Effective date: May 22, 2026 • Last updated: May 22, 2026
Ick Reply is operated by CurlyCorn LLC, a limited liability company organized under the laws of the State of New Mexico, United States (“CurlyCorn,” “we,” “our,” or “us”). We are the controller of personal data processed through the Ick Reply mobile application and the ickreply.com website (together, the “App”). This Privacy Policy explains how we collect, use, share, and safeguard information.
Ick Reply does not require you to create an account. You do not need to provide your name, email address, phone number, or any other personal information to use the App.
We store one or more anonymous device identifiers and a RevenueCat App User ID to manage your account, credit balances, and usage. We also store purchase history (product IDs, transaction IDs, purchase dates, credit amounts), subscription state (whether you are subscribed, which product, start and expiry dates), credit balances (free, weekly, and one-time purchased), and aggregate generation counts. An optional email field exists in our schema but is not required to use the App and is only used if you voluntarily provide it for support. We do not link these identifiers to your real name, phone number, or other directly identifying information.
When you upload a screenshot or paste a message for analysis, the content is sent to a third-party AI service for text extraction and response generation. Our primary AI provider is Google (Gemini AI); if Gemini is unavailable, we fall back to OpenAI. Screenshots and message text are processed in real-time and are not stored on our servers after processing is complete.
Your clapback history, ick reports, and saved responses are stored locally on your device only. We do not have access to this data, and it is not transmitted to our servers.
We record an aggregate count of how many clapbacks have been generated against your device identifier so that we can enforce credit limits and usage policies. We do not use third-party analytics, advertising, or tracking SDKs inside the mobile App.
Our primary AI provider is Google's Gemini AI. Message content (and screenshot images for screenshot inputs) is sent to Google's Gemini API for text extraction and response generation. See Google's Gemini API Terms for information on how they handle data.
If Google Gemini is unavailable, we fall back to OpenAI for processing. The same message content and screenshot images may be sent to OpenAI's API. See OpenAI's Privacy Policy for information on how they handle data.
User account data, credit balances, and generation metadata are stored in MongoDB Atlas. See MongoDB's Privacy Policy for details.
Our backend API and marketing website are hosted on Vercel. See Vercel's Privacy Policy for details.
Our marketing website (ickreply.com) uses Plausible Analytics, a privacy-friendly, cookieless analytics tool. Plausible is self-hosted on our own infrastructure — no data is sent to Plausible's servers or any third party. Plausible collects no personal data, sets no cookies, performs no fingerprinting, and cannot identify individual visitors. This applies only to the website; the App does not use Plausible or any website analytics.
We use RevenueCat (operated by RevenueCat, Inc., United States) as our subscription and in-app purchase infrastructure. RevenueCat receives your anonymous device identifier as the RevenueCat App User ID, together with transaction data provided by Apple and Google (product IDs, transaction IDs, purchase and renewal dates, price, currency, and subscription status). RevenueCat acts as our processor to validate entitlements, sync subscription state across devices, power the paywall and restore-purchases flows, and forward webhooks to our backend. Actual payment processing is handled entirely by Apple (App Store) and Google (Play Store) — we never see or store your card number, bank details, or billing address. Please review RevenueCat's Privacy Policy for details.
We do not sell, rent, or share your personal information with third parties for marketing purposes. We only share data with the third-party services described above to the extent necessary to provide the App's functionality.
CurlyCorn LLC is based in the United States, and the sub-processors listed above (Google, OpenAI, MongoDB Atlas, Vercel, RevenueCat) process data in the United States and other jurisdictions. If you access the App from the European Union, European Economic Area, United Kingdom, or Switzerland, your data will be transferred to and processed in countries whose laws may not offer the same level of protection as your home jurisdiction. Where required, such transfers rely on the European Commission's Standard Contractual Clauses and, for transfers to the United States, the EU-U.S. Data Privacy Framework (where a sub-processor is certified) or equivalent safeguards.
Screenshots and message content are not retained on our servers after a generation request completes. Anonymous device identifiers, RevenueCat App User IDs, credit balances, and generation metadata persist on our servers for as long as the account is active and are retained afterwards only to the extent required for purchase records, tax, fraud prevention, and dispute resolution.
Local data.Your clapback history, ick reports, and saved responses live on your device. You can clear them from Settings → Data → Clear History, or remove them completely by uninstalling the App.
Server-side data. The App does not require a name, email address, or other directly identifying information, so our server records cannot ordinarily be linked to your real-world identity from a support email. Consistent with Article 11 of the GDPR, where we cannot identify the data subject from the data we hold, we are not obliged to obtain additional information solely to respond to identity-based requests. If you wish to remove server-side data associated with a specific purchase, please contact Apple, Google, or RevenueCat, who administer the underlying transaction records.
We implement appropriate technical measures to protect the limited data we process. All data transmission between the App and our servers uses HTTPS encryption.
Ick Reply is not intended for use by children under the age of 13. We do not knowingly collect information from children under 13. If you are located in the European Union or European Economic Area, you must be at least 16 years of age to use the App, given that the App may process potentially sensitive or adult message content. If we learn that we have collected information from an EU/EEA user under 16, we will promptly delete that information.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the App and updating the “Last updated” date.
Depending on your location, you may have the following rights regarding your personal data:
If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the CPRA:
If the GDPR or UK GDPR applies to you, we process your data on the following legal bases: (1) performance of a contract with you (providing the App and processing your purchases); (2) our legitimate interests in operating, securing, and improving the Service (Art. 6(1)(f) GDPR); (3) compliance with a legal obligation; and (4) where required, your consent, which you may withdraw at any time.
CurlyCorn LLC
New Mexico, United States
Email: support@ickreply.com