Privacy policy
Nothing leaves your iPhone
Version 1, November 7, 2026. Applies to the Rafa the Giraffe app for iPhone and iPad and to this website.
I don't need to know who you are to help you.
In three lines
- Rafa collects no data about you. No account, no email, no analytics, no ads.
- What you write is stored on your device. With Pro, also in your private iCloud, which we cannot access.
- The only thing that leaves your device is the text of the tasks you send to the AI, while it answers. It is not stored.
Who is responsible
Rafa the Giraffe is made by Rigel Rebolledo, independently. For any privacy question: hola@rafalajirafa.app.
What the app stores, and where
Your tasks and their steps, focus sessions, the reminders you turned on, your small wins, your name if you chose to give it during the welcome, and your settings. All of it is stored on your iPhone or iPad.
If you have Pro and turn on iCloud, the same data syncs between your devices through the private database of your Apple account (CloudKit). Only you and Apple can see that data; we have no way to access it.
To delete everything, Settings has "Start over". Deleting the app also deletes everything it stored on the device.
What leaves your device
When you ask the AI
"Where do I start" and "Break it into steps" work first on your device, offline. If AI is turned on in Settings, the app asks a language model for a second opinion. For that it sends only what the feature needs:
- To sort: the text of your tasks for today, whether they are marked important, whether they have a time, how many days they are overdue, how many focus minutes they have, and the local time.
- To break into steps: the text of that one task.
That information travels encrypted (HTTPS) to our server on Cloudflare (api.rafalajirafa.app) and from there to Anthropic, which runs the Claude model. Our server does not store the content of any request: it only counts how many hints were used. Anthropic processes the text to answer and keeps it for a limited time under its privacy policy (30 days in its standard configuration, to detect abuse); it does not use it to train its models.
Your name, Apple ID, device identifier, location or anything else that identifies you is never sent. You can turn off AI in Settings at any time and Rafa keeps working the same.
A random code to count hints
To know how many free hints remain per day and per month, the app generates a random code the first time it uses the AI. That code is not tied to your Apple ID, your device or you. The server stores it only as a digest (hash) next to the counters, which expire on their own: 2 days for the daily one, 35 days for the monthly one. If you delete the app, the code disappears and nothing links it to a new one.
If you buy Pro
Apple processes the purchase. We never see your name, card or address. So the AI knows you have Pro, the app sends our server the signed transaction receipt that Apple issues; the server verifies the signature and keeps the result for 24 hours. That receipt contains no payment data.
Notifications and reminders
Notifications are local: the app schedules them on your device. There is no notification server and nobody knows when you are reminded.
What there isn't
- No analytics or usage measurement inside the app.
- No third-party tools: no crash reporting, no advertising, no social networks.
- No tracking across apps or websites.
The only statistics we see are the ones Apple gives every developer in App Store Connect: downloads, and aggregated, anonymous data from people who chose to share it with developers in their iPhone settings.
This website
rafalajirafa.app is served by Cloudflare. The site uses no cookies, no analytics, and no fonts or resources from other domains. Cloudflare logs technical data about each visit (IP address, browser) for security under its privacy policy; we only look at it to keep the site running.
If you email us, your message stays in our inbox and is used only to reply to you.
Children
Rafa is rated 4+. We collect no data from anyone, children included.
Your rights
Since we hold no data about you, there is nothing to request or delete on our side: everything that exists is on your device and under your control. If you still want to ask something, write to hola@rafalajirafa.app and we will answer.
Changes
If this policy changes, the new version is published here with its date. If the change matters (for example, if anything beyond what is described here were ever to leave the device), we also say so inside the app before it happens.