Psybeam Privacy Policy

Last updated: 30 October 2026

Psybeam translates what you and the person you are talking to say, out loud and in real time. It has no sign-up, no advertising inside the app and no tracking. The audio of a conversation goes from your phone straight to OpenAI to be translated and does not pass through Midgar's servers. What Midgar's servers keep is an anonymous account for your minutes balance, an anonymous Midgar ID, a record of each translation session's length, and what is needed to recognise your purchases.

In short

• While you hold a talk button, the microphone audio is streamed from your phone directly to OpenAI, which translates it and sends the translated speech back. You are asked for your consent before the first conversation and can withdraw it in Settings.
• The text of a conversation appears on your screen and is not saved or uploaded. Psybeam keeps no history of what was said.
• The app keeps two anonymous identifiers: an account key for your minutes balance, and a Midgar ID that also works in Midgar's other apps. Neither holds a name, email address or other detail about you unless you choose to link Sign in with Apple.
• Purchases are made through Apple. Our own server verifies them and keeps the record of what you bought.
• Your location is used on your phone to suggest the other person's language and is never sent to us.
• Nothing is used for advertising or tracking, nothing is sold, and no data is given to third parties for their own use.

Who we are

Psybeam is published by Midgar Oy, a company in Finland, which is the controller of the information described here. You can reach us at support@midgarcorp.cc.

AI processing and your audio

To provide the app's core feature, the microphone audio of your conversation is streamed in real time, over an encrypted connection, from your phone directly to OpenAI's real-time translation service. OpenAI translates it, also turns it into the short line that shows what was heard, and sends the translated speech back to your phone. The audio is not sent to our servers and we never receive a copy of it or of the translation. The audio is used only to produce the translation and is not used by us to train AI models; OpenAI handles it under its own privacy and security commitments, which you can read on openai.com.

Before a conversation starts, our server asks OpenAI for a short-lived key for that one session and tells it which language to translate into. Your phone uses that key to connect to OpenAI. Our server keeps a record of each session: a random session id, which anonymous account it belongs to, the minutes reserved and the minutes used, and the time. The record holds no audio, no text and no language. It is deleted with your account.

The person you are talking to is translated by OpenAI in the same way. Tell them that the audio is processed in the cloud; the screen shows a Cloud AI notice for that reason.

Identity

Psybeam works without an account. On first launch we create an anonymous, device-based account that holds your minutes balance. It holds no name, email address or phone number. You may optionally Sign in with Apple, in the credits sheet, to keep and restore your minutes across devices. If you do, we store the identifier Apple provides and the email address Apple gives us, which may be Apple's private relay address; we never receive your Apple password. When you delete your account in Settings, this account, your minutes balance, the session records and everything linked to it, including the Apple identifier and email address, are deleted from our server.

The anonymous Midgar ID

The app also asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps both in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. When the ID is created or joined the app may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we receive Apple's attestation and nothing about you. The ID is sent with some requests as a sign-in token, and on the More Apps screen it shows which Midgar apps you already use. It is not removed by Delete Account in Psybeam, because your other Midgar apps share it. To have it deleted, email support@midgarcorp.cc.

Purchases

Minute packs are sold through Apple In-App Purchase. Each purchase carries your anonymous Midgar ID as Apple's app account token. The app sends the signed transaction record Apple issues (which pack, the price, the dates and Apple's transaction identifiers) to Midgar's purchase ledger at api.midgarcorp.cc, which keeps it linked to your Midgar ID so that your purchases can be restored in your other Midgar apps, and Apple's own server notifications about your purchases reach the same ledger. Our server checks the signed transaction of a minute pack before it credits your balance. From version 1.2.0, neither the app nor our servers send anything about your purchases to RevenueCat; earlier versions have RevenueCat validate purchases, and it receives the purchase receipt from Apple, an anonymous identifier that it generates and your IP address, but not your name or email address. We never receive your payment-card details.

On-device data

Your language choices, your settings and your consent are stored on your phone. The text of a conversation is shown on screen and kept in memory only while it is displayed. A diagnostic log is written on the phone too, recording errors, the app version and the country your phone is in when location suggestions are on, never what was said or any token. It does not leave your phone, and it is erased when you delete your account.

Location

If you grant location access, your approximate location is used on your phone, with Apple's geocoding service, to suggest the language of the country you are in. The location and the country are not sent to Midgar or to OpenAI and are not stored. You can turn the suggestion off with the Auto-detect switch in Settings or withdraw the permission in iOS Settings.

Advertising measurement

We may promote Psybeam with ads on the App Store. If you installed the app after tapping one of those ads, the app sends Apple's short-lived attribution token to our server, which asks Apple which campaign, ad group and search keyword produced the install and the country the App Store served it in, never who you are. Apple's App Store attribution includes no advertising identifier and no device identifier, which is why it requires no tracking permission. We keep those campaign details alongside your anonymous account purely to see which ads pay for themselves, we receive nothing that could recognise you in any other app or website, and we never share it.

More Apps

Settings has a Midgar universe card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and the app's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use.

The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.

Midgar's server runs on Cloudflare, which may keep standard request logs such as your IP address for a limited time. We do not use them for anything else.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Children

The app is not directed at children under 13 and does not knowingly collect information from them. It contains no advertising and no user-to-user communication.

What we don't do

We do not sell your data, show advertising inside the app, use advertising identifiers, run third-party analytics or crash-reporting software, or ask for tracking permission. We do not use your data to train AI models.

How long we keep data

• The audio and the translation: not kept by us. OpenAI handles them under its own commitments.
• Your anonymous account, its minutes balance, the session records and any Sign in with Apple link: until you delete your account in Settings.
• The Midgar ID record: until you ask us to delete it.
• Your settings and the log: only on your phone, until you delete the app or your account.
• Purchase records: Midgar's purchase ledger keeps them as financial records, linked to your Midgar ID until that ID is deleted, after which nothing links them to a live ID. RevenueCat keeps the records it received from earlier versions of the app under its own policy. Apple's records of your purchases: kept by Apple.

Your choices and rights

You can withdraw your consent to cloud AI translation at any time in Settings; translation is unavailable until you grant it again. You can delete your account in Settings at any time, which removes your anonymous account, your minutes and the records linked to it from our server and erases the data on your phone. Deleting the app alone removes the on-device data but not the server-side account. Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us at support@midgarcorp.cc and we will help. We process this information to provide the translation and purchases you ask for. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider and by OpenAI as our AI provider. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.