What Ai Calculator keeps to itself.

1. Exchange rates — to Ai Calculator's relay

To show currency rates, the app asks Ai Calculator's relay for the current table: a plain request that carries nothing you typed and nothing from your calculator. It carries only the app's token (item 3 below), which names the install and not you, and which is how the relay answers copies of Ai Calculator and no one else. The relay answers from a copy it refreshes through the day, or fetches the table from public rate sources (ExchangeRate-API, and fawazahmed0's currency-api as a fallback) and gives it to you. Those sources are contacted by the relay, never by your phone, so they never see you. The app asks when you open Currency in Convert, the Notepad, the Travel expense form or your rate alerts, and when it checks a rate alert (the support page has the timing). Your alerts and their targets stay on your phone.

2. AI Ask, Explain and Scan — to Anthropic, through Ai Calculator's relay

These run only when you tap them. If you never use Ask, Explain or Scan, nothing is sent. The app asks your permission once, naming Anthropic, before the first AI request. When you use one, the app sends the following, and only the following, to Ai Calculator's relay, which passes it to Anthropic, the company that makes the Claude model that reads it, and returns the answer:

• Ask: the words you typed (up to 600 characters), your locale (for example en-IN) and your currency.
• Explain: the name of the tool or calculator you are looking at, the numbers you entered into it (or the calculator's expression), the results the app already worked out, your locale and your currency.
• Scan: the photo you scan (from the camera or the one you chose), made smaller, with its location and camera details removed, and the text the app read from it (up to 6,000 characters), whether you asked for a maths problem or a bill, your locale and your currency.

Scan sends the photo. The text is first read on your phone by Apple's own text recognition, and the AI service is sent the photo as well, so it can read what the phone misread. The photo is made smaller on your phone and its location and camera details are removed before it leaves. Neither the photo nor the text is stored by Ai Calculator. Nothing that names you goes with a request, and neither do your History, notes, loans, rate alerts, location or contacts. Whatever you type or point the camera at does go, so keep names, account numbers and other private details out of Ask and Scan.

Explain runs on your phone when it can. On an iPhone where Apple's own on-device model is available (Apple Intelligence) and handles your language, Explain is written by that model on the phone itself: the numbers and results are not sent to Ai Calculator's relay or to Anthropic at all. The app sends the Explain details listed above only when your phone cannot do it, or when the phone's answer quotes a number the app did not give it and the app throws that answer away. Ask and Scan always go through the relay.

The AI never does the sums: it picks the tool or calculator to open, fills in the numbers, or explains a result the app computed. Ai Calculator then works out every number you see.

Ai Calculator's relay stores none of it. It is a small program on Cloudflare's network that holds the key to Anthropic so the app does not have to, checks the request comes from a genuine copy of Ai Calculator, passes it on, returns the reply and forgets it. It keeps no record of what was sent, and its logs record only that a request failed (the kind of failure, its status, the route and which Cloudflare data centre served it), never what was sent and never who sent it. The call to Anthropic is made from servers in North America, so what you send may be processed there.

Anthropic receives that request, the Scan photo included, to write the answer. Under its commercial terms, Anthropic does not train its models on what is sent through its service. It deletes inputs and outputs from its systems within 30 days, and keeps them longer only if a request is flagged for breaking its usage policies. See how long Anthropic keeps data and Anthropic's privacy policy. Nothing that names you accompanies it, so there is nothing at Anthropic to look you up by.

3. Proving the app is genuine — Apple App Attest, and an install token

The AI relay costs money to run, so it only answers copies of Ai Calculator. The first time you use an AI feature, and about monthly after that, the app asks Apple to vouch that it is a real, unmodified Ai Calculator on a real iPhone, using a key made in your phone's Secure Enclave. Apple's answer goes to the relay, which checks it against Apple's certificates and hands back a token that later AI requests and the rate lookup carry. The token identifies this install, not you, and holds nothing about you. Until then (an install that never uses AI never asks Apple), and on a phone where App Attest is not available, the app sends an install token instead, a secret that every copy of the app shares and that says nothing about you.

4. Request limits — per device, with no content

To stop accidents and abuse, the relay counts requests: the rate lookup and the attestation handshake per internet address (the network part of an IPv6 address), and the AI requests per attested device (per internet address for a phone using the install token). Cloudflare keeps the count for the short period it applies to. No content is attached to it.

The relay also keeps AI use to a fair amount, 20 answers a day for each phone that has proved itself with App Attest. For that it keeps, for each such install, one small record: a number (how many AI answers it has had today) and today's date (UTC), filed under the install's anonymous App Attest identifier, which names the install and not you. It is deleted at the end of that day, and nothing you typed or scanned is in it. A phone using the install token is counted by internet address instead: one record per address (the network part of an IPv6 address) holding the same two things, and one more for the day's total across all such phones; each is deleted at the end of that day too. Cloudflare, which hosts the relay, sees the internet address of every request in order to deliver it and to apply the limit, and keeps its own operational records under Cloudflare's privacy policy.

5. App usage — to Google Analytics for Firebase

To learn which parts of the app are used and which are not, the app sends Google Analytics for Firebase the name of each screen you open (such as "calculator_basic" or "loan_detail") and a short list of actions: finishing the first run, asking the AI and from where (typed, an example or a scan), reaching the daily AI limit, opening an explanation, seeing the Pro page and buying or restoring Pro (only which plan), adding a loan (only its kind), a trip, a rate alert or a note, and changing the theme. Each carries a fixed name and nothing else: never a number, a calculation, a question, a note, a loan's or trip's details or anything you typed. With them go the usual technical details (the app version, the iPhone model and iOS version, the language and an approximate country) and a random identifier for this install, which Google creates; it is not your name, Apple ID or the advertising identifier, and Ai Calculator never links it to you. Google works out the country from the connection and does not keep its internet address. Advertising features and Google signals are off. The data is kept by Google for up to 14 months; see Google's privacy policy.

The rest stays on your device, or is Apple's own

• The camera is used only in Scan, with your permission. The photo picker shows Ai Calculator only the picture you choose.
• Receipts, PDFs and shared results are made on your phone and go only where you send them with the share sheet.
• Copy and paste use the system clipboard when you ask.
• Payments are handled entirely by Apple's App Store. Ai Calculator never sees your card, your Apple ID or your billing details, and no Ai Calculator server receives anything about a purchase. Analytics notes only that a plan was bought or restored (item 5).