1. Information we collect

Your journal data stays on your device. What you manually enter — your daily portion logs (palm / cup / fist / thumb counts), any weights, and your selected training day type (Hard, Easy, or Rest) — is written to a local SQLite database on your iPhone and never leaves your device. We have no servers that store it and no way to read it.

Anonymous usage analytics. To understand how the app is used, Palmful sends a small amount of anonymous product-analytics data to our analytics provider (see section 2). This is limited to screen views, a handful of coarse interaction events (for example, that a day was logged or the training day was changed), and basic app lifecycle events (open / close). Along with these events, standard technical metadata is collected: device model, operating-system version, app version, and an approximate region derived from your IP address. A random identifier generated on your device groups events from the same install; it is not your name, email, Apple ID, or advertising ID, and it is never linked to a personal identity.

2. Analytics provider

We use PostHog as our product-analytics provider, hosted in the United States. Analytics data described in section 1 is transmitted to and processed by PostHog on our behalf. We do not sell or rent this data, and we do not combine it with any other source to identify you.

• The app never calls PostHog's identify feature — analytics stays anonymous.
• Session replay (screen recording) is off.
• Automatic UI event capture (autocapture) is off — only the specific events named above are sent.
• No journal content — portions, weights, or training-day history — is ever included in analytics.

3. Feedback form

If you use the in-app "Send feedback" form, the message you write is sent to our first-party feedback API. If you choose to include a reply email address (this field is always optional), that is sent along with it so we can respond to you. Along with your message, we also send basic technical context to help us diagnose the report: your app version and build number, your iOS version, and your device model (for example, "iPhone15,3" — a hardware class, not a unique identifier).

We use Resend as a sub-processor to deliver this feedback to us by email. Resend only receives what is needed to deliver the message — your feedback text, any reply email address you provide, and the technical context above. We use this data solely to read, respond to, and act on your feedback; it is not used for analytics, advertising, or any purpose beyond responding to your report.

4. What we do not do

• We do not display advertisements or work with ad networks.
• We do not use advertising identifiers (IDFA) or track you across other apps and websites.
• We do not sell, rent, or share data with data brokers.
• We do not require or create a user account of any kind.
• We do not request access to your location, contacts, camera, photos, or Apple Health data.
• We do not sync the contents of your journal to the cloud or any remote service.

5. Local data storage

All data entered into Palmful is stored exclusively on your device using SQLite (via iOS's standard local storage). Apple's standard iOS sandboxing applies: only the Palmful app can access its own database. We have no access to this data.

6. Data deletion

To delete all your journal data, simply delete the app from your iPhone. iOS will remove the app and its entire local database. Because your journal has never been sent to any server, there is nothing on our side to delete.

The anonymous analytics described above are not tied to your identity, so we cannot single out and remove an individual person's events. If you have a question or request about analytics data, contact us at the address below and we will do what we can.

7. Children's privacy

Palmful is not directed at children under the age of 13. The app requires no account, and the only personal information it can collect is what you type into the feedback form yourself — see section 3. If you believe a child under 13 is using the app and you have concerns, please contact us at the address below.

8. Changes to this policy

If we update this privacy policy, the revised version will be posted at palmful.nsquaredlabs.com/privacy with an updated effective date at the top of the page. If a change is material, we will note it clearly.

9. Contact

If you have any questions about this privacy policy or about how Palmful handles your data, please reach out:

N Squared Labs — palmful.nsquaredlabs.com