Legal

Privacy Policy

Last updated: 22 October 2026

Ciyanu is a health and wellbeing app for iPhone and Android that helps you track fitness, nutrition, sleep and wellbeing, with a companion app for Apple Watch. This policy explains what information the app handles, why, and the choices you have. The short version: your data is used to run the app for you, it is never sold, there is no advertising, and there are no third-party analytics or trackers. We do keep our own simple usage events, described below.

1. Who is responsible for your data

Ciyanu is operated by Sameer Azeez, sole proprietor ("we", "us"). For anything in this policy, contact privacy@ciyanu.com.

2. Information you give us

• Account: your email address and a password (or Sign in with Apple on iPhone). Passwords are handled by our authentication provider and are never visible to us.
• Profile and onboarding answers: name, age, sex, height, weight, activity level, goals, and optional health context you choose to share such as medical conditions, medications, supplements you take, food allergies, dietary preferences, pregnancy status, and sleep habits. You can skip the optional items.
• Daily logs: meals and water, workouts and sets, runs and walks (including the GPS route if you use cardio tracking), sleep sessions, body measurements, and mood or wellbeing check-ins.
• Photos you take for analysis: food photos, nutrition label photos, and body composition photos are sent to our AI service to produce an estimate, then discarded. They are not stored on our servers. Progress photos you deliberately save are stored in a private storage area only your account can access.
• Chat messages and food descriptions: what you type to the in-app AI assistants (nutrition, training and wellbeing) is processed to generate the reply. A meal you type, say to Siri, or dictate on Apple Watch is sent to the same AI service to estimate its nutrition.
• Community (optional): if you create a Community profile, your handle, display name, avatar and bio can be seen and searched by any signed-in Ciyanu user, along with your follower counts. Avatar images are publicly reachable by their link. Posts you share (workouts, runs with a map of the route, meals, and photo moments with a caption), plus likes, comments, follows, blocks and reports, are stored on our servers. See section 5 for who can see what.

3. Information from your device, with your permission

• Apple Health (iPhone) and Health Connect (Android): if you allow it, the app reads data such as sleep, workouts, heart rate, heart rate variability, steps and body measurements to fill in your dashboard and adjust your daily targets, and writes workouts you complete in Ciyanu. You control every category in your phone's settings and can revoke access at any time.
• Menstrual cycle (optional): only if you turn on cycle features, the app reads your period days from Apple Health or Health Connect, or uses the period start dates you enter yourself, to work out your cycle phase. Your period days stay on your phone and in Health; they are not uploaded to our servers. Only the current phase (for example "cycle day 22, luteal phase") is included when you use the AI assistants, so their answers can take it into account. You can turn it off at any time in Settings.
• Location (cardio tracking): precise location is used only while you track a run, walk or ride, to draw your route and measure distance. The route is saved to your account as part of that activity. Location is never collected in the background outside an active tracked session.
• Approximate location (hot days): if you have already allowed location for cardio tracking, the app may read your phone's last known location (or, failing that, where your last tracked run or ride ended), rounded to about 10 km, to look up today's top temperature so your water target can rise on a hot day. The app never asks for location just for this, the rounded location is not stored on our servers, and you can turn it off in Settings under Nutrition.
• Camera: used only when you choose to photograph food, scan a barcode or nutrition label, or take a body composition or progress photo. Barcode reading happens on the device itself.
• Motion (iPhone sleep tracking): while you track a night, movement estimates from your phone's accelerometer stay on your phone only. They are never uploaded, and they are deleted when you sign out or delete the app. The app does not listen to or record audio while you sleep.
• Notifications: reminders you set are scheduled locally on your phone. Community alerts (someone likes or comments on your post, follows you or asks to, or someone you follow shares a post) are sent from our servers, so we store your device's push token against your account and deliver them through Apple's Push Notification service on iPhone or Firebase Cloud Messaging on Android. An alert carries the sender's display name and a short line such as "liked your post"; a comment alert also shows the start of the comment. We delete the token when you sign out or delete your account, and you can turn alerts off in your phone's settings at any time.
• Apple Watch: the watch app can record workouts with heart rate, energy and, for outdoor workouts, a GPS route, and saves them to Apple Health. Water, check-ins, food descriptions and set results you log on the watch go to your iPhone, which saves them to your account. The watch itself never talks to our servers.

4. Journal entries stay on your phone

The wellbeing journal is local-only. Entries are stored on your device, are not synced to our servers, and disappear if you delete the app. Period start dates you enter for cycle features are kept the same way.

5. Community, the shared map and live runs

• Posts: only you and the people whose follow request you accepted can see your posts. Blocking someone hides you from each other.
• Shared map: nothing goes on the map until you choose to join it. When you join, the outlines of your qualifying runs and rides (with 200 m cut from each end so your start and finish stay private) become visible to your followers, labelled with your handle, along with duration and distance. Your earlier qualifying runs and rides are added the same way. "Post on Map" makes a single claim visible to every signed-in user. Courses you publish, and times you set on them, can be seen by every signed-in user except people you have blocked.
• Live runs (off by default): if you turn on live sharing, while you are tracking a run or ride your position (rounded to about 110 m), the activity type and distance are updated about every 25 seconds and can be seen by your followers and by the people you follow. Sharing stops and the position is deleted when you stop or save the activity. If the app is closed mid-run, the last position can stay stored until your next run, although the app stops showing positions older than about 90 seconds.

6. How we use your information

• To run the app: sync your logs across the app, compute your scores and insights, and show your history.
• To personalise: your profile, goals and recent logs shape your workout plans, meal plans, targets and AI answers.
• To keep the service healthy: per-account daily limits on AI features prevent abuse, and error and crash reports (the error message, the code location and call stack, app version, OS version and device model) help us fix bugs. They do not contain your health logs.
• To improve the app: our own usage events record steps such as finishing onboarding, granting a permission, opening the app, starting a trial or sharing a card. Each event holds the event name, a random per-install ID, your account ID, the app version, platform and time, and a few details about that step, which can include your Health Score, whether you set a sick day, whether cycle features are on, or how many supplements you saved. They are stored in our own database and are never sent to an analytics company.

We do not sell or rent your data, we do not show ads, and we do not use third-party analytics or advertising trackers of any kind.

7. AI processing

Ciyanu's AI features (meal plans, workout plans, food photo and text analysis, body composition estimates, sport fuel guidance, and the chat assistants) are powered by Anthropic's Claude models, called from our own servers. The relevant context (for example your goals, allergies, today's log summary, or the photo you just took) is sent to generate the result. Under Anthropic's commercial API terms, your inputs and the outputs are not used to train their models. AI outputs are estimates and general guidance, not medical advice.

8. Who else processes data, and why

• Supabase: our backend platform. It stores your account and synced logs in a managed database and handles sign-in. Data is encrypted in transit and at rest, and database rules keep each account's private records to that account.
• Anthropic: AI processing as described above.
• Food search: the food database (AUSNUT 2023 from Food Standards Australia New Zealand) is built into the app, so searching sends nothing anywhere.
• Open Food Facts: when you scan a barcode, your phone sends the barcode number to Open Food Facts to look up the product. No account information goes with it. The barcode itself is read on your phone.
• Apple App Store / Google Play: payments are handled entirely by Apple or Google, and we never see your card details. We do keep a record of your subscription (the product, a transaction ID, the expiry date and whether it is a trial or was refunded) so Premium works on every device. If you use Sign in with Apple, we store the token Apple gives us so we can revoke it when you delete your account.
• Push delivery: Apple's Push Notification service (iPhone) and Google's Firebase Cloud Messaging (Android) deliver the Community alerts described above.
• Open-Meteo: when the hot-day water adjustment is on, your phone sends a rounded location (about 10 km) to Open-Meteo to fetch today's forecast temperature. No account information goes with it.
• Maps: on iPhone, route maps are drawn with Apple Maps. On Android, the run map loads tiles from OpenFreeMap. Like any web request, these see your IP address and the map area being drawn, but nothing about your account.

9. Data retention

Your data is kept while your account exists so your history and trends keep working. Photos sent for AI analysis are processed and discarded. Local-only data (journal entries, period start dates you enter and sleep movement estimates) lives and dies on your device.

10. Deleting your account and your data

In the app, go to Settings, then Delete Account. This permanently deletes your account and your server-side data: profile, logs, workouts, sleep, scores, chat usage counters, stored photos, your Community profile, posts, comments and follows, and your map claims, courses and times. It takes effect immediately and cannot be undone. Usage events (section 6) are kept with your account ID removed, and records of App Store notifications about past purchases are kept with your account link removed. You can also just delete the app to remove all local data from your phone.

11. Exporting your data

Settings also includes a data export that gives you a machine-readable copy of your profile, logs and other health data. For a copy of anything else we hold, such as usage events or subscription records, email us.

12. Your rights

Depending on where you live (including under the EU and UK GDPR and the California CCPA/CPRA), you have rights to access, correct, export, restrict and delete your personal data, and to complain to your local data protection authority. The export and delete tools above cover the common cases instantly; for anything else, email privacy@ciyanu.com and we will respond within 30 days. We do not sell personal information, so there is nothing to opt out of under the CCPA's "sale or sharing" definitions.

13. Legal bases (GDPR)

We process your data to perform our contract with you (running the app you signed up for), with your consent for optional items (health details, Apple Health access, location, camera), and in our legitimate interest for abuse prevention, error logging and our own usage events. Health information is processed only because you choose to enter it, which is your explicit consent; you can use the app without providing it.

14. Children

Ciyanu is not intended for children under 13 (or the higher minimum age in your country), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

15. Security

All traffic uses TLS encryption. Server data is encrypted at rest. Database rules mean your private records can be read only by your account, and Community content only by the people described in section 5, and API keys for our AI and food-data providers live only on our servers, never in the app.

16. International transfers

Our service providers may process data in countries other than yours, including the United States. Where required, transfers rely on standard contractual clauses or equivalent safeguards offered by those providers.

17. Changes to this policy

If we make material changes, we will update this page and the date at the top, and highlight the change in the app where appropriate.

18. Governing law

This policy is governed by the laws of Queensland, Australia.