Primaly
Privacy Policy
Zero-Friction Labs ("we", "us") establishes this Privacy Policy regarding the handling of user information in the iOS application "Primaly" (the "App"). We comply with applicable data protection laws, including Japan's Act on the Protection of Personal Information (APPI).
1. Core principle: your content stays on your device
The App operates no content server of its own for the content you create (tasks, habits, journal entries, mood records, profile, avatar, and more); this data is stored only on your device by default. The exceptions are signing in (Section 2), which uses an authentication provider; the AI assistant (Section 4), which uses an AI processing provider; and weather display (Section 3), which uses weather services — each receiving the data (including approximate location) needed for that feature. Apart from these, the content you create (journal, tasks, etc.) is not transmitted to or stored on any server, including ours.
2. Account and sign-in (Sign in with Apple)
Using the App requires signing in, via Apple's "Sign in with Apple". Signing in creates an account with our authentication provider, Supabase, Inc., which stores the following solely to keep you signed in:
- An account identifier (the anonymous user ID issued by Apple)
- Your email address (if you chose Apple's "Hide My Email", this is the private relay address Apple forwards)
These are used only to maintain your sign-in and are never used for advertising, profiling, or tracking. The content you create (journal, tasks, etc.) is never stored on a server linked to this account — it stays on your device. You can permanently delete your account at any time from "Settings › Privacy & Security › Delete Account" in the App (see Section 10).
3. Information handled on your device
To provide its features, the App handles the following information on your device (all processed locally and not transmitted externally, except for location as described below):
- Profile information (nickname, bio, avatar)
- Tasks, habits, and projects, including their completion status
- Journal entries and records of emotions, mood, and self-reported sleep ratings
- Health data (HealthKit): sleep duration, sleep stages, and step count (collected only with your permission). Used only on your device; never sent externally.
- Location: an approximate location (latitude/longitude rounded to ~1km) is sent to weather services (Open-Meteo / Apple WeatherKit) for weather display ("While Using" only; if not permitted, weather for a default region is shown). We do not send precise location, do not track location continuously, and never send it to the AI (Anthropic).
- Camera images and NFC tag information: used to dismiss alarms
We never use data obtained from Apple HealthKit for advertising, nor do we share or sell it to any third party.
4. Data sent externally when using the AI assistant "Prima"
Using the AI assistant is optional. Only if you agree on the initial disclosure screen will data necessary for generating responses be sent to the servers of Anthropic, PBC (Claude API), our AI processing provider. You can turn this on or off at any time in "Settings › Privacy & Security"; while off, nothing is sent. The information that may be sent includes:
- Your conversation messages and history with Prima (older history is summarized and used as context for ongoing conversations)
- Journal excerpts and records of mood, emotion, and sleep ratings
- Task and habit information when related features are used
- Context for reflections, derived from summaries such as monthly reports
- If you use photo unlock: the reference photo you registered and the photo captured at alarm time
Note that your HealthKit step/sleep data is never sent to the AI (it stays on your device). Your location is also never sent to the AI (Anthropic), but an approximate location is sent to weather services (Open-Meteo / Apple) for weather display (Section 3). The self-reported sleep rating (1–5) you enter in the App is separate from HealthKit data and may be included in the AI context.
Data sent is never used to train AI models. Anthropic does not use input data received via its API for model training. Such data is retained only for a limited period for purposes such as preventing misuse and ensuring safety, after which it is deleted. For details and disclaimers about AI features, see "About AI".
5. Purpose of use
Information obtained or processed is used solely to provide the App's features (sign-in, alarms, task/habit management, journaling, the AI assistant, weather display, health-data-based displays, and so on). We will obtain your consent in advance before using it beyond these purposes.
6. Disclosure to third parties / processing delegation
We do not provide or sell user information to third parties, except as required by law. The transmission to our authentication provider (Supabase, Section 2), our AI processing provider (Anthropic, Section 4), and the weather services Open-Meteo and Apple (Section 3) are transmissions / processing delegations limited to what is necessary to provide the App's features (sign-in / AI response generation / weather display).
7. Cross-border data transfers
As a result of the transmissions / processing delegations above, your data (including approximate location) may be processed on servers located outside Japan. Anthropic, PBC is a U.S. company, the weather service Open-Meteo is based in Germany, and Supabase's processing infrastructure may also be located outside Japan. We delegate processing only to the extent necessary to provide the App's features, after confirming that these providers maintain appropriate security measures.
8. What we do not collect or use
The App uses no analytics tools, no crash-reporting tools, and no advertising SDKs. Neither this website nor the App uses cookies, SDKs, pixels, or similar technologies for advertising or tracking, and we do not collect data for the purpose of tracking users.
9. Security
Data stored on your device is protected by iOS data protection. All communications sent externally for sign-in or AI processing are carried over encrypted (TLS/HTTPS) channels. No method of internet transmission or electronic storage is completely secure; we take reasonable security measures.
10. Data retention and deletion
On-device data is retained on your device until you delete it, and is erased when the App is deleted. Your account information on Supabase is retained until you delete your account. Running "Settings › Privacy & Security › Delete Account" in the App permanently deletes your account on Supabase and, at the same time, erases your on-device data (journal, emotions, conversations, records, and so on). Data sent to Anthropic for AI processing is not used for model training (Section 4) and is deleted after a limited retention period. Permissions for OS-managed data such as HealthKit can be changed or revoked at any time in iOS Settings. Note that an active paid subscription (Premium) is managed by the App Store and is not automatically cancelled when you delete your account; cancel it in iOS "Settings › Apple ID › Subscriptions".
11. Your rights
You may request the following regarding your information. Because the App's data is on your device by default, you can review, edit, and delete most of it yourself within the App.
- Access / review: you can view your on-device data in the App at any time. Contact us if you wish to receive disclosure of your account information.
- Correction / update: you can edit your profile and records in the App at any time.
- Deletion: deleting your account (Section 10) erases your server account and on-device data.
- Suspension / withdrawal of consent: you can turn off the AI assistant at any time in "Settings › Privacy & Security". Permissions for HealthKit, location, camera, etc. can be revoked in iOS Settings.
- We also honor requests based on applicable law (such as suspension of use or of third-party provision).
To make such a request, please contact us at the address in Section 14.
12. Children's privacy
The App does not knowingly collect personal information from users under the age of 13.
13. Changes to this policy
This policy may be revised in response to legal changes or new features. Material changes will be announced in the App or on this website.
14. Contact
For inquiries about this policy, or requests for disclosure or deletion, please contact support@primalyapp.com.
Operator: Zero-Friction Labs / Responsible person: Kousei Nakashima