BombShelter records and transcribes shows on your iPhone or iPad. Raw or encoded microphone audio is not sent to an AI provider. When you approve AI audience reactions, the app sends only the minimized text evidence described below through BombShelter's authenticated service.
Information processed on your device
BombShelter records each show and stores its audio, transcript, timing information, delivery analysis, and audience reactions on your iPhone or iPad. On-device speech transcription, timing and prosody analysis, metering, and recording use microphone audio locally.
You can delete a saved show from Past Shows. Deleting it removes its local recording and associated show data. Removing the app also removes locally stored app data according to iOS or iPadOS behavior.
Information sent for AI audience reactions
Before a show begins, BombShelter identifies the selected AI model and asks for your permission to share the data that model needs.
GPT Realtime
When GPT Realtime is selected, BombShelter sends finalized transcript text and a bounded amount of prior transcript context through its authenticated service to OpenAI.
Other hosted models
When another hosted model is available in the production app and you explicitly select it, BombShelter may send finalized transcript text, bounded prior context, and compact derived timing and prosody summaries through its authenticated service to the named model provider. BombShelter does not silently substitute another model or run background model comparisons during your show.
Service protection and operational data
BombShelter uses Apple App Attest to verify legitimate app installations and protect its service from abuse. The service may process an installation-specific identifier and operational information such as request identifiers, timestamps, latency, selected provider, model or version, status, and error categories.
Operational logging is designed not to include microphone audio or transcript text. These records may be retained according to the configured service controls and the applicable terms of our providers.
Optional research submissions and model comparison
From a saved show, you may choose to submit it for review by the BombShelter research team. Before anything is submitted, the app shows a separate confirmation describing the data and asks you to confirm that you own or have permission to share the material.
A research submission contains transcript text, timestamps, recorded virtual-audience reaction timing, the selected model identity when available, app version information, privacy-preserving identifiers, and the exact derived classification evidence used during the show. That evidence can include bounded prior transcript context and audience actions, timing, prosody, missingness, and quality indicators. It never contains microphone audio.
Authorized research reviewers may send that same provider-neutral classification evidence to other available AI providers to compare where their models would have reacted. Only routing fields such as the requested provider, model, and request identifier change; BombShelter does not reconstruct or approximate evidence that was not submitted. Submissions are retained for no more than 90 days and may be withdrawn from the saved show while the submitting app installation remains available. You may also contact support with the submission identifier.
Tracking and advertising
BombShelter does not use information from the app to track you across other companies' apps or websites. It does not sell personal information or use app information for third-party advertising.
Service providers
BombShelter may use Apple for App Attest and platform services, Cloudflare to operate the authenticated broker, and the AI provider explicitly identified before a show. Depending on the models enabled in a particular app release, the disclosed AI provider may include OpenAI, Google, or Together AI. Each provider processes information under its own applicable terms and privacy commitments.
Retention and deletion
Local shows remain on your device until you delete them or remove the app. Opt-in transcript research submissions are automatically removed after 90 days or earlier withdrawal. AI providers and infrastructure providers may retain limited service or security information according to their configured controls and applicable policies. Because BombShelter does not require an account, service-side operational records may not be directly identifiable by a name or email address.
Your choices
- Decline or revoke AI data-sharing permission. BombShelter will not start another show for that model until you authorize it again.
- Choose whether to submit any saved transcript for research review and withdraw an active submission.
- Deny microphone access, although live show features cannot operate without it.
- Hide the live transcript while transcription, analysis, and saved history continue.
- Delete individual saved shows from Past Shows.
Security
BombShelter uses technical safeguards intended to protect its broker and minimize the information sent off device. No security method is perfect, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy as BombShelter evolves. The effective date at the top identifies the current version. Material changes will be reflected on this page and, when appropriate, in the app.
Contact
For privacy questions, deletion questions, or support, email support@bombshelter.app or visit bombshelter.app/support. You may always review the current policy at bombshelter.app/privacy.