Caipher Privacy Policy

Last updated: October 12, 2026

This policy explains what the Caipher iOS app collects, why, who processes it, how long it's kept, and the choices you have. Caipher is made by Madigan Technologies LLC, a Florida company ("we", "us"). Questions: support@madigantechnologies.com.

1. Who we are

Caipher helps TikTok Shop affiliate creators manage brand deals in their email, appeal violations, write video scripts, understand their TikTok and TikTok Shop results, and get answers from an AI assistant. Caipher is for people 18 and older.

2. What we collect

• Your account: your email address, your name if you add it, your sign in details (handled by our sign in provider; we never see your Apple or Google password), your time zone and the content category you choose.
• What you create in Caipher: violations and appeals, brands and brand contacts, scripts, deals and drafted replies, your rates and media kit choices, questions you ask and their answers, and feedback you send.
• Photos, screenshots and video frames you attach (section 5).
• Gmail data, if you connect Gmail (section 3).
• TikTok data, if you connect TikTok (section 4).
• Your TikTok Shop numbers, if you add them (section 4.6).
• Speech you dictate: turned into text on your phone by Apple; we receive only the text.
• Subscription status: your plan and renewal date, from Apple through our subscription provider. We never see your payment details.
• Usage records for AI features: how many AI answers you use, for your plan's limits and to prevent abuse. These records hold counts, not the content of your questions.

3. Gmail

Caipher can connect to your Gmail through Google's official sign in, so it can find the brand offers in your inbox. Connecting is optional, and you can disconnect at any time.

3.1 What we read

Caipher asks Google for one Gmail permission: read only access to your email (gmail.readonly). Google shows you this permission before you allow it. When you first connect, Caipher reads your inbox from the last 90 days, then new mail as it arrives:

• the senders and recipients, the subject, the message text and the date;
• whether each message is read, and the names and types of its attachments.

We don't open or store attachments. Caipher can't send, delete, label, or change anything in your Gmail. Receipts, newsletters and notifications are recognized without AI and aren't sent to our AI provider.

3.2 How we use it

• Find the offers: spot which emails are brand partnership offers.
• Read the details: each offer's payment amount, deliverables and deadline.
• Label and rank them: offer type, priority, fit with your niche, a short summary, whose move it is, and whether the deal is closed (for example, moved to WhatsApp).
• Save a brand: fill in a brand's contact details from that brand's emails to you, for you to review before anything is saved (section 6).
• Answer questions about your offers, when you ask Caipher.
• Draft replies: you read them, edit them and send them yourself. Caipher never sends email for you.

Mail you forward to your Gmail. If you forward another email account (for example Proton, Outlook, iCloud or Yahoo) to the Gmail you connected, Caipher reads that forwarded mail like the rest of your Gmail. If you add your other email addresses in Inbox setup, Caipher saves them in your account so it can tell your own replies from a brand's, and read a forwarded email as coming from the brand that sent it. Forwarding is set up in your other provider, never by Caipher, and Caipher gets no access to that account.

3.3 Who we share it with

• Anthropic, our AI provider, receives the relevant email text to label offers, draft replies, fill in brand details and answer your questions. Anthropic processes it to return a result and doesn't use it to train its models.
• Supabase, our database host, stores your synced emails, Caipher's labels and your drafts.
• No one else. We don't sell Gmail data, use it for advertising, or share it with data brokers.

3.4 Limited Use

Caipher's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide and improve the Inbox features above; transfer it only to provide them, to comply with the law, for security, or as part of a merger or acquisition with notice to you; never use it for advertising; don't let people read it unless you ask us to, for security or abuse investigations, or when the law requires it; and don't use it to develop, improve or train generalized AI or machine learning models.

3.5 How long we keep it

• While Gmail is connected: your synced emails, labels and drafts, so your Inbox works.
• Disconnect Gmail (Settings, Gmail, Disconnect Gmail): Caipher asks Google to revoke its access and deletes its access keys from our servers at once. You choose to delete your synced email now, or keep it for 30 days in case you reconnect. After 30 days without a reconnection, it's deleted automatically, with its offers, drafted replies and linked posted videos.
• Remove Caipher in your Google account (myaccount.google.com/connections): Caipher can't read new email. To delete what was already synced, disconnect in Caipher or write to us.

4. TikTok and TikTok Shop

Caipher can connect to your TikTok account through TikTok's official Login Kit. Connecting is optional, and you can disconnect at any time.

4.1 What we read from TikTok

TikTok shows you the permissions Caipher asks for, and you can turn off the optional ones. We read only what you allow:

We don't read your private videos, messages, drafts or your followers' identities. Caipher can't post, comment, like, or change anything on TikTok.

4.2 Why we use it

• To show your profile and stats, and fill in your name and username in Caipher if you haven't.
• To suggest your main content category from your recent video titles and hashtags (you accept, change or dismiss it).
• To track your growth: once a day, Caipher saves your follower, following, like and video counts.
• To show your top videos and, on plans that include them, your best times to post and the patterns in your recent videos.
• On plans that include it, to give AI advice and write scripts that use your real numbers.
• To build your media kit, a page in Caipher showing what a brand would see. It isn't shared with anyone.
• On plans that include it, to spot when a video you posted mentions a brand you have a deal with, so you can mark the deal as posted and see a campaign report. Nothing is linked unless you confirm it.

4.3 AI processing

To suggest your content category, Caipher sends Anthropic the titles of up to 20 of your recent public videos and their hashtags, once. On plans that include TikTok coaching, a short summary of your TikTok numbers built on our servers (top videos, best time and length, posting by month) goes with your questions and scripts; it isn't saved. Your TikTok sign in tokens, account identifier and profile photo are never sent. This happens only after you've agreed to Caipher's AI data use.

4.4 What we keep, and for how long

4.5 Removing it

• Disconnect TikTok in Caipher: Caipher asks TikTok to revoke access and deletes your TikTok tokens, profile, stats, daily history, unaccepted category suggestion, linked deal videos and media kit video picks at once. Your deals keep their Posted status.
• If TikTok access ends (you remove Caipher in TikTok's settings, or TikTok stops accepting the connection): the tokens are deleted at once, and if you don't reconnect within 30 days, the rest of your TikTok data is deleted automatically.

4.6 Your TikTok Shop numbers

What Caipher remembers about your shop. When you add TikTok Shop screenshots, in Ask or in Settings, Caipher reads the numbers on them (sales, commissions, items sold, views, clicks and your top products and videos) and saves those numbers, never the screenshots. A number that isn't on the screenshot is never saved. When you set up your shop, Caipher saves your answers (how you film, your niche, your goals and the ranges you choose). When you add your best videos, Caipher saves a short breakdown of how each is made (its hook, format, length and pacing), never the video or its words. Caipher uses all of this only to personalize your answers, scripts and insights. To read screenshots and videos, Caipher sends them (still frames, for videos) to Anthropic, which doesn't use them to train its models.

Through TikTok Shop's official API. Caipher doesn't connect to TikTok Shop's API today. If you connect your TikTok Shop account once Caipher offers it, Caipher will read only the creator performance data you authorize (such as GMV, commissions, items sold and product and video performance), keep it in the same place and the same way as the numbers above, use it only to provide your insights, coaching and scripts, never sell it or use it for advertising, and delete it within 30 days of you disconnecting or revoking access. We'll update this section before that connection is offered.

You can see, change or delete any of your shop data in Settings, What Caipher knows, and it's deleted with your account.

5. Photos, screenshots and video frames

• Every photo you attach (Ask, violations, feedback) is saved again as a new picture on your phone before it's sent, which removes its location and other hidden details.
• In Ask, you can attach up to 15 photos or screenshots to a question. They're sent to Anthropic with your question and kept with that conversation so you can see them in your history, until you delete the conversation or your account.
• Videos you attach in Ask. Caipher takes a few still pictures from the video on your phone (up to 8, evenly spaced) and sends those with your question. The video itself and its sound are never sent or stored. The pictures are kept with that conversation, the same as your other Ask conversations.
• Product screenshots for scripts. Sent to Anthropic to read the product's name, features, price, offer and claims, then discarded: Caipher doesn't store them. The details you confirm are saved with that script.
• Videos you attach to scripts. Up to 8 still frames are sent to read the product's details or, if you choose Reference style, how the video is put together (never its words). The video and its sound never leave your phone, and the frames aren't stored.
• Screenshots you add to fill in a brand are used only to read them and aren't saved.
• Violation screenshots are stored with that violation until you delete it or your account.

6. Brands you save

A brand you save can include details about the people you deal with there: a contact's name, email address, WhatsApp or phone number, and the brand's TikTok handle, TikTok Shop link, website, products and rates. These come from what you type, from that brand's emails to you, or from a message or screenshot you add. Caipher fills in only what the email, message or screenshot actually says, never looks brands up on the web or on TikTok, and saves nothing until you tap Save. Caipher never contacts the people in your brand list and never shares their details except with our service providers. Brand details stay until you delete the brand or your account. If you're a brand contact and your details are in a creator's Caipher account, ask us at support@madigantechnologies.com and we'll remove them within 30 days.

7. AI features and your consent

Caipher's AI features are provided by Anthropic. Before you use them, Caipher asks you to agree to how your data is used for AI. Requests go through Caipher's own servers, which check your account and limits, then to Anthropic. Anthropic uses what it receives only to return a result, doesn't use it to train its models, and deletes it within 30 days (longer only if it's flagged for a policy violation).

8. Feedback you send

When you send feedback from Settings, Caipher saves your message and any screenshots you add, and emails them to our support inbox so we can read and answer it. The email includes your message, your plan, the app version, your account email and links to your screenshots that stop working after 72 hours. It's sent through Resend, the service that sends Caipher's emails.

9. What we don't collect or do

No third party analytics, advertising networks, tracking technologies, advertising identifiers or location data. We never sell your data or share it with advertisers or data brokers.

10. Service providers

• Supabase: sign in, database, file storage and our servers. Your data is stored in the United States (Amazon Web Services, Oregon).
• Anthropic: AI processing (section 7).
• Google: Gmail (if you connect it) and Sign in with Google.
• TikTok: your TikTok data (if you connect it).
• Apple: Sign in with Apple, dictation, the App Store and in-app purchases.
• RevenueCat: manages your subscription status (no payment details).
• Resend: sends sign in codes, password reset codes and feedback notices; its records are stored in the United States.
• Cloudflare: our domain's DNS, and the page that hands TikTok's sign in back to the app (it passes only a one time code and stores nothing).

Requests may pass through these providers' global networks on the way.

11. How long we keep your data

Deleting your account (Settings, Delete account) revokes Caipher's Gmail and TikTok access and deletes your data and files at once; anything a failed deletion leaves behind is removed by a daily check, so everything is gone within 30 days (backups roll off within 7 more). You can also ask us by email, and we'll complete it within 30 days.

12. Data security

• Every connection between the app, our servers and our providers is encrypted (HTTPS).
• Your data is encrypted at rest by our hosting provider. Your Gmail and TikTok access tokens are additionally encrypted with AES-256 using a key kept in a separate secure vault, and are stored only on our servers, where the app itself can't read them.
• Access rules let only your own account read your data.
• On your iPhone, Caipher keeps your sign in in the iOS Keychain. The app contains no secret keys.
• No system is completely secure. If an incident affects your personal data, we'll tell you without undue delay and within the time the law requires.

Report a security issue: support@madigantechnologies.com, with "Security" in the subject.

13. Your choices and rights

• Disconnect Gmail or TikTok; see, change or delete what Caipher knows about your shop (Settings, What Caipher knows); delete any item you created; delete your account.
• Ask us for a copy of your data, or to correct or delete it, at support@madigantechnologies.com. We'll answer within 30 days.
• Depending on where you live, laws such as the GDPR or the CCPA may give you more rights. Contact us to use them.

14. Age requirement

Caipher is for people 18 and older. If we learn we have information from someone under 18, we delete it.

15. Changes to this policy

When we change this policy, we update the date at the top and, for significant changes, tell you in the app. If Caipher starts reading more from Gmail, TikTok or TikTok Shop, we'll update this policy first and ask for the new permission on that service's own consent screen before reading anything new.

16. Contact

Madigan Technologies LLC, Florida, United States. support@madigantechnologies.com