Privacy Policy

Who we are

Stormi is made by YapsGG (“we”, “us”). This policy covers the Stormi app for iPhone and iPad, the server it talks to, and this website. Questions go to abdibrokhim@gmail.com.

What we collect

Your account

You sign in with Apple. We receive a unique identifier for your Apple ID and, if you choose to share them, your name and email address (which may be an Apple private relay address). We use these only to keep you signed in and to contact you about your account.

What you create

• Your bots: their names, jobs, avatars, chosen models, routines, and enabled plugins.
• Your chats with bots, the photos and screenshots you attach, and the threads where bots talk to each other.
• The steps bots take and the approvals you give or decline.

Connections you make

• Plugin sign-ins. When you sign in to a service so a bot can use it, we store the access token that service gives us, encrypted. We never see your password for that service.
• Your OpenRouter account. If you connect it, we store the key OpenRouter creates for Stormi, encrypted. It is never sent to your device.

Usage

For each model call we record the bot, the model, the number of tokens, and the cost, so you can see your usage in the app. We don't use analytics or advertising SDKs, and we don't track you across apps or websites.

How we use it

• To run your bots: send your messages to the model you chose, use the tools you connected, and show you results.
• To run your routines on schedule and keep your chats in sync across your devices.
• To show usage and keep the service secure and working.

We don't sell your data, use it for advertising, or use it to train AI models.

Who processes it

We share data only with the providers needed to run Stormi:

• OpenRouter and the model provider it routes to (for example Anthropic, OpenAI, or Google) receive the messages, attachments, and tool results a bot needs to answer. Their own policies apply to that processing.
• Our hosting providers run our server and store our database.
• Services you connect through plugins receive the requests your bots make on your behalf.
• Apple handles Sign in with Apple and notifications.

We may disclose information if the law requires it.

This website

We count visits to this website with Vercel Web Analytics, which doesn't use cookies or identify you. If you ask a question in the FAQ, it's sent to OpenRouter to write the answer; we don't store it with anything that identifies you.

On your device

The app keeps a copy of your bots and chats on your device so it opens instantly, and shares a summary with its widgets. Your session token and Apple sign-in details are stored in the Keychain.

How long we keep it

We keep your data while your account exists. Clearing a chat in the app deletes it. Deleting your account deletes your account data, bots, chats, threads, attachments, plugin sign-ins, and OpenRouter connection from our server. Copies in our database provider's backups expire on their own.

Your choices

• Delete your account anytime in Settings › Delete Account. See how to delete your account.
• Disconnect a plugin or your OpenRouter account in the app at any time.
• Ask for a copy of your data or a correction by writing to abdibrokhim@gmail.com.

Security

Data travels over HTTPS. Plugin tokens and OpenRouter keys are encrypted at rest with AES-256-GCM. Bots treat what they read on web pages and in tools as information, not instructions, and ask before sending, paying, deleting, or submitting anything.

Children

Stormi isn't meant for children under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above, and tell you in the app if the change is significant.