Privacy Policy
The app does not collect or transmit any personal data. Everything you enter is stored only on your device (you can optionally save an encrypted backup to a location of your choice - see the “Backup” section). The built-in AI model runs locally (on-device), and your wish wordings never leave the phone - except when you report a wording yourself with the “Report this wording” button: its text is then sent to the developer by email, and only as a result of your own action.
What data is processed, and where
- Your entries - wishes, thoughts for repetition, favorite affirmations and ideas, practice counters, settings - are stored locally in the app’s protected storage. The developer has no access to them.
- Entries are excluded from cloud backup in Android (Google Auto Backup): they are not uploaded to the cloud even by the system itself. In a direct transfer to a new phone (device-to-device, Android 12+) the data moves directly, bypassing the cloud; on older Android versions, use the encrypted backup to transfer it (see below).
- Accounts and registration - none.
- Analytics, trackers, ads, third-party data-collection SDKs - none.
- Advertising identifier (Advertising ID) - not used.
Internet access
The app’s only network request is downloading the AI model file
(~1 GB), and only when you start it explicitly in Settings. The primary source is the huggingface.co CDN. If it is unavailable (from some networks in Russia, for example), the app downloads the same file from a backup mirror on the developer’s server (files.krut.top). As with any web server, the source of the download - whether huggingface.co or the developer’s mirror - can technically see your IP address and the standard request headers. The app sends no data about you and no content from your entries; the file is simply downloaded (and additionally verified against its SHA-256 checksum). Even without the model, the app is fully functional (it uses the built-in rule engine).
Backup (optional)
At your explicit request (“Settings → Backup”), the app can export all your entries into a single encrypted file. Encryption is performed on the device before the file is saved: AES-256-GCM, with the key derived from your passphrase (PBKDF2-HMAC-SHA256, 600 000 iterations). You choose where to save the file in the standard Android dialog (device storage, Yandex.Disk, Google Drive, etc.). No one can read the contents of the file without the passphrase - neither the storage service you chose nor the developer. The passphrase is not stored anywhere: if you forget it, the data in the backup cannot be recovered. The developer never receives a copy of the file: the app has no server that would accept or store your backups.
AI model (generative AI)
Wordings are analyzed by a language model directly on the device. Input and results are not sent anywhere. You can report incorrect generated text using the “Report this wording” button on the result screen (which sends an email) or by writing to admin@krut.top.
Notifications
Practice reminders are local and are generated on the device; the app asks for the system notification permission to show them (Android 13+). No push servers are used.
Children
The app is not directed to children and contains no data collection mechanisms, including any collection of children’s data.
Deleting data
All app data can be deleted with standard Android tools: “Settings → Apps → Исполнение желаний → Clear data”, or by uninstalling the app.
Changes to this policy
If the policy changes, the updated version will be published at this same address with a new effective date.
Contact
Privacy questions: admin@krut.top
Privacy Policy - “Wish Fulfillment” (top.krut.wishes)
The app does not collect, store remotely, or share any personal data. Everything you enter (wishes, thoughts, favorites, counters, settings) is stored locally on your device and is excluded from Android cloud backup. There are no accounts, no analytics, no trackers, no ads, and no Advertising ID usage. An optional user-initiated backup exports your data as a single file encrypted on-device (AES-256-GCM, key derived from your passphrase via PBKDF2); you choose where to store it (e.g. Yandex.Disk or Google Drive) and nobody can read it without the passphrase - the developer never receives the file, and the app has no server that would accept or store your backups.
The only network request is downloading the on-device AI model file (~1 GB) at your explicit action; the primary source is huggingface.co, and if it is unreachable (e.g. from some networks in Russia) the same file is downloaded from a backup mirror on the developer’s server (files.krut.top). Whichever source is used sees your IP address as any web server does, but no personal content is ever transmitted - the file is merely downloaded and verified by its SHA-256 checksum. The AI runs fully on-device. Local reminders only.
To delete all data, clear the app’s storage or uninstall it. Contact: admin@krut.top