Just Ask, Privacy policy
The short version
- We don't have accounts, analytics, advertising or tracking in The Board.
- We never receive your questions or answers. The app sends them from your phone to OpenRouter, which passes them to the AI companies you pick. That happens under your own OpenRouter account.
- Your OpenRouter key, saved rulings and settings stay on your phone.
- If you buy the unlock, we use RevenueCat to confirm and restore the purchase. We never see your name, email or card details.
- You can delete everything the app holds at any time: Settings → Withdraw consent and delete everything.
1. Who we are
Just Ask, The Board ("the app") is made by Just Ask Apps Ltd, a company registered in England and Wales (company number 16606404), registered with the Information Commissioner's Office (ZC135283). In this policy "we", "us" and "our" mean Just Ask Apps Ltd. We are the controller for the limited personal data described in section 3.3 to 3.6. Contact us about privacy at [email protected].
This policy covers the iPhone and Android app and the pages at justask-apps.co.uk/the-board. Our Just Ask, HR privacy policy is separate and does not apply to this app.
2. How the app works, in one paragraph
You connect your own OpenRouter account (OpenRouter, Inc., USA). When you ask a question, the app sends it directly from your phone to OpenRouter, using your OpenRouter key. OpenRouter forwards it to the AI model providers you have put on your board (for example OpenAI, Anthropic, Google, xAI, DeepSeek, Mistral and others) and returns their answers to your phone. The app then asks the models to review each other's answers and asks a "Chair" model to write the ruling, in the same way. Our servers are not involved in any of this.
3. The information involved
3.1 Your questions, follow-ups and the AI answers
We do not collect, see or store these. They are sent to OpenRouter and the model providers you choose, and processed under your agreement with OpenRouter and the model providers' terms. OpenRouter and each provider decide for themselves how long they keep this data and what they use it for. See OpenRouter's privacy policy; your OpenRouter account settings also let you control prompt logging and which providers may be used based on their data policies.
Before you use the app for the first time we ask for your agreement to this sharing. Please don't include information you wouldn't want those companies to have, such as health information or other people's personal data.
3.2 Information kept only on your phone
- Your OpenRouter key, kept in your phone's secure storage (the iOS Keychain, or Android's Keystore-protected storage). It is only ever sent to OpenRouter.
- Your last 50 rulings, your board choices and your settings.
- Your consent record (the date you agreed), the number of trial rulings you have used, and whether the app is unlocked.
We cannot access any of this. The Android app opts out of Android cloud backup and device-to-device transfer. On iPhone, your saved rulings and settings may be included in your phone's own iCloud or computer backup, which is under your control; your key is not. Deleting the app, or using Withdraw consent and delete everything in Settings, removes it. The trial-ruling count and unlock status are kept after that option so the trial can't be reset; uninstalling removes them.
3.3 Purchases
The unlock is sold by Apple (App Store) or Google (Google Play), who act as independent controllers for your payment under their own privacy policies. To confirm, restore and account for purchases, the app uses RevenueCat (RevenueCat, Inc., USA) as our processor. RevenueCat receives a random app user ID created on your phone, the store's purchase record (product, price, currency, store country, dates, transaction identifiers), basic device information (platform, operating system version, app version, language) and your IP address as part of the connection. We do not receive your name, email address or payment card details.
3.4 Connecting OpenRouter
When you tap Connect OpenRouter, you sign in on OpenRouter's own website in a secure browser window. We never see your OpenRouter password. OpenRouter then sends a one-time code to our page at justask-apps.co.uk/the-board/connect, which hands it to the app. The app exchanges it with OpenRouter for your key, using a secret that never leaves your phone. The code is useless on its own and expires within minutes. Our website host, Cloudflare, may keep standard security logs of that page request (including IP address) for a short period.
3.5 Model list, credit balance and exchange rates
The app asks OpenRouter for its public list of models and, using your key, for your remaining credit. To show costs in pounds or euros, it downloads the day's exchange rate from ExchangeRate-API (open.er-api.com); only standard connection data such as your IP address is sent.
3.6 When you contact us
If you email us, we use your name, email address and message to reply and to improve the app.
3.7 What we don't do
No analytics, no advertising identifiers, no tracking across apps or websites, no crash-report collection, no selling or renting of data, and we do not train AI models on anything. We make no automated decisions about you. The app and these web pages set no cookies. The app stores only what it needs to work on your phone (listed in 3.2).
4. Why we use it (lawful bases)
| Purpose | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Confirming, restoring and supporting your purchase | Purchase record, app user ID, device information | Contract (Art. 6(1)(b)) |
| Keeping tax and accounting records | Purchase record | Legal obligation (Art. 6(1)(c)) |
| Preventing fraud and abuse of purchases | Purchase record, IP address | Legitimate interests (Art. 6(1)(f)) in protecting our business |
| Replying to you and improving the app | Your email and message | Legitimate interests (Art. 6(1)(f)) in supporting users |
| Running the connect page securely | IP address in server logs | Legitimate interests (Art. 6(1)(f)) in keeping our website secure |
The sending of your questions to OpenRouter happens at your request, under your own account, and with your agreement given in the app. You can withdraw that agreement at any time in Settings.
5. Who else is involved
- RevenueCat, Inc. (USA): purchase verification. Our processor, under its data processing agreement.
- ExchangeRate-API: supplies the day's exchange rates. It receives only connection data, not anything you type.
- Cloudflare, Inc.: hosts our website. Our processor.
- Our email provider: stores support emails. Our processor.
- Apple and Google: app distribution and payments. Independent controllers.
- OpenRouter and the AI model providers you choose: process your questions under your own relationship with OpenRouter. Independent of us.
We will also disclose information if the law requires it.
6. International transfers
RevenueCat and Cloudflare may process data in the United States and other countries. Where they do, we rely on appropriate safeguards, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum to the European Commission's standard contractual clauses. Transfers to OpenRouter and model providers happen under your own agreement with OpenRouter.
7. How long we keep it
- Purchase records: for as long as you may need to restore your purchase, and for six years after the end of the financial year of the purchase to meet UK tax rules.
- Support emails: 24 months after the conversation ends.
- Website security logs: as set by Cloudflare, normally no more than a few days.
- Information on your phone: until you delete it or the app.
8. Security
Everything the app sends travels over encrypted connections (HTTPS). Your key is held in your phone's secure storage and is never sent to us. Setting a spending limit on your OpenRouter key adds a further safeguard. You can revoke the key at any time at openrouter.ai/settings/keys.
9. Your rights
Under UK data protection law you can ask us for a copy of your personal data, and ask us to correct it, delete it, restrict or object to how we use it, or transfer it. Email [email protected]. Because we hold very little and it isn't tied to your name, we may ask for your store order or transaction ID (from your Apple or Google receipt) so we can find the right record. We reply within one month.
- Delete what's on your phone: Settings → Withdraw consent and delete everything, or uninstall the app.
- Questions sent to OpenRouter or model providers: contact OpenRouter or the provider directly; we don't hold them.
10. Children
The app is for adults aged 18 and over. We do not knowingly process data about children.
11. Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app before the change applies.
12. Complaints
If you are unhappy with how we have handled your personal data, please tell us. Email [email protected] with "Data protection complaint" in the subject, or write to Just Ask Apps Ltd at our registered office. We accept complaints however they reach us. We will:
- acknowledge your complaint within 30 days;
- look into it without undue delay, and keep you updated;
- tell you the outcome and what we have done.
You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.