Primaly
Privacy Policy
Zero-Friction Labs ("we", "us") establishes this Privacy Policy regarding the handling of user information in the iOS application "Primaly" (the "App"). We comply with applicable data protection laws, including Japan's Act on the Protection of Personal Information (APPI).
1. Core principle: your entries live on your device and in your own iCloud
The App operates no content server of its own for the content you create (tasks, habits, journal entries, mood records, profile, avatar, and more). That content is stored on your device and in your own iCloud (your Apple account). Anything that goes to iCloud is encrypted on your device first, and the key exists only on your devices. Neither we nor Apple can read it (Section 4).
Separately, the App uses an authentication provider for signing in (Section 2), an AI processing provider for the AI assistant (Section 5), and weather services for weather display (Section 3), each receiving only the data that feature needs. Apart from these, the content you create is not transmitted to or stored on any server, including ours.
2. Account and sign-in
Using the App requires signing in. You may choose either Apple's "Sign in with Apple" or a Google account. Signing in creates an account with Supabase (Supabase, Inc.), our authentication provider, which stores the following to keep you signed in:
- An account identifier (the user ID issued by Apple or Google)
- Your email address (if you choose Apple's "Hide My Email", the private relay address Apple provides instead)
Only if you choose to sign in with Google does any exchange of authentication information occur with Google LLC. If you choose Apple, nothing is sent to Google.
This information is used solely to maintain your sign-in; it is never used for advertising, profiling, or tracking. The journal entries, tasks, and other content you create are not stored on our servers linked to this account. You can delete your account at any time from "Settings › Privacy & Security › Delete account" in the App (Section 11).
3. Information handled on your device
The App handles the following on your device to provide its features. Except for location used for weather, none of it is transmitted externally.
- Profile information (nickname, bio, avatar)
- Tasks, habits, and projects, and their completion status
- Journal entries and records of emotion, mood, and sleep ratings
- Health data (HealthKit): sleep duration, sleep stages, and step count (only if you grant permission). Used on device only, never transmitted. Never used for advertising and never sold or shared with third parties.
- Screen Time data (which apps you choose to block, and whether blocking is active): handled via Apple's Family Controls / Screen Time APIs. This data never leaves your device and is never sent to the AI.
- Calendar: only if you grant permission, calendar events are read read-only to display your day. Event contents never leave your device and are never sent to the AI.
- Location: used for two purposes, handled differently.
- Weather: an approximate location (coordinates rounded to roughly 1 km) is sent to weather services (Apple WeatherKit / Open-Meteo). "While Using the App" only; if you decline, a default region's weather is shown.
- Habit location proof (only if you set one up): a more precise location is used to check whether you are at the place you registered. This check happens entirely on your device; the coordinates are never transmitted.
- Camera images: used for the "photo unlock" alarm challenge. Both the reference photo and the live camera frames are matched entirely on your device and never transmitted.
- Voice input: microphone audio is used only for transcription; we never store or transmit audio. Journal voice input is locked to on-device speech recognition — if on-device recognition is unavailable, recording does not start at all. For voice input elsewhere in the App, audio may be sent to Apple's speech recognition service on devices where on-device recognition is not available (processed by Apple).
- NFC tag information: used to log habits and dismiss alarms.
4. iCloud sync and encryption
The App syncs your entries to your own iCloud so they survive a lost device or a new phone. This is your Apple account's storage, not our server. Sync is on by default and can be turned off at any time in "Settings › Privacy & Security › Sync with iCloud".
Only data encrypted on your device ever leaves for iCloud. Encryption and decryption happen solely on your device, and the key is stored only in your iCloud Keychain. We do not hold this key and have no means of obtaining it. Apple cannot read the contents of what it stores for you.
The flip side is that if the key is lost, not even we can recover your data. Normally iCloud Keychain carries the key across your devices; as a safeguard you can save a copy from "Settings › Privacy & Security › Recovery key".
5. Data sent externally when using the AI assistant "Prima"
Using the AI assistant is optional. Nothing is sent to the AI unless you consent. You can turn consent on or off at any time in "Settings › Privacy & Security"; while it is off, nothing is transmitted. The recipient is Anthropic, PBC (Claude API), our AI processing provider.
The App separates consent to AI features from whether your journal text is shared with the AI. Journal sharing is off by default and becomes active only if you choose it after reviewing what is sent, in "Settings › Journal & AI".
If you consent to AI features, the following may be sent:
- Your messages to Prima and the conversation history (older history is summarized and used as ongoing context)
- Mood, emotion, and sleep ratings; task and habit information
- A summary of the month's records, used to generate the monthly report
Additionally, only if you turn on "Share journal with AI", the following is sent. The amount differs by purpose, so we state it precisely:
- Journal formatting: the full text of that day's journal
- Automatic theme tagging: the full text of that day's journal
- Retroactive tagging when a new theme is discovered: the full text of up to 45 past entries, sent together so that earlier entries matching the new theme can be found. This happens automatically and is the single largest transmission the App makes.
- Background context for Prima: roughly the first 40 characters of each recent day
- Monthly report: roughly the first 200 characters of each day (with an overall cap)
- Journal chat input: exactly what you write to Prima
HealthKit step and sleep data, Screen Time data, calendar events, location, and camera images are never sent to the AI. The sleep rating you enter yourself in the App (1–5) is separate from HealthKit data and may be included in the AI's context.
Data sent to the AI is never used to train or improve AI models. Anthropic does not use inputs received via the API for model training. However, for abuse prevention and safety purposes, inputs and outputs are retained by Anthropic for up to about 30 days before deletion (per their commercial terms of service; we are in the process of moving to an arrangement without this retention). For details and disclaimers about AI features, see "Notes on AI".
6. Purpose of use
Information we obtain and process is used solely to provide the App's features (sign-in, sync, alarms, task/habit management, journaling, the AI assistant, weather display, and displays based on health data). If we ever intend to use it beyond these purposes, we will obtain your consent in advance.
7. Disclosure to third parties / processing delegation
Except where required by law, we do not provide or sell user information to third parties. Transmission to the following is delegated processing, limited to what each App feature requires:
- Supabase, Inc. — authentication (Section 2)
- Google LLC — identity verification, only if you sign in with Google (Section 2)
- Anthropic, PBC — generating AI responses (Section 5)
- Apple Inc. / Open-Meteo — weather data (Section 3)
- Apple Inc. — iCloud storage (Section 4; contents are encrypted and unreadable to Apple)
8. Cross-border data transfers
In connection with the above, your data may be processed on servers located outside Japan. Anthropic, PBC and Google LLC are United States entities, the weather service Open-Meteo is a German entity, and Supabase's infrastructure may also be located outside Japan. We delegate processing only to the extent required to provide the App's features, after confirming that these providers maintain appropriate security measures.
9. What we do not collect or use
The App uses no analytics tools, no crash-reporting tools, and no advertising SDKs. Neither this website nor the App uses cookies, SDKs, or pixels for advertising or tracking, and we do not collect data for the purpose of tracking users. We do not track you across other companies' apps or websites (the activity governed by App Tracking Transparency).
10. Security
Data stored on your device is protected by iOS data protection. Data synced to iCloud is additionally encrypted on your device, with the key existing only in your iCloud Keychain (Section 4). All communication sent externally for sign-in or AI processing uses encrypted transport (TLS/HTTPS). The API key used for AI processing is held only on our server side and is not contained in the App. That said, no transmission over the internet or electronic storage is absolutely secure; we take security measures that are reasonable in scope.
11. Data retention and deletion
Data on your device is retained until you delete it, and is erased when you delete the App. Account information on Supabase is retained until you delete your account.
Running "Settings › Privacy & Security › Delete account" in the App performs the following in order:
- Erases your data on the device (journal, emotions, conversations, records, and so on)
- Deletes the copy synced to iCloud
- Destroys the encryption key — so that even if any deletion above did not complete, whatever remains cannot be decrypted by anyone
- Permanently deletes your account on Supabase
Data sent to Anthropic for AI processing is not used for model training (Section 5) and is deleted after their retention period. Permissions for OS-managed data such as HealthKit can be changed or revoked at any time in the iOS Settings app. Note that an active paid subscription (Premium) is managed by the App Store and is not automatically cancelled when you delete your account; cancel it from "Settings › Apple ID › Subscriptions" in iOS.
12. Your rights
You may request the following regarding your information. The App's data lives on your device and in your own iCloud, and most of it you can view, edit, and delete yourself within the App.
- Access: data on your device is viewable in the App at any time. Contact us if you would like disclosure of your account information.
- Correction: your profile and records can be edited in the App at any time.
- Deletion: deleting your account (Section 11) erases your server account, your on-device data, and the copy in iCloud.
- Withdrawal of consent: AI consent, journal sharing with AI, and iCloud sync can each be turned off in Settings at any time. Permissions for HealthKit, location, camera, microphone, and calendar can be revoked in the iOS Settings app.
- We also respond to other requests available under applicable law (suspension of use, suspension of provision to third parties, and so on).
Please direct such requests to the contact in Section 15.
13. Children's privacy
The App does not knowingly collect personal information from users under the age of 13.
14. Changes to this policy
We may revise this policy in response to legal changes or new features. Significant changes will be announced in the App or on this website.
15. Contact
For inquiries about this policy, or requests for disclosure or deletion, please contact support@primalyapp.com.
Operator: Zero-Friction Labs / Responsible person: 中島 康晴