Privacy

The short version

The hosted service cannot tell who you are. Apple's filter request carries the sender and the message text and nothing that identifies you or your phone. So the server has no per-person log to keep, and we do not promise one. Filtering needs no account.

Two modes

QuestionModeLocal onlyDefault, after you agreeOnline checks, nothing kept
How texts are checkedYour rules, on your iPhone.Your rules first. Texts they can’t decide get an AI check.
Leaves your iPhoneNothing.Sender and text go to the server; text and the kind of sender go to the AI provider.
Server keepsNothing.No text, no number, no IP. Only a 24-hour fingerprint of the message template with its verdict, and anonymous counts.
Who can read itYou.Nobody. The operator sees totals only.

Who processes your text

These companies process data for the hosted service at gethoneypot.app. Live deployment details are at /v2/meta.

CompanyPurposeRetention
AnthropicClassifies undecided texts (default AI provider). Sees the text and the kind of sender.API inputs and outputs deleted within 30 days, not used for training. Zero data retention requested, not yet confirmed.
OpenAIFallback classifier if configured. Same data as above.Up to 30 days for abuse monitoring, not used for training. Not active on the hosted service today.
CloudflareHosting (Workers, D1, KV, R2) and DNS.Request metadata at the network edge only. Request-body capture and invocation logs are off.
AppleThe filter extension itself: Apple relays your deferred texts to the server.Per Apple.

With your own key the request goes to the provider you chose, under your terms with them. We will update this page before adding a processor.

What we verify

The test suite plants unique canary strings in thousands of requests and then searches every database, cache, blob store and server log. It finds none.

Contact

Questions: email support. Security reports: security.txt.