Privacy Policy

Effective September 5, 2026

Reach is made by Witit Media Inc., which is responsible for the data described here.

What Reach stores on your device

Reach stores the things you create in the app in a private container on your iPhone:

• Reaches: their titles, details, why you want them, the month you want them by, and their colors.
• Scripts: the passage you write or generate for a reach and then edit.
• Photos you add to a reach or to a proof entry.
• Next steps and their due dates.
• Proof and win entries.
• Visualization sessions and the days they were logged on.
• Feeling readings: how real a reach feels to you, and when you recorded that.
• Whether a reach is hidden or archived, and the reason you gave when archiving it.

This container is shared between the Reach app, its widgets, and its Lock Screen activity so they can show the same information. It stays on your device except for backups you control and the optional sharing described here.

Backups

If you back up your iPhone to iCloud or to a computer, Reach's data is included in that backup like any other app's data. Apple's privacy policy covers iCloud backups. Reach does not sync data between devices on its own.

Writing your script for you

A reach can have a script: a short passage in the present tense that you read aloud. You can always write it yourself, and writing it yourself never leaves your iPhone.

If you subscribe to Reach Further, you can instead tap "Write it for me" and have a first draft written. Before sharing in that script session, Reach explains what goes to OpenAI and asks you to allow it. Only then does anything leave your device.

When you ask for a draft, Reach sends that one reach's title, its details, why you want it, and the month you set, to our server at reachforit.app. The server checks with Apple that your subscription is active, passes those words to OpenAI's API to write the paragraph, and sends the paragraph back to your iPhone. That is the whole request.

• Your photos are never sent. Neither are your proof entries, feeling readings, visualization history, next steps, or any of your other reaches.
• We do not store what you send, and we do not keep logs of it. Our server processes the words only while preparing the draft. OpenAI has separate retention practices described below.
• There is still no account. The only thing identifying the request is Apple's signed receipt for your subscription, which we use to confirm the subscription and to limit how many drafts one subscription can ask for. We do not learn your name or email from it.
• OpenAI processes the text through its API. API content is not used for training by default. We disable storage of the generated completion, but OpenAI may retain content for abuse monitoring, normally for up to 30 days, and may use temporary prompt caching. See OpenAI’s API data controls for exceptions and retention details.
• The draft comes back for you to edit. Once you save it, the script lives on your iPhone like everything else.

If you would rather not, say no when Reach asks. You still get a starting draft, put together on your iPhone from what you already wrote, and nothing is sent anywhere.

Talking a reach through

If you subscribe to Reach Further, you can tap "Talk it through" when you add a reach, or on a reach you have not described yet. That opens a conversation: it asks about what you want, one question at a time, up to eleven optional questions, and then suggests a title, details, why, month, and the first step forward for you to edit.

The questions run on your iPhone. Before making an AI draft, Reach asks whether you want to share the answers with OpenAI. You can choose a simpler draft made on your iPhone instead. The terms of use describe these choices too.

When you finish or tap "Make the draft" and allow sharing, your answers are sent together to reachforit.app, along with what you have already written for that reach: its title, details, reason, month, and next step. The server checks your subscription with Apple, passes the text to OpenAI to organize the draft, and returns it to your iPhone. No AI request is made between questions.

• Only that one reach is sent. Your photos are never sent. Neither are your other reaches, your proof entries, feeling readings, or visualization history.
• Your iPhone holds the answers while the setup sheet is open. They are not saved as a separate conversation after you close it. Reach’s server does not store the conversation.
• Reach does not keep logs of the conversation text. OpenAI’s processing and retention are described below.
• There is still no account. The only thing identifying the request is Apple's signed receipt for your subscription, which we use to confirm the subscription and to limit how many drafts one subscription can ask for. We do not learn your name or email from it.
• OpenAI processes the text through its API. API content is not used for training by default. We disable storage of the generated completion, but OpenAI may retain content for abuse monitoring, normally for up to 30 days, and may use temporary prompt caching. See OpenAI’s API data controls for exceptions and retention details.
• What comes back is filled into a screen you edit before anything is saved. Nothing is written to your reach until you accept it, and once you do it lives on your iPhone like everything else.

Saving the reviewed reach also creates its first script if it does not already have one. When you allow AI sharing, Reach can use the reviewed words for that script. Choosing the on-device draft keeps this step on your iPhone too. An existing script is preserved.

Connecting ChatGPT

Settings → Connect to ChatGPT is optional and available on the free plan. Enabling sharing uploads a copy of your visible reaches: titles, details, reasons, scripts, next steps, target months, journal text, feelings, and visualization history. You can choose whether archived reaches are included. Hidden reaches, photos, purchase information, and Apple Health data are excluded.

Reach stores this copy encrypted in Upstash Redis, accessed through our Vercel server. A random device credential is kept in your iPhone's Keychain; hashed identifiers associate the shared copy and connection credentials with that installation. Linking in ChatGPT uses an expiring, one-use code and OAuth authorization. ChatGPT receives read access to the shared copy after you authorize it, and cannot save changes into Reach.

While sharing is enabled, Reach updates the copy after saved changes while the app is open and when you return to it. Offline changes, hiding a reach, and deleting a reach take effect in the cloud after the next successful sync. Reach shows the last successful sync time. Copies expire after 90 days without a successful Reach sync. Connection and abuse-prevention records also expire; Reach does not log your shared text or credentials.

Disconnect and delete shared data in Reach Settings revokes access and removes the cloud copy. Deletion requires an internet connection; if it fails, Reach pauses new uploads and keeps the deletion available to retry. Uninstalling the app does not immediately delete the cloud copy. Content already retrieved into ChatGPT is subject to your ChatGPT account's data controls, policies, and retention settings; deleting Reach's copy does not delete those conversations.

Photos

When you add a photo, Reach uses the iOS photo picker. The app receives only the photos you choose and never has access to the rest of your library. Chosen photos are copied into Reach's private container on your device.

Notifications

Reach can remind you about a next step when it is due, and check in when the month you set for a reach arrives. These reminders are scheduled locally on your iPhone. Reach does not use push notifications and has no server that could send them. You can turn reminders off at any time in Settings.

Apple Health

You can choose to have Reach add each visualization you log to Apple Health as Mindful Minutes. This is off until you turn it on from the menu on the Home screen. When it is on, Reach writes the start time and length of each session to Health on your iPhone, marking manually estimated bedtime sessions as user-entered, where the Health app and any app you have allowed to read Mindful Minutes can see it. For Mindful Minutes, Reach reads back only the sessions it wrote itself, so that none is added twice. Health data never reaches our server, and Apple's Health privacy rules govern it from there. You can turn this off at any time in the same menu, or revoke access in Settings › Privacy & Security › Health › Reach. Sessions already in Health stay there until you delete them in the Health app or explicitly undo a bedtime entry in Reach. If Health is temporarily unavailable, Reach retries that undo when access is available.

Separately, when logging a bedtime visualization, you can tap “Find bedtime with Apple Health” to allow read-only Sleep access. Reach uses recent sleep records on your device to suggest when you fell asleep. You review and choose whether to use that time; visualization duration remains your own estimate. Reach reads Sleep only when you press this button, does not retain the raw sleep records, and excludes Health-assisted entries and their associated calendar days from AI exports and ChatGPT sharing. You can always enter bedtime manually and revoke Sleep access in the Health app.

Face ID and Touch ID

You can hide reaches so that revealing them requires Face ID, Touch ID, or your passcode. This check is performed by iOS. Reach only learns whether it succeeded; it never receives biometric data.

Purchases

Reach Further is sold through Apple's App Store. Apple processes the payment and holds your payment details. Reach checks your subscription with Apple's StoreKit each time it opens so it can unlock the features you paid for, and stores nothing about it itself. Apple's privacy policy applies to the purchase.

What Reach does not do

• No accounts, sign-in, or email collection.
• No analytics, crash reporting, or usage tracking.
• No advertising, ad identifiers, or tracking across apps and websites.
• No third-party software development kits in the app that collect data.
• No network requests except the ones described above: the ones iOS makes on Reach's behalf to the App Store for purchases, the script draft and setup conversation you explicitly ask for, and the ChatGPT connection you separately enable.
• No selling or renting your data. Text is shared with service providers only for the optional features described above.

Where the server runs

The online features above are served by Vercel, in the United States. The host processes technical request information such as IP address, time, and response status. Reach does not log the text you send. To limit draft requests, Reach stores a subscription identifier and request-count information in Upstash Redis for a rolling rate-limit window. Developer-only access-code and ChatGPT connection requests use IP-based rate-limit buckets. These records contain no goal text, photos, name, or email.

Deleting your data

Reach does not retain script or setup request text. If you enable the ChatGPT connection, use Disconnect and delete shared data before uninstalling to remove its cloud copy immediately. Otherwise that copy expires after 90 days without a successful sync. Rate-limit records expire automatically; OpenAI’s separate retention practices are described above. You can permanently delete any reach from the Archived screen inside the app. Deleting the Reach app from your iPhone removes everything it stored. If a backup of your device includes Reach's data, that backup is under your control through iCloud or your computer. Mindful Minutes that Reach added to Apple Health are not removed with the app; you can delete them in the Health app.

Children

Reach is not directed at children under 13, and we do not knowingly collect information from them. The optional AI features process text only as described in this policy.

Changes to this policy

If Reach ever starts handling data differently, we will update this page and change the effective date at the top. We will not apply a material change without updating the app so you can see it.

Contact

Questions about privacy in Reach can be sent to support@witit.com, or written to Witit Media Inc. at the same address.