Privacy Policy

Last updated: 21 August 2026

ShortcutRouter is an iOS app that registers Shortcuts actions so you can send requests from your device to OpenRouter. This policy describes what the app does with data on your device and what it sends to third parties.

The same facts are summarized in Settings → Privacy Policy.

Who we are

ShortcutRouter does not create an account and does not operate a backend. There is no developer-operated server that receives your prompts, images, or API key.

What the app stores on this device

OpenRouter API key. You paste a key in Settings. It is stored in the device Keychain (After First Unlock, This Device Only) and is not synced through iCloud.
Model catalog cache. A list of OpenRouter models is cached in the app’s Application Support directory so Shortcuts can offer models while offline. The file is excluded from device backups.

You can delete the API key in Settings. After a restart, unlock the device once before locked automations can read the key.

What is sent to third parties

When you run Ask ShortcutRouter, Generate Speech, or a test call, the app sends data directly from this device to OpenRouter (https://openrouter.ai/api/v1) using your key:

Prompts and JSON Schemas
Images you attach (Ask only)
Text you send to Generate Speech

OpenRouter routes that content to the model providers you choose. OpenRouter’s own privacy policy applies to that processing. ShortcutRouter does not sell this data and does not use it for advertising.

Saving an API key is consent to send that content to OpenRouter and the providers it routes to. You can refuse by not saving a key, and you can withdraw by deleting the key.

What we do not collect

The app does not include analytics or advertising SDKs. It does not use App Tracking Transparency. It does not create a ShortcutRouter account.

Contact

Questions about this policy: use the support email listed on the App Store product page or TestFlight invitation.