Privacy Policy
Effective: September 12, 2026
Who we are
AYDEXA is an independent information service operated by Grodify LLC. We are not a government agency. We organize information from official sources; the administering agency decides eligibility and applications.
Information on your device
AYDEXA Free can be used without an account. Language, saved public-program bookmarks and alert-topic preferences are stored locally. Needs-guidance and Document Checklist selections are temporary session data, not an application or case record. They are not sent to an account, Analytics or a government screening API.
Camera and local audio
When you choose Camera and allow permission, AYDEXA takes a temporary photo to read a letter on your device. iOS uses Apple Vision; Android uses the bundled on-device text recognizer. Recognized text is used by local Letter Intelligence to present two cards. AYDEXA does not upload the photo or text, store personal documents permanently, or send this content to Analytics or OpenAI. The temporary session is limited to ten minutes; cleanup also runs on cancellation, completion, backgrounding and session exit. If cleanup is interrupted, the app attempts cleanup again when restarted. Recognition and interpretation can contain errors: compare the result with the original letter. Local speech reads selected content using the device speech engine. AYDEXA creates no audio file or listening history and does not request microphone permission.
First-party Analytics
The approved event types are app_open, session_started, language_changed, category_viewed, program_viewed, program_saved, program_unsaved and official_link_clicked. Allowed event data can include a public program/category slug, language, platform, app/build version and release channel. A separate random Analytics identifier supports counting, deduplication and abuse prevention; it is not an account ID. The server hashes bounded pseudonymous material and maintains aggregate counts rather than a raw event stream. It is not joined to Auth, Push, screening, letters or a citizen profile. Search text, documents, images, OCR text, screening answers and personal case details are prohibited. PostHog and advertising trackers are not connected.
Account and AYDEXA+
AYDEXA Free remains available without an account. If you create an account or use AYDEXA+, Supabase Auth processes a minimal account ID and your email or verified Google/Apple provider identity. Apple may provide a private-relay email. AYDEXA does not ask for your legal name, phone number, home address, date of birth, Social Security number, immigration status, financial profile or documents to create the account.
Subscriptions and reminders
Apple or Google processes subscription payment details. RevenueCat and AYDEXA receive a pseudonymous billing customer ID, store and product identifiers, purchase or entitlement status, verification time and paid-through time so access can be purchased, restored and verified. AYDEXA does not receive full card details and does not retain raw store receipts or purchase tokens in the citizen database. A premium reminder stores only the public program reference, an official or user-confirmed date, reminder time and status. Alert topics are explicit choices and are not inferred from searches, Screening, Camera or Analytics.
Alerts and local letter tools
Public Push delivery remains off unless AYDEXA separately enables it with explicit opt-in. Topic choices remain explicit and are not linked to Screening, Camera or Analytics. Camera photos and recognized letter text remain local and temporary; there is no cloud letter processing, external AI or OpenAI service in this release.
Retention and removal
Local preferences and bookmarks remain until changed, cleared where the app offers that action, or the app's data is removed. Temporary screening, checklist and Camera data follow their session cleanup rules. Pseudonymous Analytics material is retained for at most 35 days; identifier-free aggregates for at most 25 months. Account-linked profile, entitlement and reminder rows remain while the account exists and are deleted with the Auth account through the implemented deletion flow, except limited security or billing audit metadata that is not a citizen content record. Store subscriptions must be canceled separately with Apple or Google. AYDEXA also requests deletion of the pseudonymous RevenueCat customer; if that request fails, the app reports that it remains pending.
Providers, links and security
Supabase supplies authentication, database and server-function infrastructure. RevenueCat coordinates subscription status with Apple App Store and Google Play, which process purchases under their own policies. Expo/EAS supports app builds and notification infrastructure. Network services necessarily process connection information to deliver requests. AYDEXA uses HTTPS, restricted backend access, encryption for protected Apple revocation credentials and MFA for administrators. No system can guarantee absolute security. Official links open agency websites with their own policies. AYDEXA does not sell data, use cross-app tracking or share data for behavioral advertising.
Contact
Contact support@aydexa.com for AYDEXA privacy or support questions. Do not submit personal letters, identity documents, account numbers, screening answers or health, financial, legal or immigration case information through ordinary email. The catalog includes family programs, but AYDEXA accounts are intended only for adults age 18 or older.