Privacy Policy

Last updated 5 August 2026

Willi is a place to write honestly. That only works if what you write is yours. So the design rule underneath everything below is simple: your journal, your gratitude lists, your reframes, and your practice history are saved on your device. They are never uploaded to our server, and never handed to Willi as context. The one exception is spelled out below, and it is the one you'd want spelled out: if you dictate instead of typing, the recording has to travel to be turned into text.

This policy covers the Willi iPhone app and the website at billionaireoflove.com, both published by Hal D. Rosen. "We" below means that one person and the small service that runs Willi.

There is no account

You do not sign up, sign in, or give a name, email, or phone number to use Willi. We have no user database. There is no profile of you to sell, leak, or hand over, because one was never created.

What stays on your device

All of the following is written to storage on your own phone or browser and stays there. It is never transmitted to us:

Journal entries and any reflections saved with them
Gratitude lists
Reframes (the situation, the new meaning, the gentle step)
Practice logs, streaks, and progress through the Practice Path
Chapter progress, commitments, and exercise reflections
Your saved conversations with Willi
Blessings you have written
Your settings, such as whether Willi speaks replies aloud

On iPhone this lives in the app's private storage; if you use iCloud Backup, Apple's backup of your phone will include it, under Apple's encryption and Apple's terms. On the web it lives in your browser's local storage for this site.

The part people actually worry about: when you talk to Willi, we do not quietly attach your journal or gratitude entries to the conversation. Willi cannot read them. If Willi seems to remember something, it is because it appeared in a previous conversation with Willi, not because it was lifted from your private writing. The text you save is never transmitted; see below for what happens if you dictate it by voice rather than typing it.

What leaves your device, and exactly when

When you send Willi a message

The message you send, the earlier messages in that same conversation, and a short recap of your previous conversations with Willi are sent to Anthropic, which runs the Claude model that generates Willi's reply. This is what makes a reply possible. No name or email is attached, because we do not have one.

When you use your voice

Anywhere Willi offers a microphone — in chat, and also when you speak a gratitude entry, a check-in, or a reflection on a chapter — the recording is sent to ElevenLabs to be turned into text, and the text is handed back to you to edit before anything is saved. The recording is not kept afterwards, by us or on your device.

This is worth being clear about, because it is the one place your private writing does travel: the finished gratitude entry stays on your phone, but if you spoke it, the audio of you saying it had to go out to be transcribed. Typing instead keeps it entirely on your device. On iPhone, some dictation is handled by Apple's built-in speech recognition, in which case the audio never leaves the phone at all.

When Willi speaks aloud

If you turn on spoken replies, the text of Willi's reply is sent to ElevenLabs to be turned into audio in the author's voice. Your own words are not sent for this — only Willi's reply.

When you report a reply

If Willi says something wrong or hurtful, you can report it from inside the app. Doing so sends us the reply you are reporting, the reason you picked, and anything you wrote in the note. Your own preceding message is included only if you switch it on, and the screen shows you exactly what will be sent before you send it. Reports are read by a person and are not used for anything else.

When you join the reader list

Only if you type your email address into the signup box. It is passed to Kit (formerly ConvertKit), which hosts the reader list, along with a short note of which page you signed up from. We do not keep a copy ourselves. Every email from that list has an unsubscribe link, and unsubscribing removes you.

Who	What they receive	Why
Anthropic	Your messages to Willi and the conversation around them	To generate Willi's reply
ElevenLabs	Audio you record; the text of Willi's replies	Speech-to-text and text-to-speech
Kit	Your email address, only if you submit it	To run the reader email list
Render	Standard web traffic, including your IP address	They host the site and service

Each of these companies handles what it receives under its own privacy terms. We do not sell your information to anyone, and we do not use it for advertising.

What our server keeps

Effectively nothing. There is no database. Willi's server passes your message along, returns the reply, and holds on to none of it. The text of your conversations is never written to a log or saved to disk.

What it does hold, briefly, in memory only:

A device token. Your app or browser is issued a random identifier the first time it needs one. It is tied to nothing about you — no name, no email, no advertising ID — and exists only to count how many requests that one device has made today, so that a single user cannot exhaust the service for everyone.
Recent request timestamps for your IP address, kept for about a minute, to block automated abuse.
Daily request counts, which reset every day.

All of this is erased whenever the server restarts. Deleting the app or clearing your browser data discards the device token, and the next one is unrelated to it.

Messages are screened for crisis language

Before a message reaches the model, our server checks it for language suggesting suicide, self-harm, harm to others, abuse, or a medical emergency. If it matches, Willi answers with crisis resources instead of a generated reply. This check is automatic, happens in memory, and is not recorded or reported to anyone — nobody is notified, and no human reads your message. It exists so the app does not respond casually to something serious.

Willi is an AI companion, not a therapist, doctor, or crisis service. If you are in danger, in the US call or text 988.

Analytics

Willi does not use third-party analytics, advertising trackers, or session recording, and sets no advertising cookies. The website contains an optional, privacy-limited analytics hook that is switched off and sends nothing. If that ever changes, it would count only anonymous events like "the app was opened" — never the text of anything you write — and this policy would be updated first. The iPhone app contains no analytics or crash-reporting service at all.

Permissions the app asks for

Microphone and speech recognition — only when you choose to speak instead of type. Willi never listens in the background.
Notifications — only if you allow them, and only for a gentle daily practice reminder. You are not asked until you have actually used the practice.

Willi does not request location, contacts, photos, calendar, or health data.

Children

Willi is written for adults and is not directed to children under 13. We do not knowingly collect information from children. Because there are no accounts, we hold almost nothing to begin with; if you believe a child has sent us information, contact us and we will remove what we can.

Deleting your information

Everything you have written: deleting the app from your iPhone removes it. On the web, clearing this site's browsing data removes it. Because it was only ever stored on your device, that is the whole deletion — there is no server copy to request. Export anything you want to keep first.
The reader email list: use the unsubscribe link in any email, or write to us and we will remove you.

Changes to this policy

If this changes in a way that affects what leaves your device, the date at the top will change and the new version will be posted here before the change takes effect.

Contact

Questions about privacy, or a request to delete something, go to halrosen613@gmail.com. See also the support page.