said “not now” to notifications. Signing out clears the tokens. Deleting the app removes everything it held.
Subscriptions
While Keleinik is in free beta the app sells nothing at all. When subscriptions do open, the purchase is made through Apple: Apple takes the payment and tells us only that a subscription exists. We never see your card, and we are never sent your billing details. All we store is the transaction identifier Apple gives us and whether it is currently paid.
Deleting your account
From Profile → Delete account, in the app, in two taps. It deletes your account and the content that belongs to it — your transcript, your memory files, your reminders, your notification tokens — and it is not reversible. You do not have to write to us, and there is no form to fill in. If you would rather we did it, write to [email protected].
Children
Keleinik is made for clergy and adults. It is not directed to children under 13, and we do not knowingly collect their data.
Changes
If this page changes materially, the “Last updated” date above changes with it.
Contact
CITRUSTACK LLC · [email protected] · Support · Terms of Service