Privacy

Fullday — Privacy Policy

Published by GR Design Build LLCEffective date: October 9, 2026

No account, no ads, no analytics and no tracking. Here is the current version of the Fullday app's privacy policy, word for word. This is the page the app links to.

The short version

Fullday has no accounts, no analytics, no advertising and no tracking. Your workouts, food log, body measurements and settings live on your devices — iPhone, iPad, Mac, Apple Vision Pro and Apple Watch — and, if you have Pro, in your own private iCloud database, which only you can read. A workout's heart rate and calories, your routes, saved routes, your privacy zone (home), imported activities, training plans, dream notes, what listening for snoring keeps and your cycle log are never put in iCloud. We never see any of it — the only things that pass through our servers are what you choose to send (an AI request or a service sign-in, below), and they keep no copy.

What stays on your device

Everything you log: workouts, sets, routines, programs, food and water, fasting, body measurements, sleep (times, how the night felt, your tags and notes), targets you set, achievements and preferences. It is stored on your device. With Fullday Pro and iCloud turned on, it is also synced through Apple's CloudKit to your private iCloud database so it appears on your other devices. We have no access to your iCloud data.

These are never synced and stay only on the device that holds them:

  • A workout's heart rate and calories — from a heart-rate strap, an Apple Watch or Apple Health. They stay on the device that recorded them (for workouts logged before this change, the device that moved them out of iCloud), in a protected file — not in iCloud and not in iCloud or computer backups. Your other devices get the workout itself (sets, times, effort and notes) without them; where a device has Apple Health, Fullday may show what Apple Health on that device has for the workout's time, without storing or syncing it.
  • Your cycle log, if you use cycle tracking — kept the same way.
  • Your birth year, sex and height from Apple Health. Where you haven't typed your own in About you, Fullday reads them from Apple Health on your iPhone or iPad each time they're needed (for heart-rate zones, energy estimates and suggested targets, and age-based rules) and keeps a copy only on that device — protected, and not in iCloud or backups. They are never saved in About you or synced. On Apple Vision Pro, Fullday reads only your date of birth, to set heart-rate zones when you haven't typed a birth year, and keeps no copy. What you type in About you yourself is saved and synced like the rest of your log — and so are values an earlier version of Fullday copied into About you with its "Fill in from Apple Health" button, which can't be told apart from typed ones. They stay in About you, and sync, until you change them or choose "Read from Apple Health instead", which Fullday offers once on each iPhone and iPad where they match Apple Health (on Today and in About you).
  • Routes. The GPS route of a run, ride, walk or hike you record — on your iPhone, iPad or Apple Watch — stays on the device that recorded it (the watch hands its copy to your own iPhone) and, if you allow it, in Apple Health. It is never put in iCloud or in backups. The workout itself (distance, time, effort) syncs like any workout. A route is deleted with the workout: at once on the device where you delete it, and on your other devices 30 days after the delete reaches them — the wait is in case the workout was only hidden for a while, by signing out of iCloud say. You can also delete every route kept on a device on the Privacy screen; the workouts stay.
  • Imported Strava activities. If you import your Strava archive (Me → Your data → Import from another app → Strava archive), the runs, rides, walks and hikes in it — routes, heart rate, power and cadence — are read from the file you choose and kept only on that device. They aren't uploaded, synced to iCloud or written to Apple Health. "Delete Imported Activities" on that screen deletes them and every copy made from them, below; the Privacy screen has the same button, and an imported activity's page deletes just that one.
  • Records and segments. To find your best efforts and the stretches you repeat, Fullday keeps a copy of each run's, ride's, walk's and hike's route — resampled every 25 metres, with its times, altitude and heart rate, including the ones other apps save to Apple Health and the ones you import — and a small outline for the list's thumbnails, in the device's cache, along with the heatmap's drawn map tiles of your routes. It's worked out on the device, never leaves it and isn't backed up. It's deleted with the activity — at once when you delete it on that device, or delete your imports or every route; when the delete comes from another device, the next time Fullday opens. Apple Health's are deleted when you turn Apple Health off for Fullday, and the next time your activities are brought up to date after Fullday can no longer read them. Deleting heart rate and calories (below) takes the heart rate out of these copies too.
  • Bluetooth sensors. The sensors you pair (their names) are remembered on that device only; their readings are saved with the workout on the device that recorded it and, if you allow it, in Apple Health.
  • Training plans. If you follow a running or riding plan, the plan, its daily adjustments and which activities counted for it are kept on that device only — not in iCloud, backups, the CSV export or the AI coach. Plans are set up on an iPhone or iPad (the devices that record runs and rides).
  • Sweat-rate checks. If you check your sweat rate (your weight before and after a session and what you drank), the checks are kept on that device only — not in iCloud, backups, the CSV export or the AI coach. Weights it fills in from Apple Health are read on the device and saved only with that check.
  • Dream notes. A dream you jot down on a night's check-in stays only on that device, in a protected file — not in iCloud, backups, the CSV export or the AI coach. If you lose the device, they go with it. Delete them all on the Privacy screen, or one with its night (deleting a night deletes its dream; clearing the text deletes it).
  • Saved routes (Pro). Routes you draw in the route builder, import from a GPX file or save from an activity — their line, name, sport, turns and climb, and the map thumbnails made of them — are kept only on the device you saved them on, in a protected file: not in iCloud or device backups, not in the CSV export or the AI coach, never sent to us. A route you choose to send to your Apple Watch goes to it directly from your iPhone. Delete one on its page, or all of them on the Privacy screen ("Delete Saved Routes", which also takes the route off your watch). To use a route on another device, share it yourself as a GPX file. While you draw a route with "Roads & paths" on, the points you place are sent to Apple Maps (Apple's directions service) to find the way between them, and the map and its thumbnails come from Apple Maps, as with any map in the app — under Apple's privacy policy; nothing about you goes to us. The climb of a drawn route is worked out on the device from your own recorded activities along it.
  • Sounds in the night. If you use "Listen for snoring", each night's minutes of snoring and counts of sleep talk and coughs, and any short clips you chose to keep (deleted after 7 days), stay only on that device — not in iCloud, backups, the CSV export, Apple Health or the AI coach. See "Devices and permissions" → Microphone.
  • Privacy zone (home). If you set one, the point you choose as home and its radius are kept only on that device, in a protected file left out of backups — not in iCloud, the CSV export or the AI coach, never sent to us. It's used only to leave the part of your routes near home out of the pictures you share. Remove it in Activities → Heatmap → the zone ("Remove Privacy Zone"). It doesn't change GPX files you share or the route saved in Apple Health.
  • Challenges and badges. Which challenges you joined, your progress and the badges you earned are worked out on the device from your history and kept on that device only — not in iCloud, backups or the AI coach, never uploaded. A new device starts without them.

Apple Health

If you allow it, Fullday reads from and writes to Apple Health. It saves your workouts — strength sessions, and the runs, rides, walks and hikes you record with their routes and distance — with heart rate, and power, cadence and speed from Bluetooth sensors; the food and drinks you log, with the vitamins and minerals of supplement doses you log; water; body measurements; the sleep you log; your check-ins' mood and stress (as State of Mind); and, if you track your cycle, period days. Your Apple Watch saves the workouts you record on it, with their route, distance, heart rate and calories. Fullday reads activity, steps, sleep, heart rate, heart-rate variability, body measurements and workouts from other apps — including the routes and heart rate of runs, rides, walks and hikes that other apps and devices (Garmin, COROS, Wahoo, Apple's Workout app and others) save there — so it can show them to you, and if your Apple Watch records breathing disturbances during sleep, that nightly number with Apple's own "Elevated / Not Elevated" label, which it shows without storing or interpreting. You choose each type in Apple's permission sheet and can change it any time in Settings → Privacy & Security → Health → Fullday. The Mac version doesn't use Apple Health; on Vision Pro, Health data comes from your iPhone through Apple's own sync.

Health data is used only to show it to you inside the app. It is never used for advertising and never sold. Fullday never puts anything it reads from Apple Health in iCloud: not a workout's heart rate or calories, and not the birth year, sex and height About you reads from Health (above — only values an earlier version copied into About you sync, until you change them or read them from Health instead). Health data is never sent to us or to anyone else — except a route you choose to share yourself with Share GPX (below) and, only if you use the AI coach (below), the 14-day summary you read and agree to send, which includes scores worked out from it and your age group (from your birth year — typed, or from Apple Health).

Things that use the internet

Only these, and only when you use them:

  • Food search and barcodes (Open Food Facts). When you search online or scan a barcode, the search words or the barcode number are sent to Open Food Facts, a free public food database, to look the food up. Nothing about you is sent with it. Open Food Facts' own privacy policy applies: https://world.openfoodfacts.org/privacy. The bundled food list (USDA) works offline.
  • Supplement labels. Scanning a supplement's barcode looks it up in the NIH Office of Dietary Supplements' label database (api.ods.od.nih.gov) and Open Food Facts; only the barcode number is sent.
  • AI meal estimates (optional; 3 a week free, more with Pro). Naming the foods in a meal photo and reading a nutrition label happen on your device. Only when you tap "Estimate with AI" is that single photo sent, over an encrypted connection, to our relay server (run for us by Supabase) and on to Anthropic's Claude, which returns a list of foods with estimated portions. With Pro, the relay checks your Pro purchase with Apple. Without Pro, the photo is sent with an anonymous proof from Apple's App Attest service that the request comes from a genuine copy of Fullday on this device, and nothing else — no name, account, purchase or health data. To count your free estimates, the relay keeps only a one-way, keyed code made from that proof's key identifier and a count for the current week (which starts Monday 00:00 UTC); these counts are deleted after about two weeks. The proof's key identifier itself is not stored, is created for Fullday on this device only, and can't be used to identify you or to track you across apps; deleting Fullday deletes the key. The relay keeps no copy of the photo and no logs of its contents; Anthropic processes it under its commercial API terms (https://www.anthropic.com/legal/commercial-terms): it doesn't train on it and deletes it after a limited time. You're asked before the first photo is sent.
  • AI coach (Pro, optional). Nothing is sent until you open "Ask your coach", read exactly what would be sent and agree. Then, with each question, a plain-text summary of your last 14 days goes over an encrypted connection to our relay server (on Supabase) and on to Anthropic's Claude: recovery, strain and sleep scores worked out from Apple Health (heart-rate variability and resting heart rate), sleep times, what you ate and drank against your own targets, workouts, the averages of your check-ins (stress, mood, energy), your latest weight and your age group — with your questions and the conversation so far, and whether you're 21 or older. Cycle data, notes, names and places are never included, and alcohol only if you're 21 or older. The relay checks your Pro purchase with Apple and keeps no copy of the summary, questions or answers — only a hashed purchase ID with a daily question count; Anthropic processes them under its commercial API terms (https://www.anthropic.com/legal/commercial-terms): it doesn't train on them and deletes them after a limited time. The coach is not available to anyone under 13.
  • Route builder (Pro). With "Roads & paths" on, the points you place on the map are sent to Apple Maps' directions service to find the way along roads and paths; the map, and the saved routes' thumbnails, are Apple Maps' tiles. This goes to Apple, not to us, and nothing identifying you is added by Fullday. Turn "Roads & paths" off to draw straight lines without asking for directions. The map behind a heatmap picture and the saved routes' thumbnails are Apple Maps snapshots of that area, made the same way.
  • Voice logging. Speech is recognised on your device when it supports that; when it doesn't, Apple's speech service recognises it (Apple's privacy policy applies), and the voice screen says so.
  • Services you connect (Strava, Fitbit, Oura, WHOOP), when available. Nothing is sent unless you connect a service in Me → Connections and sign in with that service. Then:
    • Strava and Fitbit receive each finished workout you log in Fullday — its name, start time, duration and (for Strava) a text list of the sets. They do not receive Apple Health data.
    • Oura and WHOOP are only read from: Fullday fetches your latest scores to show on Today.
    • The sign-in keys are kept in your device's Keychain. For Strava, Oura and WHOOP, the one-time sign-in code passes through a small relay server we run (also on Supabase) so the service's secret key never has to be inside the app; the relay stores nothing and keeps no logs of your data.
    • Disconnect any time in Me → Connections; you can also revoke access on the service's website.
  • Purchases. Fullday Pro is bought through Apple. We never see your payment details.

Devices and permissions

  • Location — only while you're starting or recording a run, ride, walk or hike (on your iPhone, iPad or Apple Watch), including with the screen off, to draw the route and measure distance — following a saved route uses the same recording — and to show where you are on the map while you draw or follow a route. Location is never sent to us; the route stays on your devices and in Apple Health, and goes anywhere else only if you share it yourself (Share GPX, or a share picture that draws the route).
  • Bluetooth — to read heart-rate straps, power meters, speed and cadence sensors and footpods during workouts, runs and rides.
  • Camera and photos — to scan barcodes and nutrition labels and to photograph meals. Images are processed on your device and not stored; a meal photo leaves the device only for an AI estimate you ask for (above). Photos you choose from your library (or drag in on a Mac) are read once and not kept.
  • Saving to Photos — only to add a share picture you choose to save ("Save Image"). Fullday asks for add-only access and never reads your photo library. On Apple Vision Pro and Mac, a barcode can be read from a photo you pick in Apple's photo picker; it's read on the device and not kept.
  • Notifications — for the rest timer and the optional bedtime and morning reminders. They are scheduled on your device.
  • Sound — sleep sounds and the gentle wake are made on the device as they play, and only when you start them. Fullday doesn't use the microphone for them; playing them records nothing. Spoken turns (only if you turn on "Speak turns" while following a route) are spoken on the device by Apple's speech synthesiser; nothing is recorded.
  • Microphone: snoring and sleep talk (optional, Pro) — If you choose "Listen for snoring" and tap Start, Fullday listens through your iPhone's or iPad's microphone that night until you stop it, say you're awake, half an hour after your alarm, or 12 hours at most. The sound is analysed as it arrives, on your device, by Apple's built-in sound recogniser, which tells snoring, talking and coughing apart; the sound itself is not kept. What is kept, on that device only, is each night's result: minutes of snoring, how many times you talked and coughed, and when. Short clips (up to 20 a night, about 10 seconds each) are saved only if you turn clips on (sleep-talk clips only with their own switch), and each is deleted automatically 7 days after it was recorded; you can delete any or all of them sooner, and delete a night's results (or everything listening kept) in the app. None of this — sound, clips or results — is ever uploaded, sent to us or anyone else, put in iCloud or device backups, included in the CSV export, written to Apple Health or shared with the AI coach. The microphone can't tell whose sound it hears, so a partner's snoring or a TV may be counted — please let anyone who shares the room know. iOS shows its microphone indicator while Fullday listens. This is not a medical test and can't diagnose anything. You can turn microphone access off at any time in Settings → Privacy & Security → Microphone.
  • Apple Watch — your iPhone and watch exchange information directly, not through us. The watch receives what its screens show: your current workout and routines, as plans with last time's sets and your bests; today's food, water, macros against your targets, scores and check-in; today's score details (heart-rate variability and resting heart rate against your 30-day normal, the parts of your sleep and strain scores, and coaching with Pro); your sleep plan (bedtime, wake-up, alarm, wind-down and smart wake); the training week, streak and next workout; today's planned run or ride if you follow a plan; your supplements (name, amount and time), fasting and your last weigh-in; the replies to your voice logs; a saved route you send it (its line, name and turns — kept on the watch while it's the route sent to it, and during a recording that follows it; a route too long for the watch isn't sent); and up to 24 recent foods and your drinks to log again. So it can score your morning before you pick up your phone, it also receives the last 31 nights' heart-rate variability and resting heart rate and the last 15 nights' bedtimes, which it keeps on the watch only (the watch also reads its own sleep, heart-rate variability and resting heart rate from Apple Health). Food and drinks you log on the watch — and voice logs (watchOS dictation, which is Apple's, turns what you say into words on the watch; your iPhone finds the foods on the device), supplement doses, fasts and weigh-ins — become ordinary entries on the iPhone, which sync like the rest. Until your iPhone receives them, the watch keeps voice logs, doses, fasts and weigh-ins in a protected file on the watch, left out of backups; food, drinks and water wait in the watch app's own settings, which can be part of your iPhone's backup, for up to two days. So the same tap isn't logged twice, the iPhone remembers what was logged from the watch in the last three days — an id, what kind (water, food, a voice log, a dose, a fast, a weigh-in) and the time, with the amount for water and food, never the food's name — in the app's settings, which are part of your device backups; it keeps its replies to voice logs (the foods found) for a day, on that device only. A run, ride, walk, hike or strength workout recorded on the watch alone goes to Apple Health from the watch and to your own iPhone when it's in reach; a strength workout left unfinished is closed after 12 hours with the sets it has and sent the same way. A recording that still hasn't reached your iPhone after 90 days is deleted from the watch, and you can delete what's waiting for your iPhone on the watch — runs, rides, walks and hikes on Train → Outdoor, strength workouts on Train (a strength workout deleted there loses its sets and reps; Apple Health keeps the workout). Smart wake watches your wrist's movement and heart rate during the wake window you choose, on the watch only, to find a lighter moment; nothing is kept.
  • Promo and creator codes — "Redeem a Code" opens Apple's own sheet; the code goes to Apple, not to us.
  • Spotlight — So you can find them from the Home Screen, the names of your routines, saved routes, and the foods and recipes you made or marked as favourites are added to Spotlight on your device, each with a few words saying what it is (for example "Routine · 6 exercises" or "Run route · 5.2 km"). Nothing else goes there — no weights, heart rate, sleep, cycle or mood, no nutrients, food diary entries, dates or places — and it stays on the device: an app's Spotlight index isn't synced, backed up or sent anywhere. Turn it off in Me → Preferences → Show in Spotlight, which also removes what was there; deleting saved routes removes theirs.
  • Siri and Shortcuts — when you ask, Fullday's actions (log a food, water or your weight, start a workout or a run, scan a product, going to bed and waking up, what you did last time, your recovery and last night's sleep) run in the app on your device, and the answer is worked out there; Fullday sends nothing for them ("Scan a product" just opens the scanner, which looks a barcode up as described under "Things that use the internet"). Foods are found on the device only. "How's my recovery" answers only while your device is unlocked. What you say to Siri is handled by Apple, under Apple's privacy policy.

Exporting and deleting

Me → Your data → Export creates CSV files on your device that you can save or share wherever you choose. Share GPX makes a GPX file of one activity's route, with its times and heart rate, only when you tap it. A run's share picture draws its route with its distance, time, pace and medals — leaving out the part inside your privacy zone if you set one — and a workout's shows its numbers and records (no heart rate, notes or cycle data). The heatmap picture draws your routes on an Apple Maps map with totals and years, leaving out routes inside your privacy zone (on by default when you have one). Badge, challenge and Wrapped pictures carry no name. Each goes only where you send it. A saved route's Share GPX makes a GPX file of its line and heights (no times), only when you tap it. GPX files include the whole route — the privacy zone doesn't apply to them. Share pictures carry no location or other data in the file itself.

To delete your data, delete it in the app or delete the app — a workout's heart rate and calories (including the heart rate in the records cache), your routes, your saved routes, your imported activities and your dream notes can each be deleted at once on the app's Privacy screen — imported activities also on the Strava import screen, or one at a time on the activity's page; to remove the iCloud copy, go to Settings (System Settings on a Mac) → [your name] → iCloud → Manage Account Storage. Deleting a workout, food or measurement in Fullday also deletes the copy it saved to Apple Health; anything else Fullday wrote there — and everything once you delete the app — stays in Apple Health until you delete it in the Health app.

Children

Fullday is not directed at children under 13 and does not knowingly collect information from them — it doesn't collect information from anyone.

Changes and contact

If this policy changes, the new version will be posted at this address with a new effective date. Privacy questions: travis@grdesign.build. Anything else about the app: support@getfullday.app.

What changed on October 9, 2026

This version covers what Fullday has gained since the policy of September 29, 2026: recorded GPS routes, saved routes and the route builder, the privacy zone, imported Strava activities, records and segments, Bluetooth sensors, training plans, sweat-rate checks, dream notes, listening for snoring and sleep talk, challenges and badges, share pictures and GPX files, what the Apple Watch receives and keeps, Spotlight, and Siri and Shortcuts. It also adds supplement label lookups (NIH), what Fullday writes to Apple Health (State of Mind and period days), and a support address. It also explains free AI meal estimates (3 a week without Pro) and the anonymous App Attest proof they use.

A note from this website: the policy also covers connecting Strava, Fitbit, Oura or WHOOP, which aren't switched on yet. It already says how those connections will handle your data when they are.