Last updated: January 2026
BowTie Risk does not collect or store your risk assessment content. Risk assessment files remain under your control and are not sent to BowTie Risk.
Data storage
Your diagrams and assessments are saved as files you control. By default they are stored on your device; you may also save them to iCloud, OneDrive, Google Drive or any other location your organisation permits. BowTie Risk operates no servers of its own and sends no data to us.
Analytics and tracking
We do not use any analytics, crash-reporting, or tracking tools that collect or transmit personal data.
Third parties
Risk assessment content is not shared with third parties. Apple handles App Store transactions and RevenueCat is used for subscription entitlement validation. These services do not receive your diagrams, risk assessments or report content. We do not sell data or use advertising networks.
Subscriptions
In-app purchases are processed by Apple through the App Store. RevenueCat is used to validate subscription entitlement. BowTie Risk does not process or store payment information or risk assessment content through these services.
AI workflows
BowTie Risk includes workflows that prepare a purpose-built prompt for you to use with an AI tool of your choice, such as ChatGPT, Claude or Gemini. No AI model runs inside the app and no assessment content is sent anywhere by the app. You decide what to copy into your AI tool, and that content is then handled under that provider's own terms and privacy policy.
Terms of use
BowTie Risk is governed by Apple's standard End User Licence Agreement for App Store applications. See Apple's standard EULA.
Contact
For any privacy-related questions, contact us at contact@bowtierisk.app.
Organisations carrying out a security or procurement review can also see the Corporate page, which covers deployment, data handling and vendor security questionnaires.