Privacy Policy
Fivefold is a wellness and self-reflection app. We built it to keep as much of your information as possible on your own device. This policy explains what we collect, why, who helps us process it, and the choices you have.
The short version
- There are no accounts. Your profile, quiz answers, check-ins and readings are stored on your device.
- To write your daily reading, a short summary of your check-in (and your optional note and first name) is sent to our server and to our AI provider. It is used only to write that reading and is not stored or used to train AI models.
- We use anonymous analytics to improve the app. You can turn it off in You → Share anonymous usage analytics.
- We don't sell your data, we don't show ads, and we don't track you across other companies' apps or websites.
Information stored on your device
The following stays on your iPhone and is not sent to us, except as described in the next section:
- Your first name (optional) and birth date (optional)
- Your constitution questionnaire answers and result
- Your daily check-ins (sleep, energy, mood, stress, temperature, digestion and optional notes), readings, completed practices and streak
- Your optional tongue and face self-checks (what you choose to describe), and any tongue photo you take with the in-app camera. Photos are saved only in the app's private storage on your device.
- Your evening reflections (how the day went and which practices helped), program progress and quiz retakes
- Your reminder time and settings
- People you add to your Circle: the name, relationship and birth date you enter for them. This stays on your device and is never sent to us or anyone else.
Deleting the app deletes this information from the device (see iCloud backup below for the copy in your iCloud). If iCloud device backup is turned on, Apple may include app data in your backup under Apple's own terms.
Invite links
If you send someone an invite from your Circle, the link includes your first name, birth date and constitution type, so they can compare with you. If they send their result back, their link includes the same details about them. These details sit in the part of the link after the "#", which browsers don't send to our website or any server. Our invite page reads them only in the recipient's browser. We never receive or store them. Only share links with people you choose.
Information we process to create your daily reading
When you complete a check-in, the app sends our server: your constitution type, today's focus element, a list of short signals derived from your answers (for example "short sleep" or "feeling cold"), the three suggested practices, your optional note, and your first name. Our server passes this to Anthropic, our AI provider, which writes the wording of your reading. The advice itself is chosen by fixed rules in the app, not by AI.
We do not store this information on our server after the reading is returned. Under its commercial terms, Anthropic does not use this data to train its models, and it retains API inputs only for a limited period for safety and abuse monitoring. If our server can't be reached, the app writes a simpler reading on your device instead.
If your note suggests you may be in crisis or need urgent medical care, the app shows a message encouraging you to contact a professional or emergency services instead of a reading. That check happens on your device and on our server, and nothing is reported to anyone.
iCloud backup and sync
If you're signed in to iCloud, Fivefold keeps a copy of your profile, check-ins, readings, saved items and Circle in your own private iCloud storage, so they come back on a new phone or after reinstalling, and stay in step across your devices. This uses Apple's CloudKit private database and iCloud key-value storage. We can't access this data; it's protected by your Apple ID and Apple's privacy policy. Tongue photos stay on the device and aren't backed up by Fivefold. You can turn iCloud off for Fivefold in iOS Settings → your name → iCloud.
Apple Health (optional)
If you turn on Apple Health in the app, Fivefold asks Apple Health for permission to read your sleep, step count, heart rate variability and menstrual cycle data. You choose which of these to allow, and you can change this any time in the Health app. Fivefold never writes to Apple Health.
Health data is used only on your device: to suggest your sleep score in the morning check-in, to show cycle-aware guidance, and to summarize your recent sleep, steps and heart rate variability. It is never sent to our server, to our AI provider, to analytics or to any other third party, and it is never used for advertising or marketing.
Location and weather (optional)
If you allow it, Fivefold uses your approximate location to fetch today's local weather from Apple Weather (WeatherKit), so it can describe how the weather may affect you. Your approximate location is sent to Apple only to get the forecast. We don't receive or store your location, and it isn't used for analytics or advertising. You can turn this off in the app (You → Local element weather) or in iOS Settings.
Analytics
We use PostHog to understand how the app is used, for example which onboarding steps people complete, whether reminders are switched on, and whether the paywall loads. Events use a random identifier created on your device, not your name, email or Apple ID. A few events include coarse labels, such as your constitution type or the day's focus element, so we can see which parts of the app work for which people. We never send your check-in answers or notes to analytics.
You can switch analytics off at any time in You → Share anonymous usage analytics.
Feedback
If you send feedback from the app, we receive your rating, your message, the app version and the random Support ID, through our analytics provider. Please don't include health details you'd rather keep private. If analytics is switched off, the app opens an email instead, and your email provider's terms apply.
Purchases
Subscriptions are processed by Apple. We never see your payment details. We use RevenueCat to check whether your subscription is active. RevenueCat receives your purchase history and a random app user identifier. The app may also share Apple's Search Ads attribution token with RevenueCat so we can tell which ads lead to subscriptions. Apple designed this to work without tracking you across apps.
Service providers
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Hosts the server function that requests your reading | Check-in summary, optional note, first name (not stored) |
| Anthropic | Writes the wording of your daily reading | Same as above |
| PostHog | Anonymous product analytics (can be turned off) | App events, random device identifier, coarse labels |
| RevenueCat | Subscription status | Purchase history, random user identifier, Search Ads token |
| Apple | App Store, payments, notifications | Per Apple's privacy policy |
| Apple Weather (WeatherKit) | Today's local weather, if you allow location | Approximate location |
These providers process data on our behalf, under contracts that limit what they may do with it. Some may process data outside your country, including in the United States.
What we don't do
- We don't sell or rent personal information.
- We don't use your data for advertising, and we don't track you across other companies' apps or websites.
- We don't send Apple Health data anywhere; it stays on your device.
- We don't access your contacts or photo library, and we don't track your precise location.
Your choices and rights
- Delete your data: delete the app to remove everything stored on your device.
- Analytics: turn it off in the app at any time.
- Notifications: turn reminders off in the app or in iOS Settings.
- Access or deletion requests: depending on where you live (for example under GDPR or CCPA), you may have the right to access, correct or delete personal information, or to object to processing. Email us at the address below. Because we don't have accounts, we may ask for the Support ID shown in the app under You, so we can find your analytics data.
Children
Fivefold is intended for adults aged 18 and over. We don't knowingly collect information from children. If you think a child has used the app, contact us and we'll delete any related analytics data.
Security
Data sent between the app and our providers is encrypted in transit. No system is perfectly secure, but we limit what we collect so there is less to protect.
Changes
If we change this policy, we'll update the date above. If the changes are significant, we'll tell you in the app.
Contact
[LEGAL NAME], [ADDRESS]
Email: [CONTACT EMAIL]