Deletion, a copy, or a correction.

Fihris has no account, so a request is matched by one thing only: your App Store transaction identifier. What we can delete, and what we cannot, is set out below.

You can also email support@fihris.app with the subject “Data request”. Both arrive in the same inbox.

Send the request.

Digits only. Settings ▸ AI ▸ Fihris Intelligence in the app, or Apple's purchase confirmation email. Required.
So we can confirm when it is done. Required.
Optional.

Deleting the data we hold

There are two pieces of data about your use of Fihris Intelligence, in two different places, and we can only delete one of them. Both are described in full in the privacy policy.

What we hold, and can delete: the ledger. An opaque install identifier, the App Attest key registered to your install, your App Store transaction identifier, your billing period and allowance usage, any credit top-ups and what is left of them, per-hour and per-day credit totals, daily request and refusal counts, and your subscription's status as Apple last reported it. No question, no excerpt, no answer, no paper title, and no per-request record of what you asked.

What Cloudflare holds, and we cannot delete line by line: operational logs. One technical line per request — time, install identifier, transaction identifier, task type, model, token counts, duration, success or refusal, and the automated scope check's true/false result — written into Cloudflare's own logging systems so the service can be operated at all. It never contains your question, your excerpts or the answer. Those lines are retained under Cloudflare's storage and retention limits, not ours, and age out on Cloudflare's schedule.

Everything else — your Library, PDFs, notes and highlights — never left your device or your own iCloud, so there is nothing else for us to delete.

To have your ledger rows deleted, or to get a copy of them or have them corrected:

Email support@fihris.app with the subject "Data request" and your App Store transaction identifier.

We will delete the ledger rows and confirm when it is done. We will also tell you plainly that the Cloudflare log lines are not individually deletable by us and will expire on Cloudflare's retention schedule — we would rather say that than claim a power over someone else's log store that we do not have. If you need a firmer answer for a formal request, say so and we will go back to Cloudflare about it.

Deleting the ledger does not cancel your subscription — cancel that through Apple — and it does not touch anything on your device.

To clear the log Fihris keeps on your device of what was sent where, open Settings ▸ AI ▸ Sent to your account and tap Clear log. That log never leaves your device in the first place.