Privacy Policy

What data the app collects

When you sign in, the app stores:

• Your Google or Apple account ID (a stable identifier from the provider)
• Your email address (from the provider)
• Your display name and profile picture URL (from the provider)

These come from the Sign in with Google / Sign in with Apple flow. The app does not ask for additional profile fields.

While you use the app, the app stores:

• Each activity you log: distance, duration, date, optional notes, optional city, activity type
• Weekly goals you set
• Annual goals you set
• Reflections the app generates on your behalf
• Your app preferences (units, default activity)

All of this is scoped to your account — you only see your own data, and nobody else can see it.

Where data is stored

• On your device: A local SwiftData cache so the app feels instant and works offline for reads.
• Supabase (Postgres + Auth): The system-of-record copy of your account and activity data. Row-level security ensures each row is only readable and writable by the user who owns it.

The app does not store data with any other third party.

Third-party services

• Supabase — handles auth, database, and the API proxy described below. Their privacy policy: supabase.com/privacy
• Anthropic — when you ask the app to generate a reflection or parse a voice entry, the relevant text is sent to Anthropic’s Claude API via a server-side proxy. Anthropic does not train on this data per their API policy. Their privacy policy: anthropic.com/legal/privacy
• Apple — Sign in with Apple may issue you an anonymous private relay email. The app stores whatever email Apple returns.
• Google — Sign in with Google returns your name, email, and profile picture URL.

Voice recordings

When you log an entry by voice, the app uses Apple’s on-device Speech Recognition to transcribe what you say. The audio itself does not leave your device. The transcribed text is sent to Anthropic (via the proxy described above) so the app can extract distance, duration, and notes from it.

Location

If you allow location access, the app uses your current location to suggest a city name when you log an activity. Location coordinates are not stored — only the resolved city name, and only if you keep it on the entry.

Account deletion

Settings → Account → Delete account permanently removes your account and every row of data associated with it from Supabase. This action is not reversible.

Data sharing

The app does not share, sell, or trade your data. The app does not run advertising. The app does not track you across other apps or websites.

Contact

Questions: ztwalsh@gmail.com