Your data. In plain words.

The Miracles app

Scope and versions

These notices cover Miracles and its features. Pro, Pulse and optional iCloud sync apply only when your installed version offers these features and you use them.

Two separate decisions before sharing

Before connecting, Miracles displays the gateway address and explains sending device and authentication information. This permission does not allow new content to be sent. The separate AI data sharing view explains messages, selected photos and files, conversation context, and their processing by gateway, AI and tool services. Miracles reads possible providers and server addresses from native configuration and the model catalog. This is not a complete recipient list: tools, extensions and proxies may use additional services whose operators and terms are not independently verified. Review your gateway services and privacy terms before sensitive content. Sending remains blocked without retrievable configuration and explicit content consent.

Validity and withdrawal of content permission

Displayed provider information and consent are stored locally per gateway. Miracles retrieves configuration before new content transfers. Detected changes to displayed routes or withdrawal require new consent. Unrelated settings that do not change this information do not require consent again. External service changes and changes during a request cannot be fully detected. Withdrawal in Settings → AI data sharing stops new transfers; it does not delete data already sent or stop agent tasks running on the gateway.

Who is responsible for what?

Noel Illinger provides the Miracles app and is responsible for the processing described here that we carry out, including support, voluntary feedback and any test gateways we operate. Independently operated gateways and their connected services remain the responsibility of their respective operators. Contact: [email protected]; the provider address is in the legal notice. You choose and operate your OpenClaw gateway, agents, models and integrations yourself or through a separate provider. Their processing depends on your setup and their terms. Miracles does not sell AI models or usage credits. Gateway hosting and AI usage are not included in the app; separately provided test access is explained below.

Messages, AI and connected services

When you send a message, Miracles transmits your text, selected attachments, conversation and reply references over encrypted HTTPS/WSS to your chosen gateway. Messages, answers, tool results and files may be stored there and forwarded to configured AI or tool providers. Depending on the configuration, they may process data outside the EEA. Check your gateway’s recipients and privacy settings before sending content. When your gateway is operated independently of us, there is no intermediary Miracles chat server, and we do not receive a copy of your conversations through the app. AI answers can be wrong.

Local models and external providers

A model configured as local on your gateway runs on the gateway operator’s infrastructure, not inside Miracles on your iPhone. This is separate from on-device Apple Intelligence used for optional Smart Titles. Depending on the gateway configuration, messages may instead go to external AI providers. Models and providers are configured on the gateway; a setup code, gateway token or password signs your device in to that gateway and is not an AI-provider API key. Even with local inference, the gateway, connected tools and media previews may store data or make additional network requests.

Separately provided test gateways

We may provide a separate test gateway for app evaluation. In that case, Noel Illinger operates it and may process and view test messages, selected attachments, and connection and device information there. Access is solely for the stated testing purpose and is not an included public hosting service. Use synthetic test data only. The accompanying access instructions identify the services used, processing location and availability. Test data is retained only for the evaluation and related troubleshooting; personal content that is no longer needed is deleted or anonymised unless legal retention requirements apply. Expiry of access does not itself delete stored data. Privacy and deletion enquiries can be sent to [email protected]. Conversation history, device grants and technical security/error records may also persist beyond an individual request. Device identifiers and IP/connection data support access security and troubleshooting, not advertising tracking. Where our test access uses OpenAI, it may also process technical connection data to determine a general region for security and service delivery. Disabling background AI or reaching the access expiry date does not automatically delete data.

Device identity and access

Pairing sends a device-specific cryptographic identity, public key, signature, app/device information and the necessary credentials to your gateway. The private key and stored credentials are scoped to the gateway and held in iOS Keychain, accessible only while the device is unlocked; they do not sync through iCloud Keychain. The gateway maintains its own device grant.

Drafts and outbox on your iPhone

Miracles stores text drafts, reply references, the selected agent and conversation, and unconfirmed outgoing messages in protected files within the app container. The saved outbox may include attachment data. These files are excluded from regular iCloud device backup. Question receipts observed on this device are also saved in these protected, gateway-separated files: question text, chosen answers, outcome and local recording time. Orbit keeps up to 200 receipts per gateway for 30 days, including replies to accompanying questions. Secret-input questions are excluded. This is not a cross-device question archive; answers that the app never received cannot be recovered from it. Unsent attachments are held in memory after import. Importing a video can create a temporary copy in the app’s storage, normally removed when the import finishes. If the app is interrupted, temporary files may remain until system cleanup or app deletion. An attempted send may also place attachment data in the protected outbox until its delivery state is resolved. Confirmed conversations are loaded from the gateway; there is no complete persistent local chat archive. Theme, gateway address and basic profile preferences are stored in local app settings. Those other settings are also subject to your iOS backup settings.

Photos, files and profile

System pickers grant access only to the photos or files you select; camera access is requested when using the camera feature. A camera photo is first added to your local draft. It is sent to your gateway only when you choose Send and have granted content-sharing permission. A selected chat photo is resized and re-encoded as JPEG. A profile photo is resized to at most 512 pixels and re-encoded as JPEG. Original image metadata is not carried over in those processes. Selected videos are imported as files without the photo re-encoding step and may retain embedded audio and original metadata, including location information. Files imported using the file picker may also retain their original metadata. Review videos and files before sending; they go to your gateway and its configured services like other attachments. On supported gateways, your profile name and uploaded photo are stored on the gateway and also shown in OpenClaw. Saving a received image uses the system share sheet and, when needed, add-only Photos permission. It does not grant access to your existing photo library. Photos manages the saved copy and any synchronization according to your device settings.

Images and documents in answers

Media and avatars on the same gateway may load when displayed. Images and files from external providers load only after a separate confirmation naming the destination. External avatars initially show initials or a symbol. Confirmation makes a direct HTTPS request to the named provider, which receives your IP address and technical request data. Your gateway token is not sent to external providers; automatic redirects are not followed. Media is cached in memory. Previewing and sharing creates protected temporary files removed when the preview normally closes; an app interruption can leave files until system cleanup or app deletion. Sharing passes the file to your chosen app or recipient.

What deleting and removing actually do

“Disconnect” pauses the connection. “Remove gateway” removes its credentials and device key from local Keychain, but does not delete the server grant, conversations, drafts or saved outbox. Draft text can be cleared in each conversation. To remove all local app files, use “Delete App” in iOS, not “Offload App”; remove the gateway in Miracles first because Keychain data can survive uninstalling an app. Files shared to other apps remain there. Separately revoke the matching device grant and manage messages, attachments, exports and backups on your gateway. Miracles cannot promise a universal retention period for those server records.

Smart Titles · Pro

Apple Intelligence creates titles from the beginning of the first message you send, on your device, without attachments or an additional AI service. It needs an eligible device, enabled Apple Intelligence and an available language model. If unavailable, the ordinary title stays; there is no automatic cloud fallback. In Settings → Pro Features → Smart Titles, turn the feature off or deliberately choose Gateway. Its configured helper model then receives the message excerpt to generate a title; external AI providers and additional costs may be involved. The recipient overview includes helper-model providers. The finished title is saved on your gateway and visible to people with access to the conversation. Your normal chat message still goes to your gateway and its services. Local title generation does not make the whole chat local. Existing titles are kept, and you can rename conversations yourself. There is no additional Miracles cloud or title telemetry.

Miracles Pulse · Voice

Miracles Pulse uses the compatible real-time voice service configured on your OpenClaw gateway. In this version, Pulse supports only OpenAI voice services. We recommend OpenAI GPT Live. Other voice providers available in OpenClaw are not supported by this version of Pulse. During a call, your microphone audio is sent directly to OpenAI. Your own gateway provides the voice access, saves completed voice contributions in the conversation and can use tools and other services through your agent. These agent and tool services may use OpenAI or other providers. Their privacy and retention terms also apply; processing outside the EEA is possible. Miracles does not store an audio recording or operate an audio cloud server. Audio-sharing consent and microphone permission are requested separately. A connected call can continue while the screen is locked. Ending the call or withdrawing audio consent ends the call; this does not delete accepted agent tasks or data already sent. Voice services and gateway hosting are not included in Miracles Pro. The voice provider and the services used by your gateway may retain the data they receive beyond the end of a call, including audio, transcripts and technical connection data. Not every service receives every type of data. Retention, deletion and possible use for model improvement depend on the service, agreement and account settings used by the gateway operator. For the OpenAI voice services currently supported by Pulse, API and ChatGPT access do not automatically have the same rules. No local recording does not mean that these services store nothing. We therefore do not promise a universal provider deletion period. Review the OpenAI privacy policy and the data controls for the account in use. Our separate evaluation access also has its own instructions; it is not a public hosting service. GPT Live can use a supported ChatGPT connection in OpenClaw; alternatively, a supported OpenAI API voice connection is required. Availability also depends on region, account and provider terms.

Optional iCloud sync for folders and preferences

When you explicitly enable iCloud Sync in Pro settings, Miracles sends folder names, appearance, ordering, chat-reference identifiers and selected display and comfort preferences to your private Apple CloudKit database. Chat text, previews, attachments, drafts, credentials, purchase rights and consents are excluded. Without activation, this folder data stays local. A new gateway connection still requires separate pairing; restored folders never grant access to chats. An active Pro entitlement is required for synchronization. When Pro access ends, synchronization pauses while your preference and existing data are retained. It can resume when Pro access returns if you have left sync enabled. Cancelling renewal does not end access before its valid expiry. Folder deletions sync too; this is not a historical backup. Turning sync off, removing a gateway or deleting the app does not delete already-synced iCloud data. Manage that data separately in your iCloud settings. Sync runs on opening, changes or your request and may be delayed by connectivity, iCloud availability and iOS.

Pro purchases through Apple

Apple processes purchases, payments and subscriptions. Miracles uses StoreKit on your device to verify Apple-signed purchase evidence, such as product and transaction identifiers, expiry and revocation. This evidence unlocks Pro; it is not sent to your gateway or a separate Miracles purchase server and is not linked with chat content. Miracles does not receive payment details such as your card number. Apple manages your purchase history under its terms. Restoration and subscription management use your Apple Account. The developer handles legally required financial records separately from your conversations.

Voluntary feedback

In Settings → Help → Feedback you can send your own submissions to our private Spark inbox. This is independent of your gateway and never automatically attaches chats or diagnostic data. Before each submission, read the offline feedback privacy notice there and choose whether to consent to processing including AI assistance; a Question requires your email address and permission to reply; contact details remain optional for other feedback. Protected local history is excluded from iCloud sync and device backup. Local deletion does not remove server copies. For withdrawal or deletion, contact [email protected] with your receipt reference.

Feedback: data and processing

The submission includes your title and text, kind and priority, app version and build, a random reference and the consent-notice version; the service records receipt and consent times. Name and email are sent only if you choose reply contact; a name remains optional. Chats, attachments, credentials and diagnostic logs are not attached automatically. The private feedback database is hosted in Germany. Cloudflare provides HTTPS transport and abuse protection and processes IP and network information. The service uses the source IP temporarily for rate limiting but does not store it in the submission table. Noel may use Amber through OpenClaw and OpenAI to help review submissions and draft responses; submitted content and provided contact details may be sent to OpenAI, including outside the EEA. Submission does not trigger an automatic AI task or public posting. Feedback is not used for advertising or model training.

Feedback: consent and deletion

The legal basis for voluntary feedback, including the disclosed AI assistance, is your consent under Article 6(1)(a) GDPR. Reply contact is a separate choice, required for a Question and optional for other feedback. You can withdraw consent with future effect through [email protected], quoting the reference from your receipt. Personal feedback is retained only while needed for the enquiry, fault investigation or assessment of the suggestion, or for legal retention and evidence requirements. It must then be deleted or anonymised. Archiving is not deletion. Protected backups may contain older copies; deletion requests must be reapplied after restoration. No automatic deletion deadline is promised. Deleting local history in the app does not remove our copy or withdraw consent.

Diagnostics and TestFlight

Miracles contains no proprietary advertising, analytics or crash-reporting SDKs and sends no app usage analytics of its own to the developer. Apple automatically collects TestFlight usage and crash information and shares it with the developer; Apple’s TestFlight notice does not provide an opt-out. This includes installation and device details. Personal invitations may include your name and email address; these are not shown to the developer when you join solely through a public link. If you submit TestFlight feedback, your comment, screenshots and associated technical information may go to Apple and the developer. Review images and attachments before submitting them.

Support, legal bases and retention

If you contact us, we process your contact details and the content you choose to provide to handle the enquiry. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries, otherwise Article 6(1)(f) (legitimate interests in useful support and resolving problems), and Article 6(1)(c) for legal obligations. We do not ask for access codes or private chat archives. Retention depends on the unresolved enquiry, necessary fault investigation and legal retention or evidence requirements; personal content that is no longer needed is to be deleted or anonymised. This is not a promise of automatic deletion at Apple or your gateway. We do not use support content for model training.

Email services and AI-assisted support

Email to our contact addresses is forwarded through Cloudflare Email Routing to an Apple iCloud mailbox. Our AI agent Amber, using OpenClaw and OpenAI model access, assists with reading, organising and drafting replies. Selected email content and technical details may be sent to OpenAI, including processing outside the EEA. Noel Illinger remains responsible for replies and decisions. Please send only information needed to handle the issue, not secrets or sensitive chat histories. These services are also subject to the applicable privacy and contractual terms of Cloudflare, Apple and OpenAI.

Background activity and system displays

When enabled, Miracles can continue an already-started transfer for a limited time and refresh activity from your gateway in the background, subject to iOS limits. This uses your existing gateway connection and permissions, not a separate Miracles messaging server. Live Activities can show activity counts, pending decisions, sending status and Pulse call duration or mute state on the Lock Screen and Dynamic Island. They do not include chat text, conversation titles, gateway addresses or credentials. People who can see your screen may see this status. Updates are generated locally; Miracles does not use a remote push server for this feature. Pulse also uses the iOS call interface, which can display the agent’s name. Miracles configures these calls not to appear in the Phone app’s Recents list. You can manage background activity and Live Activities in Miracles and iOS.

Your rights

Where the statutory conditions apply, you have rights of access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent with future effect. Contact [email protected]; for a gateway run by somebody else, contact its operator as well. You may complain to a data protection authority, especially where you live or where a suspected infringement occurs; in North Rhine-Westphalia this is LDI NRW. We do not use support data for solely automated decisions with legal or similarly significant effects.

This website

Delivery and hosting

This website is served from self-operated infrastructure in Germany. Requests process your IP address, time, requested URL, HTTP status and browser/connection information for delivery, availability, fault investigation and security (Article 6(1)(f) GDPR). This technical processing is required to deliver the website.

Cloudflare and international processing

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, sits in front of the site for DNS, proxy/tunnel delivery and security, processing technical request data. It may add protection and email-obfuscation scripts and use technically necessary security cookies. Processing outside the EEA is possible. Cloudflare’s data processing terms provide, in particular, Standard Contractual Clauses and applicable adequacy mechanisms. The terms actually agreed and services enabled matter; a German origin server alone does not guarantee processing only in Germany.

Storage and technical logs

This website’s origin server does not keep ordinary access logs. Error logs for technical fault investigation use limited, rolling storage; a specific incident may require a separate purpose-limited record. This is not a fixed deletion period in days. Cloudflare processes its own operational and security records under the terms applicable to its service.

Language, appearance and no advertising tracking

Our own site files and typography are served locally; we do not embed external analytics, advertising, video or social-media services. There is no advertising tracking. Your explicit language and appearance choices are optionally stored in this browser’s Local Storage until changed or the site data is cleared. They serve only the requested display preferences (§ 25(2)(2) TDDDG) and are not sent to us as a profile. Cloudflare’s technical security features are separate.

Links, contact and rights

External sites are opened only when you follow their links, at which point their privacy notices apply. An email link opens your mail app. The sections above cover contact enquiries, legal bases, retention and your rights. This website does not require a Miracles account or newsletter signup.