Privacy

What Prompt Petal can see, what it sends, what we store, and how to delete your data. Last updated September 27, 2026.

What you select and type stays on your device

Prompt Petal reads the text you have selected, builds the prompt you picked from it, and types the result into the app you are using. All of that happens on your device. It watches one keyboard shortcut and ignores every other key you press. While a password field is active, it does nothing at all.

On a Mac this needs Accessibility permission, which macOS requires for any app that reads a selection or types into another app. That is the only permission Prompt Petal asks for there. On iPhone and Android, the part that types for you is a keyboard, and it makes no network connections of any kind. On iPhone it also runs with Full Access turned off.

Clipboard history

Off until you turn it on. When it is on, Prompt Petal remembers the last five things you copied so you can pick them from your petals. They are held in memory only and forgotten when you quit the app or turn the setting off. Anything a password manager marks as private when it copies is skipped.

Sharing a prompt

A shared link carries the prompt inside the link itself, after the # sign. Browsers keep that part of a link to themselves and do not send it to the website, so when someone opens a link you shared, promptpetal.com never receives the prompt and has no copy of the prompt. Only prompts can be shared this way. Opening a shared link shows you the prompt and adds nothing until you choose to keep the prompt.

Syncing between your Apple devices

Lite needs no account. With Plus, your prompts, boards and settings travel between your Mac, iPhone and iPad through your own iCloud account. They go to Apple, never to us, and Apple's privacy policy covers them there. You can turn this off in Settings.

Your account

You only need an account to sync across different kinds of device, for example between an iPhone and a Windows PC. To create one you give us an email address, and we send a six digit sign in code to that address. The code expires after 15 minutes and stops working after five wrong tries. Emails are delivered for us by Resend.

For each account we store your email address, an account identifier, when the account was created, and which plan you have. A device stays signed in for up to 400 days, or until you sign out.

Syncing across all your devices

Part of Plus. Sync carries your prompts, your boards, which prompt packs you added, and the settings that follow you: your flower and its color, what a prompt does when nothing is selected, and whether a petal also copies what it inserts. Before any of it leaves your device, it is encrypted with a key made from your recovery code, which is created on your device and kept in its protected storage.

How your other devices get that code is your choice. With QR codes, it passes straight from one of your devices to another, encrypted so only the new device can read it, and it is never sent to us in a form we can read. With a passcode of 4 to 6 digits, we keep a locked copy of the code so a new device only needs the passcode. That copy is sealed with a key made from your passcode and a secret that is kept apart from our database, we only answer guesses from a device signed in to your account, and 10 wrong tries erase the key. Choosing a passcode means we hold that locked copy; choosing QR codes means we never do.

Alongside each encrypted record we store what the service needs to work: which record it is, a counter that goes up each time it changes, when it changed, and whether it was deleted. Each record also carries a short fingerprint that lets your own devices tell whether they hold the same version. That fingerprint is made with a key from your recovery code too, so we cannot use it to recognize a prompt, including the ones that come with the app.

If you use QR codes and lose every device that holds the code, the synced copies cannot be read again by anyone, including us. The prompts on your devices are unaffected.

Deleting your account

You can delete your account in Settings. That removes the account and every synced record stored under the account. The prompts on your devices stay where they are. Signing out keeps everything as it is, on the server and on your device.

No longer have the app? Email hello@littlebirdtrading.com from the address you signed in with and ask us to delete your account. We remove the account and every synced record stored under it, and reply when it is done. Purchase records kept by Apple, Google or Stripe stay with those companies.

Prompt packs and updates

Browsing and downloading prompt packs asks promptpetal.com for the list and for each pack you add. The version of the Mac app downloaded from this website checks promptpetal.com for updates. Neither request carries anything about you or your prompts.

If you purchase Plus

Payment is handled by Stripe or by the app store you purchased through. We receive your email address and which plan you chose, and we never see your card details. When you purchase through the App Store or Google Play, the app sends the store's own proof of purchase to promptpetal.com so your purchase can be confirmed.

Crash reports, bug reports and ideas

You decide whether we see one. If Prompt Petal quits unexpectedly, the next time it opens it offers to send us a report with what happened, which you can read first. Report a Bug and Feature Request work the same way. You can add notes and a screenshot, and the report reaches promptpetal.com when you press Send. If you are signed in, it carries your email address so we can answer.

Usage stats in the apps

The apps count which screens and buttons get used, such as whether the upgrade page was opened or the three days of Plus were started. Each count carries a random number made on your device, the app version, your device type and whether you are on Lite or Plus. It holds no prompts, no text you typed, no name, no email and no account. The random number can be reset by turning the switch off and on. Counts are stored for 400 days. You can stop them any time with Share anonymous usage stats in Settings, which also clears anything waiting to be sent. They are read only by us, behind a passkey and an authenticator app code.

Watches

On Apple Watch and Wear OS, your phone passes your prompts to your watch directly, over the connection the two already share.

This website

We count visits to this website with Cloudflare Web Analytics, as totals: which pages are read, which site a visitor came from, and their country. It uses no cookies. A link from one of our apps names the app it came from, and we count those visits the same way.

Microsoft Clarity shows us how visitors scroll and click on these pages, so we can fix what is hard to use. It masks what you type into form boxes and sets its own cookies. Microsoft's privacy statement covers what it keeps.

The Message Me form on the home page sends your name, email and message to our inbox so we can reply. Cloudflare Turnstile checks that a person sent the message.

Contact

Little Bird Trading, hello@littlebirdtrading.com. A person reads every message.

The English version applies if the two differ.