OTENRA Resolve
Privacy Policy
Resolve handles some of the most sensitive post you receive. This policy states exactly what happens to it — and what deliberately never happens.
The short version
- The document is read on your iPhone. The photograph never leaves the device and is deleted after the text has been read.
- Sensitive identifiers are masked before analysis — on the device, not on our servers.
- The original document is never sent to the AI service. Only the masked text is transmitted, it is processed transiently and no letter is stored on our servers.
- No account is required. We do not know who you are.
- No analytics, no advertising, no cross-app tracking. Subscriptions are handled by Apple and, for entitlement management, by RevenueCat under a random anonymous identifier.
1. Who we are
OTENRA (“we”) develops and operates OTENRA Resolve. For anything related to privacy, contact privacy@otenra.com.
2. What happens to a letter you scan
On your device
When you scan a letter, the image is captured by the iOS document scanner and stored temporarily inside the app’s own storage area. Text recognition is performed by Apple’s on-device text recognition — the image is not uploaded for this. Once the text has been read, the app deletes the scan image.
The recognised text then passes through a masking step on the device. It replaces patterns that identify you or your accounts: IBANs and other bank account numbers, German tax identification numbers (Steuer-ID) and Steuernummern, social and pension insurance numbers, identity-card and passport numbers, and payment card numbers. These are replaced with a mask before anything is sent.
What leaves your iPhone
Only the masked text, the language you chose for the explanation, a flag stating that masking was applied, and an anonymous key that proves the request came from a genuine copy of the app. No image, no unmasked text, no name, no e-mail address, no account and no advertising identifier is transmitted.
That key is created by your iPhone’s Secure Enclave the first time you use Resolve. It exists so that the analysis service cannot be drained by anything other than the app itself, which is what keeps it free to use. It is not linked to you, it carries nothing about your letters, and it is replaced whenever you reinstall.
On our service
The masked text is sent over an encrypted connection to a service we operate on Cloudflare’s network. That service independently checks the text for identifiers that should have been masked and refuses the request if it finds any — masking failures fail closed rather than being passed on. It then submits the text to Cloudflare Workers AI, Cloudflare’s AI inference service, which generates the explanation, and returns the result to your iPhone.
The text is processed transiently. We do not store letters, we do not log their content, and we do not forward any user identifier to the inference service. We do not use your letters to train models, and Cloudflare states that it does not train on customer inference data.
What stays on your device
Your archive — the masked text of each letter, its explanation and its deadlines — is stored in a database on your iPhone, protected by iOS. It is not synchronised to us or to any cloud service. Deadline reminders are local notifications scheduled by the app itself; no push server is involved and we never see them. “Delete all letters” in Settings removes the archive and cancels the reminders.
3. An honest limitation
Masking is pattern-based. It reliably removes the identifier formats listed above, and the service performs a second, independent check before any analysis happens. It cannot, however, guarantee that every conceivable piece of personal information has been removed: your name and address, for instance, generally remain in the text, because removing them would often destroy the meaning of the letter. We state this plainly rather than claim an anonymity we cannot deliver.
4. No accounts, no profiles
Resolve has no registration, no login and no user profile. We hold no list of users and no history of what anyone scanned — not what a letter said, not when it was scanned, not how often you use the app.
The one thing our server keeps is the anonymous key described above, stored with a counter that stops an intercepted request being replayed. Requests carrying the same key can be recognised as coming from the same installation; that is what the key is for. It is never joined to a person, and it is the only durable record that exists.
5. Analytics and tracking
The app contains no analytics SDK, no advertising SDK, no third-party trackers and no fingerprinting. We do not collect crash reports containing letter content.
6. Subscriptions
If you take out a subscription, the purchase is handled by Apple under Apple’s own terms and privacy policy. We do not receive your payment details. Your subscription status is used only to unlock features in the app.
To manage subscriptions and unlock Pro features we use RevenueCat, a subscription-management service. Resolve identifies you to RevenueCat only by a random, app-generated identifier — never your name, e-mail or Apple ID. RevenueCat receives the purchase information Apple provides for that anonymous identifier so it can tell the app whether your subscription is active. This identifier is not linked to your letters or their content.
7. Children
Resolve is intended for adults dealing with their own official correspondence. It is not directed at children.
8. Your rights
Because we operate without accounts and store no letters, we normally hold no personal data about you that we could retrieve, correct or delete — the data is on your device and under your control. Where we do hold personal data, for example if you write to us, the rights under the EU General Data Protection Regulation (GDPR) apply: access, rectification, erasure, portability, restriction and objection. Contact privacy@otenra.com.
9. Changes
If our data practices change, this policy is updated here before the change reaches the app, and the date at the top is revised.
10. Contact
Privacy enquiries: privacy@otenra.com
General support: support@otenra.com