Privacy Policy

1. Who is responsible

This policy is provided by Aloha Gems LLC ("Aloha Gems", "we", "us"), the developer of the Text2Store app (the "App") and operator of the website at text2store.com (the "Site"). For website and purchase data, Aloha Gems is the data controller. For data processed entirely on your own computer by the App, you control that data; it never reaches us.

2. The app: your data stays local

When you use Text2Store to back up an iPhone, the backups, messages, contacts, attachments, and any exports you create are stored locally on your computer, in a location you choose. Specifically:

• Reading, searching, and exporting your own data requires no account and no login. Signing in (Section 4) unlocks paid features; it is not needed to open a backup.
• The App does not transmit your messages, contacts, attachments, or backups to Aloha Gems or to any third party as part of its core backup, browsing, search, and export features.
• Exports you create (CSV, TXT, PDF, or verified .zip) are written to your computer or wherever you save them. What happens to a file after you export and share it is up to you.
• Deleting the App does not delete the backups you created; those files remain on your computer until you remove them.

Because this data never leaves your device through the App, we cannot access it, and we cannot retrieve or delete it for you.

Keeping your backups safe. Backups you create stay on your computer under your control, and a backup of an encrypted iPhone stays encrypted under your backup password. For everything else we recommend keeping backups on an encrypted volume, such as FileVault on a Mac or BitLocker on Windows, or on an encrypted external drive. If your computer is lost or stolen, that encryption is what protects the backup; we cannot remotely delete it for you.

Use it on data you're entitled to. Text2Store is for reading your own iPhone backups. Only use it with backups and message data you have the legal right to access.

3. Optional AI features

Text2Store may offer optional AI-assisted features: conversation summaries, and Ask Your Messages. These are off unless you use them:

• AI summaries (optional): Text2Store can summarize a conversation for you. Only after you confirm the specific action, the App sends that one conversation's content to Google Gemini (Google Cloud's Vertex AI) to generate the summary. That request passes through our own service, which relays it to Google and does not store or log your message content; it counts usage only. Google does not use your content to train its models and does not store it after answering. Summaries are assistive and are never part of a verified export. You confirm each conversation before it is sent; nothing is sent automatically.
• Ask Your Messages (optional): Text2Store can answer questions about your archive. The search index this feature uses is built entirely on your computer: turning it on and indexing an archive sends nothing anywhere, and the index is stored only on your computer and is deleted when you delete the archive or turn the feature off. When you ask a question, the App sends the question, the recent questions and answers from the same session, and short excerpts of the messages and attached documents it retrieved as relevant (for an archive-wide question, excerpts from up to eight conversations) through our own service to Google Gemini to compose the answer. The same rules as summaries apply: our service relays without storing or logging your content and counts usage only, and Google does not store your content or use it to train models. Answers are assistive, carry citations so you can check them against your own messages, and are never part of a verified export.

What our service records about AI usage. So we can meter AI features and estimate costs, our service keeps two things per account: a credit ledger (each grant from a purchase and each summary or question you spend, with the date) and a running monthly total (your email address, the month, how many requests you made, how much text they contained, and how many were declined). Credits do not expire, so the ledger is kept for as long as your account exists. Neither record contains any part of your messages.

Your consent. AI features are processed on the basis of your explicit consent. They are off unless you use them. For summaries, the App asks you to confirm each individual conversation before any of its content leaves your computer. For Ask Your Messages, the App asks once per archive, before your first question, in a dialog that explains what each question sends; you can withdraw that consent at any time in Settings, which also deletes the index. You can decline at either point, and you can stop using the features at any time without affecting the rest of the App.

4. Sign-in & licence checks

To unlock paid features, you sign in with the email you used at purchase. The App asks our licensing service to email you a short sign-in code; when you enter it, this computer is signed in. During sign-in, and periodically afterward to confirm your licence is still valid, the App sends an account credential for this computer and an anonymous computer identifier: a one-way cryptographic hash, not your computer's name, serial number, or anything readable. It does not send your messages or backup content. We keep a record of which computers have signed in so we can spot abuse (for example, shared access); we don't limit how many of your own computers you sign in on.

5. The website

When you visit text2store.com, we collect limited, standard information to operate and improve the Site:

• Server & hosting logs. The Site is hosted on GitHub Pages; the host may process your IP address and request metadata to deliver pages and protect against abuse.
• Analytics. We use Google Analytics to understand aggregate traffic (pages viewed, approximate location, device/browser type, referring source). This uses cookies or similar technologies and involves Google as a processor. We use this only in aggregate to improve the Site, not to identify you personally.

You can block cookies in your browser or use tracking-prevention/opt-out tools; the Site remains usable without analytics.

6. Purchases & checkout

From a completed order, we receive limited details (such as your email address, the product purchased, order/receipt identifiers, licence status, and country) so that we can sign you in, keep paid features working, provide support, honor refunds, and keep basic sales records (including for tax and accounting). Text2Store is a one-time purchase, so there is no recurring charge and no stored payment method on our side.

7. Email & support

If you email us (for example at hello@text2store.com) or ask to be notified at launch, we receive your email address and whatever you include in your message, and we use it only to respond, provide support, or send the one launch notice you requested. We don't run a newsletter and we won't add you to marketing lists you didn't ask for.

8. Why we process data

We process the limited data above to: provide and secure the Site; sell and deliver licenses and provide support; comply with legal, tax, and accounting obligations; and understand and improve our product. Where required by law, our legal bases are performance of a contract (fulfilling your order and support), legitimate interests (running and improving the Site and preventing abuse), consent (analytics cookies, where consent is required), and legal obligation (tax and record-keeping).

9. Who we share data with

We do not sell your personal data. We share limited data only with service providers who help us operate, acting as our processors or, where noted, as independent controllers:

Paddle (Paddle.com Market Limited)

Merchant of Record and payment processing for purchases.

Google (Google Analytics)

Aggregate website analytics.

GitHub (GitHub Pages)

Website hosting and delivery.

Email provider

Delivering and receiving support and notification email, including your sign-in code.

Cloudflare

Runs our licensing and AI service (sign-in, licence checks, and relaying AI summary and Ask Your Messages requests). It does not store your message content.

Google Cloud (Vertex AI)

Generates the AI summaries and Ask Your Messages answers you request, using the Gemini model. It receives only the content of a summary you explicitly confirm or a question you ask (with the excerpts retrieved for it), processes it under Google Cloud's terms, and does not use it to train models or store it.

We may also disclose data if required by law or to protect our rights, and we may transfer data as part of a business sale or reorganization, subject to this policy.

10. Data retention

Our licensing and AI-summary service deletes data automatically on this schedule:

• Sign-in codes: deleted as soon as they expire (they last ten minutes).
• Signed-in computers: forgotten after 180 days with no activity. You can simply sign in again.
• AI usage totals: kept for 13 months.
• Account and licence records: kept while your licence is active. A one-time licence does not expire, so these are kept until you ask us to delete them or request a refund. An account that holds no licence, has no remaining credits, and has gone 12 months without being used is deleted automatically.

We do not retain logs of your requests to that service. We keep order and support records as long as needed to meet legal, tax, and accounting requirements, which can be longer than the periods above; Paddle keeps its own order records under its policy. Analytics data is retained per our analytics provider's settings. Data that lives only on your computer (your backups and exports) is retained by you, under your control, until you delete it.

11. Security & automated decisions

All communication between the App and our licensing and AI-summary service uses HTTPS. Sign-in codes are stored only as one-way hashes and expire after ten minutes. The credential that keeps this computer signed in is stored only as a hash on our side, and on your computer it is held in your operating system's keychain (Keychain on macOS, Credential Manager on Windows) rather than in a plain file. No security measure is perfect, but we keep so little that there is very little to lose.

Text2Store does not use automated decision-making or profiling. AI summaries describe a conversation you selected; they are not used to make any decision about you, and no decision about your account is made automatically.

12. Your rights

Depending on where you live (for example under the EU/UK GDPR or the CCPA/CPRA in California), you may have the right to access, correct, delete, or receive a copy of the personal data we hold about you, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email hello@text2store.com. We do not sell or "share" personal data for cross-context behavioral advertising. For payment data held by Paddle, you may also contact Paddle directly. You have the right to complain to your local data-protection authority.

13. International transfers

We and our providers may process data in countries other than yours, including the United States. Where required, our providers rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

14. Children

Text2Store is not directed to children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

15. Changes

We may update this policy from time to time. We'll revise the "Last updated" date above and post the new version here; material changes take effect when posted.

16. Contact

Questions or requests about your privacy? Contact us:

Aloha Gems LLC
Email: hello@text2store.com