Privacy Policy

Effective and last updated: 12 July 2026

Short version: Poised has no user account and never saves or uploads your microphone audio. Rehearsal text is processed only to return role-play, natural spoken playback, and coaching. Local coaching history and saved plans remain on your device. We use no ads and do not track you across apps or websites.

Who this policy covers

This policy describes the Poised iPhone and iPad app and the poised.keenshift.ai website, operated by KeenShift. Poised is communication-skills coaching for everyday conversations; it is not therapy or medical, legal, financial, or crisis advice.

Information that stays on your device

• Audio: while you hold the microphone button, Apple’s on-device speech recognition processes microphone buffers. Poised does not write audio to a file, upload it, or retain it after the response.
• Practice history: scores, coaching, delivery summaries, dates, settings, and saved conversation plans are stored locally on your device. Rehearsal transcripts are not saved to practice history.
• Purchase access: Apple StoreKit provides verified subscription status so the app can show the features you bought.

Information processed to provide AI rehearsal

When you send a rehearsal response, Poised sends the transcript text accumulated for that active rehearsal, the selected scenario and pressure level, and—only for a custom rehearsal—the bounded role, situation, desired outcome, and optional boundary you entered. Our Cloudflare Worker selects the server-owned role-play instructions and sends the minimum needed text to Amazon Bedrock, using the Kimi K2.5 model, to generate the next reply or debrief. Poised uses separate Bedrock projects for development, beta/review, and production; each is configured for zero data retention.

Poised does not maintain a server transcript archive and does not use rehearsal content for advertising or model training. Rehearsal text is processed to answer the request and is not written to Poised's quota or analytics records. To recover safely from a dropped connection, a completed AI reply or debrief—not your request transcript—may be kept in a bounded Cloudflare replay record for up to 10 minutes, then expires. Do not enter names or details you do not want processed; the app encourages roles instead of names.

Natural counterpart voice

If spoken replies are enabled, the generated counterpart reply—not your microphone recording—is sent through Poised's authenticated service to our self-hosted Kokoro-82M speech synthesizer on Amazon Web Services. The synthesizer creates the requested voice in memory and returns a WAV audio response. Poised does not create a server audio library, use the text or audio for training, or retain the generated clip after the request. If neural playback is delayed or unavailable, the app can use the best compatible Apple voice already available on your device.

Security and subscription verification

Release builds use Apple App Attest to help verify that premium requests come from a legitimate copy of Poised. Apple and our verification service process a cryptographic app-instance key, one-time challenges, assertion counters, and integrity evidence. For Pro verification, the app may send Apple’s signed StoreKit transaction JWS, containing subscription product and status information. We never receive your payment-card details. A short-lived signed capability and pseudonymous quota record protect paid access and abuse limits; they are not a Poised profile or advertising identifier.

Content-free product and reliability analytics

Poised sends a restricted set of operational events to Cloudflare Analytics Engine so we can see whether onboarding, rehearsal, debrief, voice permission, and paywall flows work. These events may contain a random session UUID; coarse labels such as voice or text, basic or deep, monthly or yearly, and success, pending, cancellation, or error; and bounded counts or timing such as turn count and latency. They never contain audio, transcript text, prompts, custom-plan fields, AI responses, names, email addresses, prices, product receipts, transaction identifiers, Apple Account information, advertising IDs, or contact data. Cloudflare necessarily processes network information such as IP address to deliver and protect requests; Poised does not place IP addresses in its analytics dataset.

Website data

This website is static and uses no cookies, advertising pixels, analytics scripts, or third-party fonts. Vercel hosts the pages and necessarily processes standard web-request data to deliver and secure them.

Sharing and subprocessors

We use Apple for StoreKit, App Attest, microphone permission, and on-device speech recognition; Cloudflare for API delivery, rate limiting, pseudonymous quota enforcement, short-lived response recovery, and content-free analytics; Amazon Web Services for requested AI generation through Amazon Bedrock (Kimi K2.5) and our self-hosted Kokoro-82M counterpart-voice synthesis; and Vercel for this website. We may disclose information if legally required or to protect users and the service. We do not sell personal information or share it for cross-context behavioral advertising.

Retention and deletion

Use Settings → Delete local practice data to remove saved scores, coaching, delivery summaries, and conversation plans from the device. Deleting the app also removes its local data, subject to your device backups. Poised has no account or server transcript history to delete. Short-lived capabilities expire automatically. Pseudonymous integrity, abuse-prevention, quota, and aggregate operational records are retained only as needed to secure and operate the service and are not designed to identify you. Email support@keenshift.ai with privacy questions.

Children and sensitive use

Poised is not directed to children under 13, and we do not knowingly collect personal information from them. If explicit self-harm or suicide language is entered, the app deterministically stops role-play before sending or scoring that turn and shows immediate-help resources.

International processing and changes

Our service providers may process data in countries other than yours. We may update this policy as Poised changes; the effective date above will change when we do.