Privacy Policy
With your permission, Udapt reads sleep, heart rate variability, resting heart rate, wrist temperature, body weight, height, date of birth, biological sex, workouts, dietary energy logged in other apps, and menstrual cycle dates — to build each day's plan. None of this ever leaves your phone. It is read from Apple Health, used to calculate that day's plan, and discarded.
When you finish a logged workout, Udapt saves it to Apple Health as a workout entry (type and duration only — no estimated calorie burn, since Udapt has no way to measure that accurately) so it appears in the Health app alongside your other activity. This is the only thing Udapt writes to Apple Health.
If Apple Health has at least two logged menstrual cycles, Udapt can, by default, compare your heart rate variability and resting heart rate against your own normal for that phase of your cycle rather than an overall average. You can turn this off in Settings. A separate, off-by-default setting adds a small calorie allowance in the luteal phase. Cycle data is used only in this on-device calculation and never leaves your phone.
Your onboarding profile (date of birth, sex, height, weight, activity level, goals, training days), morning check-ins, workout logs, food logs, protected joints and any exercise substitutions you've chosen are saved in a file on your phone only. This file is encrypted at rest by iOS, and is explicitly excluded from iCloud Backup — it never leaves your device, including if you back up your phone. This follows Apple's own App Review requirement that personal health information isn't stored in iCloud.
If you take or choose a photo of a meal, or describe it out loud, Udapt uses Apple's on-device intelligence to identify what's in it and estimate portion sizes. The photo, the audio, and the model all run entirely on your phone — nothing is ever sent anywhere. The model only identifies foods; the actual calorie and nutrient numbers always come from the same on-device food database a manual search uses, and you review and edit everything before it's logged. This only works on devices that support Apple Intelligence; Udapt simply hides the feature where it doesn't.
If you scan a food's barcode, the barcode number — and only the barcode number, never a photo or any information about you — is sent to Open Food Facts, a nonprofit, open food database, so it can identify the product. This is disclosed the first time you use the feature. Searching for food by name never leaves your device.
Udapt is offered as an auto-renewing subscription, handled entirely by Apple's App Store — Udapt never sees or stores your payment details. Apple provides Udapt with a cryptographically-verified record of your subscription status, which is checked on-device; no subscription or purchase data is sent to any server Udapt operates, because Udapt operates none.
Udapt contains no third-party analytics SDKs, no advertising networks, and no trackers of any kind. There is no account or sign-in of any kind. There is nothing to opt out of, because nothing is being collected.
We don't share, sell or rent your data to anyone — there is no data on our servers to share in the first place. The only parties who ever touch anything are:
| Party | What they see | Why |
|---|---|---|
| Open Food Facts | A scanned barcode's number, nothing else | To identify the product |
| Apple (on-device) | Nothing leaves the device — Apple Intelligence, Health and Watch data all stay local | To run the plan and, where used, photo/voice food identification |
| Apple (App Store) | Payment & subscription status | To process your purchase |
Settings → Delete all my data permanently removes your profile, check-ins, workouts, food logs and exercise substitutions from your phone. This does not touch anything already stored in Apple Health — manage or delete that separately in the Health app, since it belongs to you, not to Udapt.
Udapt is intended for users aged 13 and over, and onboarding does not accept a birth date younger than that. Udapt does not knowingly collect information from children under 13.
Your data benefits from iOS's standard app sandboxing, file-level encryption, and exclusion from iCloud Backup. Because there is no Udapt server or account, there is no central database of users' data that could be breached on our end.
If this policy changes, the "Effective" date above will change. Material changes will be reflected in the App Store listing's version notes.
Questions about this policy or your data can be sent to info@isafenet.app.
Udapt