Privacy Policy

1. Information We Collect

1.1 Data Stored Locally on Your Device

The following data is stored exclusively on your device using Apple's SwiftData framework and is never transmitted to any server:

• Fasting session start and end times
• Fasting protocol selection and progress
• Sole water intake logs
• Conversation history with Sally AI
• Notification preferences and schedule settings
• App preferences and language settings

1.2 Data We Do NOT Collect

Sally does not collect, store, or transmit:

• Your name, email address, or contact information
• Device identifiers or advertising IDs
• Location data
• Usage analytics or behavioral tracking data
• Health data to Apple Health (unless you explicitly enable sync)
• Crash reports or diagnostic data to third parties

2. Sally AI (Foundation Models)

Sally's AI assistant is powered exclusively by Apple Foundation Models, which runs entirely on-device. This means:

• All AI processing happens locally on your iPhone using the Neural Engine
• Your questions and Sally's responses are never sent to external AI servers
• No API calls are made to OpenAI, Anthropic, Google, or any other AI provider
• Conversation history is stored in your device's local database

Apple's on-device Foundation Models framework is governed by Apple's own privacy practices. For more information, see Apple's Privacy Policy.

3. No Third-Party Analytics

Sally does not integrate any third-party analytics SDKs. We do not use Google Analytics, Firebase Analytics, Mixpanel, Amplitude, or any similar services. The only analytics available to us are the aggregate, anonymized metrics provided by Apple through App Store Connect, which are governed by Apple's privacy practices.

4. No User Accounts

Sally does not require you to create an account. There is no registration process, no email verification, and no server-side user profile. Because there is no account system, there is no password to forget and no account to delete — your data simply lives on your device.

5. iCloud Sync (Optional)

If you have iCloud enabled on your device, SwiftData may sync your fasting data across your own Apple devices through CloudKit. This sync is encrypted end-to-end by Apple and is controlled by your iCloud settings. Sally does not have access to your iCloud data beyond what is necessary to provide sync functionality. You can disable iCloud sync at any time through your device settings.

6. Notifications

Fasting reminders and motivational notifications are scheduled and delivered entirely on-device using iOS local notifications. No notification content is sent through our servers. You can disable notifications at any time through iOS Settings.

7. Data Deletion

Because all data is stored locally on your device, you have complete control over your data:

• Delete specific fasting logs within the app
• Clear all app data by deleting Sally from your device
• Disable iCloud sync to prevent cross-device data sharing

Since we do not store any data on our servers, there is no server-side data to request deletion of.

8. Children's Privacy

Sally is not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will address the situation promptly.

9. GDPR Compliance (European Users)

For users in the European Economic Area, because Sally does not collect personal data on our servers, most GDPR obligations do not apply to Sally App as a data controller. However, we are committed to GDPR principles:

• Data Minimization: We collect the minimum data necessary for the app to function
• Purpose Limitation: Data is used only to provide the fasting tracking service
• Storage Limitation: Data is stored locally under your control
• Integrity and Confidentiality: Apple's security frameworks protect your data at rest

10. CCPA Compliance (California Users)

Sally does not sell personal information, as defined under the California Consumer Privacy Act. Since we do not collect personal information through our app beyond local device storage, the CCPA rights of access, deletion, and opt-out of sale are inherently satisfied by the nature of our privacy-first architecture.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app's functionality or legal requirements. We will notify you of any material changes by updating the “Last Updated” date at the top of this page and, where appropriate, through an in-app notice.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: