Rafa

Privacy policy

Nothing leaves your iPhone

Version 1, November 7, 2026. Applies to the Rafa the Giraffe app for iPhone and iPad and to this website.

I don't need to know who you are to help you.

In three lines

Who is responsible

Rafa the Giraffe is made by Rigel Rebolledo, independently. For any privacy question: hola@rafalajirafa.app.

What the app stores, and where

Your tasks and their steps, focus sessions, the reminders you turned on, your small wins, your name if you chose to give it during the welcome, and your settings. All of it is stored on your iPhone or iPad.

If you have Pro and turn on iCloud, the same data syncs between your devices through the private database of your Apple account (CloudKit). Only you and Apple can see that data; we have no way to access it.

To delete everything, Settings has "Start over". Deleting the app also deletes everything it stored on the device.

What leaves your device

When you ask the AI

"Where do I start" and "Break it into steps" work first on your device, offline. If AI is turned on in Settings, the app asks a language model for a second opinion. For that it sends only what the feature needs:

That information travels encrypted (HTTPS) to our server on Cloudflare (api.rafalajirafa.app) and from there to Anthropic, which runs the Claude model. Our server does not store the content of any request: it only counts how many hints were used. Anthropic processes the text to answer and keeps it for a limited time under its privacy policy (30 days in its standard configuration, to detect abuse); it does not use it to train its models.

Your name, Apple ID, device identifier, location or anything else that identifies you is never sent. You can turn off AI in Settings at any time and Rafa keeps working the same.

A random code to count hints

To know how many free hints remain per day and per month, the app generates a random code the first time it uses the AI. That code is not tied to your Apple ID, your device or you. The server stores it only as a digest (hash) next to the counters, which expire on their own: 2 days for the daily one, 35 days for the monthly one. If you delete the app, the code disappears and nothing links it to a new one.

If you buy Pro

Apple processes the purchase. We never see your name, card or address. So the AI knows you have Pro, the app sends our server the signed transaction receipt that Apple issues; the server verifies the signature and keeps the result for 24 hours. That receipt contains no payment data.

Notifications and reminders

Notifications are local: the app schedules them on your device. There is no notification server and nobody knows when you are reminded.

What there isn't

The only statistics we see are the ones Apple gives every developer in App Store Connect: downloads, and aggregated, anonymous data from people who chose to share it with developers in their iPhone settings.

This website

rafalajirafa.app is served by Cloudflare. The site uses no cookies, no analytics, and no fonts or resources from other domains. Cloudflare logs technical data about each visit (IP address, browser) for security under its privacy policy; we only look at it to keep the site running.

If you email us, your message stays in our inbox and is used only to reply to you.

Children

Rafa is rated 4+. We collect no data from anyone, children included.

Your rights

Since we hold no data about you, there is nothing to request or delete on our side: everything that exists is on your device and under your control. If you still want to ask something, write to hola@rafalajirafa.app and we will answer.

Changes

If this policy changes, the new version is published here with its date. If the change matters (for example, if anything beyond what is described here were ever to leave the device), we also say so inside the app before it happens.