Prizma

Privacy Policy

Last updated: 10 July 2026

Prizma sends the text of your question to a third-party AI service, OpenAI, so that it can write your answer. We ask for your permission before the first question is ever sent, and nothing leaves your device until you agree. You can withdraw that permission at any time in Settings. We have no analytics, no trackers and no advertising, and your chats are stored only on your device.

1. The AI service: what is sent, and to whom

Prizma turns a question into a visual infographic. It cannot do that on the device, so the question is sent to OpenAI, L.L.C. (United States), which generates the answer.

What is sent

Nothing else is sent. Your question is not accompanied by your name, your email address, your account identifier, your device identifier, your location, or your other chats. OpenAI receives an anonymous request that cannot be linked back to you by us or by them.

How it is sent

The request travels over an encrypted connection to a server we operate (Google Cloud Functions, in the Firebase project prizma-monogram-ai), which holds the OpenAI API key so that the key is never shipped inside the app. That server passes the question straight to OpenAI and streams the answer back to you. It does not log, store or retain your question or the answer.

Your permission

Before your first question is sent, Prizma shows you a screen naming OpenAI, listing exactly what will be sent, and asking you to agree. Until you agree, no question is transmitted. If you decline, the app remains usable and simply does not produce AI answers. You may turn the permission off later under Settings → AI answers, and transmission stops immediately.

What OpenAI does with it, and the protection it owes you

OpenAI processes your question for one purpose only: to generate the answer that is returned to you. Under the OpenAI API terms that govern our use of the service, data submitted through the API is not used to train OpenAI's models. OpenAI is contractually bound to protect that data to a standard equal to the one described in this policy, to use it only to provide the service to us, and not to sell it or disclose it. OpenAI may retain API requests for a limited period for abuse monitoring, after which they are deleted. OpenAI's own policy: openai.com/policies/privacy-policy.

2. What never leaves your device

3. Everything we and our providers collect

DataHow it is collectedWhyWho receives it
The text of your question and your language You type or dictate it; sent only after you consent To generate your answer. Not stored, not logged, not used for training OpenAI, L.L.C., via our own server
Account identifier, and email address if the provider releases it Only if you choose to sign in with Apple or Google So the app can recognise you across launches and devices Firebase Authentication (Google LLC)
Subscription status, tied to an anonymous identifier Only if you buy a subscription So the app knows whether your subscription is active, and can restore it Apple, and RevenueCat, Inc.
Crash and delivery data Collected by Apple, not by us App distribution and stability, governed by Apple's own policy Apple

We do not collect analytics, usage statistics, advertising identifiers or any cross-app tracking data. We do not ask for App Tracking Transparency permission because there is nothing we would track you with. We never sell your data, and we never use it for advertising or marketing.

4. Third parties, and the protection they owe you

We share data only with the four providers named above, only for the purposes named above, and only to the extent needed to run the app. Each is bound by a contract or by its published terms to protect your data to the same or an equal standard as this policy requires, to process it only on our instructions, and not to sell it or repurpose it.

5. Retention

We keep no record of your questions or answers at any time. Your chats live on your device until you delete them. An account identifier, if you created one, is kept until you delete your account. Subscription records are kept by Apple and RevenueCat for as long as the law requires them to keep billing records.

6. Children

Prizma is not directed to children under 13, and we do not knowingly collect their data.

7. Your rights

From inside the app you can withdraw your AI permission (Settings → AI answers), delete any chat, and delete your account and everything attached to it (Settings → Delete account). Because we hold nothing about you beyond an optional account identifier, there is nothing further to export or erase on our side. Depending on where you live you may also have the right to access, correct or complain to a supervisory authority; write to us and we will help.

8. Changes

If we ever change what is sent, who it is sent to, or why, we will update this page and ask for your permission again inside the app before the new sharing begins.

9. Contact

Questions about privacy? Email monogram@prizma.app or use our support page. The data controller is Monogram Ai.