Privacy Policy - iOS App

Introduction

This Privacy Policy describes how DailyGoal ("we," "us," or "our") collects, uses, and protects your personal information when you use the DailyGoal iOS application (the "App"). By downloading, installing, or using the App, you agree to the practices described in this policy.

We are committed to protecting your privacy and handling your data responsibly. Please read this policy carefully to understand how we treat your information.

Information We Collect

We collect the following categories of information:

Account Information

• Email address: collected via Apple Sign-In when you create your account. If you choose to hide your email through Apple Sign-In, we receive only the relay email address provided by Apple.
• Profile photos: images you optionally upload to personalize your profile.

Health & Fitness Data

• Body composition data: body weight, body fat percentage, and related measurements you enter or sync from Apple HealthKit.
• Food logs: meals, calories, macronutrients (protein, carbohydrates, fat), and other nutritional data you record.
• Workout logs: exercises, sets, reps, duration, and other training data you record.
• Step counts: daily step data read from Apple HealthKit with your permission.
• Goals: calorie targets, macro targets, body weight goals, and fitness objectives you set within the App.

Usage & Device Data

• Error and crash reports: collected automatically via Sentry to help us identify and fix issues.
• Subscription status: managed through RevenueCat to determine your access to Pro features.

Apple HealthKit Data

DailyGoal connects to Apple HealthKit only with your permission. When you allow access, we:

• Read from HealthKit: step counts, body weight, and body fat percentage.
• Write to HealthKit: workout data, body weight, and body fat percentage.

We take your HealthKit data privacy extremely seriously. In accordance with Apple's requirements and our own commitment to your privacy:

• HealthKit data is used solely to provide the health and fitness features within the App.
• HealthKit data is never sold to any third party, including advertising platforms, data brokers, or information resellers.
• HealthKit data is never shared with third parties for advertising, marketing, or any purpose unrelated to providing health and fitness functionality to you.
• HealthKit data is never used to serve advertisements, build advertising profiles, or support any advertising-related purpose.
• HealthKit data is not disclosed to third parties without your explicit, separate consent, except as strictly required to provide core App functionality (e.g., secure storage on our backend infrastructure).
• You may revoke HealthKit permissions at any time through the iOS Settings app under Health > Data Access & Devices.

Weight, body fat, and step readings that the App reads from HealthKit are stored in your DailyGoal account. If you set up an API token or a connected app, that program can read these readings. See API Clients and Connected Apps below.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the DailyGoal service.
• To personalize your experience, including calculating your Total Daily Energy Expenditure (TDEE) and generating nutrition plans.
• To track your progress toward your fitness and nutrition goals.
• To sync health and fitness data between the App and Apple HealthKit.
• To send your data to API clients and connected apps that you set up.
• To process and manage your subscription through RevenueCat.
• To send push notifications you have opted into (see below).
• To diagnose technical issues and improve App stability via error tracking.
• To comply with applicable legal obligations.

Third-Party Services

We use the following third-party services to operate the App:

• Convex: managed serverless backend infrastructure where your data is securely stored and processed.
• RevenueCat: subscription management and in-app purchase processing. RevenueCat receives transaction data from Apple to manage your subscription status.
• Sentry: error and crash reporting to help us identify and resolve technical issues. Sentry may receive anonymized device and error information.
• Firebase Analytics: app install measurement and in-app analytics for the iOS app. Ad-related measurement signals are enabled only after your iOS tracking permission choice where required.
• Apple HealthKit: health data integration as described above, subject to Apple's own privacy policies.

Note: Google Analytics and Meta Pixel are used on the DailyGoal website (dailygoal.fit). The iOS app uses Firebase Analytics and Meta's mobile SDK instead of the website trackers.

API Clients and Connected Apps

With paid access, including a free trial, you can let programs outside DailyGoal use your data through the DailyGoal API. You choose whether to do this. You can connect a program in two ways:

• API token: you create a token in your DailyGoal settings and paste it into a script, an AI agent, or another API client.
• Connected app: you sign in to DailyGoal from an AI assistant or other app and approve it on a DailyGoal consent screen. The screen shows the app's name, the website it will return you to, and what it can read and change. Apps we do not recognise are labelled "Unverified app".

When you connect a program, we send it the data it requests. A connected program can:

• Read, add, change, and delete your weight, body fat, and step readings, food entries, custom foods, workouts, and goals.
• Search the food catalogue, including your custom foods and saved meals, and search the exercise catalogue.
• Read your timezone, preferred units, usage limits, and whether you have paid access.

Once a program receives your data, its provider handles that data under its own terms and privacy policy. We do not control what it does with your data.

To run the API, we keep the following records:

• For an API token: a one-way hash of the token, a short prefix so you can recognise it, and when it was created and last used. We do not store the token itself.
• For a connected app: the app's name, the website it returns you to, and when you connected it and last used it.
• A note on each record written through the API that it came from the API, and which token or connected app wrote it.
• Which token or connected app made each request, and the app's name. Our request logs do not contain your token or the contents of your requests.

You can stop a program's access at any time:

• Revoke your API token, or any single connected app, in your DailyGoal settings. Revoking takes effect immediately.
• Regenerating your API token stops the old token immediately.
• Signing out on all devices, resetting your password, or deleting your account revokes every API token and connected app.

If your paid access ends, API access pauses and requests are refused. Your token and connected apps stay listed in settings, where you can still revoke them. Access resumes if you subscribe again.

Revoking access stops future requests. It does not remove data a program already received. To ask a provider to delete that data, contact the provider.

Push Notifications

With your permission, DailyGoal may send you the following types of push notifications:

• Morning reminders: daily reminders to log your meals and workouts.
• Streak reminders: notifications to help you maintain your logging streaks.
• Milestone celebrations: congratulatory notifications when you reach goals or achievements.

You can enable, disable, or customize push notifications at any time through the iOS Settings app under Notifications > DailyGoal.

Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide you with the App's services.

You may delete your account at any time from within the App. When you delete your account, all of your personal data is permanently removed from our systems, including your profile information, fitness data, food logs, workout logs, and any other data associated with your account. This action is irreversible.

To delete your account, go to Settings > Account > Delete Account within the App, or contact us at admin@dailygoal.fit.

Data Security

We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Data is transmitted using TLS encryption and stored securely on our backend infrastructure. We regularly review our security practices and work with trusted service providers who maintain strong security standards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy within the App or by other appropriate means. Your continued use of the App after the effective date of any changes constitutes your acceptance of the revised policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at admin@dailygoal.fit.