Cue privacy policy
Without the writing assistant, nothing leaves your iPhone. With it, only the text you hand it goes off to be rewritten.
Last updated: 27 August 2026
The short version
- Cue works without an account. There is nothing to create, nothing to connect.
- Your scripts, your takes and your settings stay on your iPhone and are sent nowhere.
- One single feature leaves the device: the writing assistant, and only when you call on it.
- No advertising, no trackers, no analytics, no data resold. The app never asks permission to track you across apps.
- A button in the settings deletes everything, on the device and on the server side.
Who is responsible
Cue is published by Teddy Verneuil, sole trader
14 bis rue Magellan, 56860 Séné, France
SIRET 792 687 576 00043
Contact: [email protected]
He is the data controller within the meaning of the General Data Protection Regulation (GDPR).
What stays on your iPhone
Everything, by default: your scripts and their contents, your folders and tags, your video takes and their audio, the thumbnails and audio previews, your playback and camera settings, the pace measured by the speed test.
This data lives in a database and files on your device, backed up along with it if you use Apple's backup. I have no access to it. Deleting the app deletes this data; it is recoverable only from a backup of your iPhone.
What leaves, and only when you use the assistant
When you ask Cue to shorten, lengthen, rewrite, change the tone or write from a topic, the following is transmitted:
- the text of the script concerned, or the topic you typed;
- the action requested, the target duration, the chosen tone, the pace in use;
- the subscription receipt signed by Apple, used to verify your entitlement.
The route is as follows: your iPhone calls a relay server I run at Cloudflare, which forwards the request to OpenRouter, Inc., which hands it to the language model provider. The answer comes back the same way, streamed, and appears in the editor.
What the relay keeps: none of your text. Neither the request nor the answer is stored. Its database contains only usage counters, monthly and daily, attached to an irreversible fingerprint (SHA-256) of the transaction identifier supplied by Apple. That fingerprint cannot lead back to you, and serves only to enforce the caps. The technical logs retain only a request identifier, the name of the action and the model called, never the content.
What OpenRouter and the model provider do falls under their own policies, which I do not control. Don't hand the assistant a text you wouldn't want processed by a third party.
As long as you don't call on the assistant, the app contacts no server at all.
The permissions the app asks for
Each one is requested at the moment it is needed, never at launch, and each can be refused.
- Camera: to film your takes. The video stays on the iPhone.
- Microphone: for the audio of your takes and for dictation. The audio stays on the iPhone.
- Speech recognition: to turn your dictation into text. iOS does this on the device where it can; otherwise Apple processes it under its own policy.
- Photos: only to save a take there, and only if you ask. The app never reads your photo library.
No analytics
Cue includes no statistics tool, no third party SDK, no advertising identifier. I don't know which screens you open, or how long you spend in the app.
Purchases
The subscription is handled by Apple. No payment method passes through Cue, and I see neither your card number, nor your billing address, nor your Apple ID. The relay receives only the signed proof that your subscription is active, and keeps nothing but the fingerprint described above.
Why, and on what basis
- Performing the service: the assistant cannot rewrite a text without receiving it, and entitlement cannot be verified without the subscription receipt.
- Legitimate interest: the usage counters, to stop heavy use making the service unaffordable for everyone.
This data serves no other purpose. It is neither sold, nor rented, nor passed to advertisers, and there is no profiling.
For how long
| Data | Retention |
|---|---|
| The data on your iPhone | For as long as you keep it |
| The text handed to the assistant | The duration of the request, with no storage on my side |
| The usage counters | Until their periodic reset, or immediately if you ask for deletion |
| Cloudflare's technical logs | A few days under their policy, with no script content |
Where it is hosted
| Provider | Role |
|---|---|
| Cloudflare, Inc. | The relay server and its counter database |
| OpenRouter, Inc. and the model provider called | Processing the text handed to the assistant |
| Apple Inc. | Distribution, purchases and speech recognition |
Some of this processing takes place outside the European Union. It relies on the European Commission's standard contractual clauses or on an equivalent transfer mechanism.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability.
- Erasure: Settings, then "Delete all my data", in the app. The erasure covers the device and the counters kept on the server side.
- Portability: your scripts are text, copyable and exportable; your takes export to Photos or Files.
- Everything else: write to [email protected], I answer within thirty days.
You may also lodge a complaint with the CNIL, the French supervisory authority.
Security
Everything in transit is encrypted (HTTPS). The subscription receipt is verified by its cryptographic signature, all the way up to Apple's certification root: a forged, expired or foreign-app receipt is refused. The relay accepts no request without one.
No security is absolute. In the event of a data breach presenting a risk to your rights, you would be informed within the deadlines set by the GDPR.
Children
Cue is not intended for under-15s and does not knowingly collect their data. If such data were reported to me, it would be erased.
Changes
This policy may change along with the app. The update date at the top of this page prevails, and any significant change will be announced in the app.