LeadFlip Privacy

The Witness

The Witness is a weekly letter about your week. It is off by default, and when you turn it on you choose where it is written:

• On this device first. On iPhones with Apple Intelligence, the letter — and a short nightly note after you close the day — are written by Apple's on-device model. Nothing leaves your phone. This is the default. If on-device writing isn't available, the app composes a simpler letter from a template, unless you have allowed Anthropic's Claude (below).
• Only ever on this device. The same, and the app will never send anything, even if you have allowed Claude.
• Anthropic's Claude. Claude, an AI model made by Anthropic, writes every letter.

Claude needs your permission. Before anything is sent, the app asks in a screen that names Anthropic and Claude and says what is sent; the setting "Allow Anthropic's Claude" stays off until you choose Allow Claude there. Turning the weekly letter on is not that permission. Once you allow it, the app sends a digest of the week to a server operated by Apex Made, which passes it to Anthropic's Claude API to write the letter and returns the letter to your phone. You can turn "Allow Anthropic's Claude" off at any time in Settings → The Witness.

What the digest contains: your Enneagram type, wing, and instinct; for each day of the week, your morning naming (the prompt, the pattern it belongs to, and what you wrote), your evening catch response and its optional note, the day's Try-This card title and your response, the reason that day's card was chosen, and your day rating; your follow-through counts for the week; the titles of saved cards you've marked "still landing" or "not anymore"; the conversations you prepped for and how the debrief went, with any debrief note you wrote; the titles and themes of your last four letters; and the closing question from the previous letter.

What it never contains: your journal entries, your name, your email, the names or types of the people you add, your calendar or any event title, your device identifiers, or anything else on your phone. Before you allow Claude, Settings → The Witness → What we send shows you the exact request the app would send for the current week, built from your real data.

How Claude letters are handled

• Requests carry an anonymous per-install identifier used only to limit how many letters each install can request per week. It is not linked to your Apple ID or to anything else about you.
• Apex Made's server does not store the digest or the letter. It processes the request and returns the result. Its logs record the week, your type number, how many days had activity, the model, and timing — never the text you wrote or the letter.
• Anthropic processes the digest under its commercial API terms. Anthropic does not use API inputs or outputs to train its models. See Anthropic's privacy policy for its retention practices.
• The finished letter is stored on your device and in your private iCloud, like everything else.
• Turning the Witness off, turning "Allow Anthropic's Claude" off, or choosing "Only ever on this device" stops all sending immediately on every device signed into your iCloud. Letters you already have stay on your device until you delete them in Settings.
• Every letter written by Claude or Apple Intelligence, and every nightly note, has a Report link that opens an email to hello@apexmade.ai with the text, who wrote it, and the app version. Nothing is sent unless you send that email.

People and Prep me

If you add people (a name, an Enneagram type, and optionally a wing, instinct, and role) to prepare for conversations with them, that information is stored on your device and in your private iCloud only. It is never sent to Apex Made or included in any Witness digest.

Calendar (optional)

If you turn on "Watch my calendar" under Prep me, the app reads the titles and times of upcoming events on your device to offer a prep card before something that looks like a 1:1, review, or feedback conversation. Event titles are used only on your phone and are never sent anywhere. If you accept a prep for a calendar event, its title is saved with that prep on your device and in your private iCloud so you can see what it was for, and the app remembers the match so it can offer the same prep next time. You can turn calendar access off at any time in the app or in iOS Settings, which also clears what it remembered.

LeadFlip Pro

LeadFlip Pro is an in-app purchase handled by Apple. Apex Made receives no payment details; Apple provides only what is needed to confirm your purchase status on your device. Your purchase status is stored on your device so the app can work offline. See the subscription terms for billing details.