Privacy Policy

Version 1.0 · Last updated 2026-10-25 · Effective date 2026-10-25

1. Who we are

Msg Archive ("the App") is a tool for importing, searching and exporting chat history on iPhone, published by Lu Li (the "Developer"). We are the data controller for the limited personal data described in this policy.

Contact: support@gougou.me · Website: https://gougou.me

2. The short version

• Your messages never leave this device. This version contains no network code: importing, text recognition, search, export and backup all run on the iPhone.
• No account. We collect no name, email or phone number, and we run no server.
• No ads, no third-party analytics, no cross-app tracking. We do not use the Advertising Identifier (IDFA) and do not request App Tracking Transparency permission.
• What leaves your device: a file you export or share, a backup you choose to save somewhere, a support email you send us, and any device backup you enable yourself.
• Your archive is excluded from iCloud / computer backups by default, unless you turn that on in Settings.

This is a summary; the rest of this policy explains the details.

3. What we do not collect

4. What the App processes on your device

The data below is stored only in the App's private container on your iPhone. We cannot read it remotely.

4.1 Archive database

To display, search and export, the App stores in a local database:

• each message's text, sender name, timestamp, type and whether it is a system message;
• the conversation name, participants, import method, source time zone and date-order choice;
• which files belong to which message, plus the list of unassigned files;
• for screenshot imports, the source screenshot number, a SHA-256 digest of the source frame, and the "needs review" flag;
• the full-text search index.

An archive can contain other people's personal information, such as the names and phone numbers of the other participants. Use the App only where you are entitled to keep that content, and follow applicable privacy law when exporting or sharing it.

4.2 Media files

On import, images, audio and other files from the export are matched to messages and copied into the App; files that can't be matched are kept as "unassigned attachments" and counted in the report. Deleting a conversation deletes its files and index entries, and the App verifies that nothing remains.

4.3 Screenshot recognition (OCR)

Text is recognized with Apple's Vision framework on the device and never uploaded. You can optionally keep copies of the source screenshots, on the device only.

4.4 Backups

Backups use chunked AES-256-GCM encryption, with either a passphrase (PBKDF2-SHA256, 600,000 iterations) or a device-only key held in the Keychain. You choose where to save the file; the App never uploads it. The passphrase is not stored, and if you forget it nobody can open that backup.

4.5 Device backup

Your archive is excluded from iCloud and computer device backups by default, so it doesn't leave the device without your explicit choice. You can enable "Include in iCloud / computer backup" in Settings.

4.6 App lock

With the app lock on, authentication is performed by iOS; the App only receives a success or failure result and never accesses Face ID or fingerprint data. Content is covered when you leave the App.

4.7 Diagnostics

Technical information about failures is written to the iOS system log and is never sent anywhere automatically.

5. Permissions

• Face ID / Touch ID — used only to unlock the App when you enable the app lock; the device passcode is the fallback.
• Photos — the system photo picker is used to import screenshots; the App does not request photo library access.
• Files — the system file picker is used to import exports and save backups; the App can only read and write what you select.
• Nothing else — the App does not request camera, microphone, contacts, location, Bluetooth or local network access.

6. Purchases

This version has no in-app purchases and costs nothing. We do not collect payment information and do not use a subscription or purchase provider.

7. What leaves your device

The App contains no analytics, advertising, crash-reporting or data-broker SDKs. We do not sell personal information and do not use it for cross-context behavioural advertising.

8. Service providers

The App has no third-party SDKs and no server. iOS itself (Vision, the photo and file pickers, local authentication, the Keychain and system backup) processes data under Apple's terms.

9. Retention and deletion

After deleting a conversation or all data, the App verifies that no database records, files or index entries remain. Deleting the App deletes the archive unless you saved a backup elsewhere.

10. Security

Data is protected by the iOS sandbox and data protection, and the database and media are readable only after the device's first unlock. You can turn on the app lock (Face ID / Touch ID / device passcode) and content is covered when you leave the App. Backups use AES-256-GCM, with a passphrase derived through 600,000 PBKDF2 iterations or a device-only Keychain key available after unlock. Because we run no server, the main risks are your device passcode and where you store the backup file. No method of storage is completely secure.

11. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to complain to a supervisory authority.

Because we have no account and hold no archive:

• Data on your device can be viewed, exported and deleted in the App, or removed with "Delete all data".
• Backup files are yours to keep or delete.
• Support email can be deleted on request.

To exercise any right, email support@gougou.me. We answer within 30 days (45 days for California requests) and may need to verify the request.

EEA / UK (GDPR / UK GDPR): our legal bases are performance of a contract (providing the App) and legitimate interests (security and improvement). Because the data stays on your device, we cannot access or delete it for you; you can do so in the App.

California (CCPA / CPRA): we have not sold or shared personal information in the past 12 months. You have the right to know, delete, correct and opt out, and we will not discriminate against you for exercising those rights.

China (PIPL): the App processes chat history on your device and does not transmit its content. An archive can contain other people's personal information; make sure you are entitled to process it.

12. International transfers

We are located in the People's Republic of China. If you email us, your message may be processed by service providers in other countries under standard contractual clauses or an applicable adequacy decision where required. Apart from email and files you export or back up yourself, the App transfers nothing.

13. Children

The App is not directed to children under 13 (16 in the EEA/UK). We do not knowingly collect personal information from children.

14. Third-party links

The App and this page may link to Apple or other websites. Their privacy practices are governed by their own policies, not this one. The App is not affiliated with any messaging service.

15. Changes to this policy

We may update this policy as the App or the law changes. A new version will carry a new "Last updated" date, and material changes will be described in the App or on this page before they take effect. Continuing to use the App after the effective date means you accept the updated policy.

16. Contact

Lu Li
Email: support@gougou.me