Privacy

Last updated: 16 October 2026

Wasabi is operated by Batchu Venkata Sai Lokesh. This page explains how the Wasabi app and getwasabi.app handle information. You can reach the Wasabi team through our support form.

Your studio stays on your iPhone

Wasabi saves orders, customer messages, reference photos, recipes, entered costs, quote versions and saved AI cake plans locally on your iPhone. A recent studio review is cached locally and reused only while its date and order details still match. Your studio name is also stored on the device. If you activate AI, the app stores its device access credential in the iOS Keychain.

The app has no separate Wasabi account or automatic multi-device sync. In versions with iCloud backup enabled, you can choose to save and restore a complete studio snapshot in your own iCloud account. Device backups are separate from this feature.

AI is a choice

You can work manually. Invited pilot users can activate Wasabi AI with a one-time access code. Activation sends that code to Wasabi's service at api.getwasabi.app, hosted on Cloudflare. It does not send your customer orders.

AI analysis starts only after you choose the generation action shown on its review screen. A cake plan sends the customer message, the selected reference photo, and up to six recipe summaries to Wasabi and Anthropic. For an existing cake plan, it also sends the current working brief. Photos are resized before upload. Recipe names, serving counts and base working times reach Anthropic; separate ingredient costs and hourly rates do not. For a text brief, it sends the request text. For a change review, it sends the new message and the agreed portions, date, requirements and unanswered questions. Quote-version identifiers reach Wasabi to match that response, but are not forwarded to Anthropic.

A studio review sends details for up to 20 open orders: client and cake names, dates, status, servings, requirements, unanswered questions, change-review status and saved design summaries. Order identifiers accompany the review so the app can link each suggestion to the correct order. This action does not upload photo files or price and cost fields. Personal information in selected messages, briefs or photos is included in the corresponding AI action. Review the disclosure before generating.

Wasabi processes AI inputs, including selected photos, and responses in memory. Its service does not save prompt or response contents in D1, and Worker runtime logging is disabled. Cloudflare and Anthropic still process the information needed to provide their services. We do not promise zero retention by those providers. See Cloudflare's privacy policy, Anthropic's API retention information and commercial terms.

AI access records

Wasabi stores hashed invite codes and hashed device credentials, their expiry and redemption times, and request counters in Cloudflare D1. It uses these records to grant pilot access, limit usage and prevent reuse of an invite. The database does not store the usable invite code or device credential.

Device access lasts 30 days from activation. A daily cleanup removes expired device sessions. Invite records are removed after both their validity and any associated session have ended. The service retains shared daily request totals for the current day and two preceding days, then removes older totals during daily cleanup.

To limit repeated activation attempts, the service derives an hourly-changing identifier from the connecting IP address. Activation-limit records are removed by daily cleanup once their hour bucket is more than 24 hours old. The AI database does not store the raw IP address. Cloudflare separately processes network information to deliver and protect the service.

The OpenUI preview runs inside the app. It does not contact an OpenUI cloud service. Sample analysis uses fixed examples without calling an AI provider.

Optional iCloud backups

When you enable iCloud backup and choose Back up now, the app uploads a snapshot of your real studio to your private CloudKit database with Apple. It includes customer messages, current and historical reference photos, recipes, costs, quote versions and saved AI cake plans. It excludes your AI access credential, Apple purchase entitlement and notification permissions. Wasabi's AI server does not receive the backup.

The app checks the downloaded copy before reporting a verified backup. Snapshots do not automatically merge edits across devices. Choosing Restore replaces this iPhone's studio only after a preview and a separate confirmation; the app first keeps a local recovery copy. Turning the feature off does not erase snapshots already in iCloud. Backups use your iCloud storage and follow Apple's account and service rules. See Apple's iCloud privacy information.

Due reminders

Due reminders are optional local iPhone notifications for booked orders. When you turn them on, iOS asks for notification permission. The app schedules reminders for 9 am two days before and on the due date, using your current time zone. It keeps up to 60 of the earliest reminders scheduled and refreshes them when saved orders change or the app opens. Lock-screen text is generic; a local order identifier lets a tap open the related order. These notifications do not send your order details to Wasabi or Anthropic. Device settings control delivery. This feature does not provide server push or background AI reviews.

Paid AI verification

When you connect a supported Apple subscription to AI, the app sends Apple's signed transaction proof to Wasabi's Cloudflare service. The service verifies it and checks the current subscription with Apple. It processes the signed proof in memory and does not save that proof. It stores a hashed device credential, its creation and expiry, and the original transaction identifier needed to recheck access. Expired credentials and their linked original transaction identifiers are removed during daily cleanup.

Usage records contain hashed subscription and renewal identifiers and request counts. Hashing makes these identifiers pseudonymous, not anonymous. Period counters are retained to prevent a reinstall, restored purchase or replacement credential from resetting the allowance. Hourly records older than 24 hours are removed during daily cleanup. These records contain no cake briefs, photos or generated replies. Paid AI verification and Qonversion purchase reporting are separate services.

This website and contact requests

The site is hosted on Cloudflare. When you submit the contact form, we store the request type, message, time, email address and any name you provide in Cloudflare D1. The Wasabi team uses this information to review and respond to your request. We also forward a copy to our support mailbox for follow-up. An early-access request permits a response about access; it does not subscribe you to a marketing newsletter.

The form uses a daily-changing identifier derived from your IP address to limit repeated submissions. Rate-limit identifiers expire after 24 hours and are removed by the next daily cleanup. The contact database does not store the raw IP address or link these identifiers to your message. Cloudflare processes network information to deliver and protect the site under its privacy policy.

Contact submissions are scheduled for removal after 90 days, with cleanup running daily and before new submissions are accepted. This period describes our contact database, not Cloudflare's separate infrastructure logs or backups. Forwarded notifications, direct emails and replies are handled in the support mailbox under its provider's practices. We have not set a separate automatic deletion period for those copies. We do not add advertising trackers, analytics scripts or tracking cookies to this site.

The form does not send an automated email confirmation. A success message means your request was recorded. The form requires an email address so we can reply.

Sharing and subscriptions

Sharing a quote opens Apple's share sheet with a PDF. It may contain the studio and customer names, cake details, date, price and selected reference photo. The PDF excludes internal costing and the raw inquiry. The service or person you choose receives that copy.

Apple handles any App Store subscription and its payment details. Wasabi checks purchase entitlements through StoreKit. Canceling a subscription does not delete your locally saved studio. See Apple's privacy policy.

In app versions with subscription reporting enabled, Wasabi uses Qonversion to understand subscription status, purchases and renewals. Qonversion receives an app-user identifier, device and app information, and purchase or subscription history. Its service also receives network information such as an IP address. Wasabi does not send cake orders, customer messages, reference photos or internal costing to Qonversion.

Wasabi uses Qonversion's integration without the advertising identifier, IDFA. That does not mean Qonversion receives no data. Its privacy policy describes its handling of identifiers, technical and purchase information. We do not apply the website contact database's 90-day period to Qonversion records. Use Support for a request concerning subscription-reporting information.

Access, correction and removal

Use the support form to ask about or request removal of a website contact submission. Include the address or request details needed to find it, without sending passwords, private tokens or customer archives.

The app lets you edit current details and export individual quotes. iCloud backup versions also support complete studio snapshots and a local recovery copy during restore. The app does not yet offer an individual order/recipe delete control or an erase-all control. Earlier saved quote versions retain their original contents. The Wasabi team cannot remotely erase data held only on your iPhone, or recall PDFs you have shared.

You can stop future AI transfers by using the manual workflow. In Studio settings, Remove AI access from this iPhone deletes the saved device credential. It does not delete local orders, cancel an Apple subscription, retract earlier analysis or immediately remove the service's access records. Those records follow the expiry and cleanup described above. Contact us before removing the app if you need help preserving important work.