Privacy Policy

The short version

• Dyld keeps your data on your iPhone and also syncs it to your Dyld account, so it is there when you sign in again and so a coach you choose can see it.
• There are two separate steps. When you create an account, you agree that your own data is stored in your account. A coach can see your data only after you accept that coach's invite, on a screen that lists exactly what they will see. You can end coaching at any time.
• Your account data is held on our server, which runs on Supabase (olytscherrfeucseyscv.supabase.co). If you sign in with Google, Google's sign-in servers are contacted as well.
• The AI runs on your iPhone. Your logs, photos and chat messages are never sent to any cloud AI service.
• There is no advertising, no analytics, no crash-reporting service and no tracking in the app.
• Photos you scan are read by an AI model on your iPhone and deleted straight afterwards. They are never uploaded.

What Dyld keeps on your iPhone

Your data is stored on your iPhone, in the app's private storage, as a working copy, so the app works offline and syncs when it can.

• Account: your email address, how you signed in, and an account id. Your sign-in session is stored in the iOS Keychain on this device only. For an email account, your password is checked by our server's sign-in service and is not stored on your iPhone.
• Profile: your first and last name, date of birth, height, weight, biological sex, goal and unit preference. The app uses these to work out your calorie and protein targets.
• Your logs: meals (name, calories, protein, carbs, fat, time), weigh-ins, workout sets (exercise, weight, reps), daily check-ins, your own exercises and foods, your training split, your goals, your meal reminders, and what you choose to do with the weekly suggestions.
• Small settings: how many free AI chat messages you have used today, whether you have seen the feature tour, your assistant language, and the people you blocked in Live Rooms. These stay on your iPhone.

Your AI chat messages and the replies are held in memory while the app is open. They are not saved and not sent anywhere.

The files that hold your profile, account and logs on your iPhone are excluded from iCloud and computer backups and use iOS file protection. What has synced to your account stays on our server if you lose or replace your iPhone; anything that is not synced, such as workout sets, is only on the iPhone. Photos and body scans are never synced and stay on the iPhone that took them.

What leaves your iPhone

These are all of the network connections the app makes in this version.

Our server, run on Supabase (olytscherrfeucseyscv.supabase.co)

This is where your Dyld account lives. Supabase hosts and stores this data for us, and it is used only to run the app's features: syncing your account, and coaching when you have agreed to it. Your IP address and your iPhone's standard request headers reach the server with every request, as with any web request. The server receives:

• Your account: email address, account id and how you signed in. For an email account, your password goes to Supabase's sign-in service, which stores it only in hashed form.
• Your profile: name, age, biological sex, height, weight, goal, units, time zone and language setting.
• Your health and fitness logs: meals, weigh-ins and daily check-ins (weight, calories, protein, whether you trained, and an optional note), and the calorie and protein targets worked out from them. The workout sets you log stay on your iPhone in this version and are not synced.
• If you work with a coach: the coaching link, the messages you and your coach send in your coaching thread, voice broadcasts your coach records and your reactions to them, and the meal plans, programs and notes your coach assigns.
• If you apply to be a coach: your application (bio and certification details) and the decision on it. As a coach, your client list, the time you log and the message drafts you prepare and send.
• Reports you file about another person, with the reason you chose.

Other services

• Google (accounts.google.com and oauth2.googleapis.com), only if you choose Continue with Google. You sign in on Google's own page at accounts.google.com, and the app never sees your Google password. The app then asks oauth2.googleapis.com to complete the sign-in and receives your name, your email address and your Google account id. It passes Google's sign-in token to our server to create or open your Dyld account. Google handles your sign-in under its own privacy policy.
• Open Food Facts (world.openfoodfacts.org). When you scan or type a barcode, use Search foods, use Identify by Photo, or finish a plate scan, the app asks Open Food Facts for nutrition numbers. What it sends is the barcode digits, the words you typed, or the food names the on-device AI recognised, plus your IP address and the app's user-agent text. It does not send your photo, your name, your email or your logs. Open Food Facts is an independent service and handles those requests under its own privacy policy.
• Hugging Face (huggingface.co). Only when you tap Download in Profile, AI Model, your iPhone asks Hugging Face for the AI model file, which is about 2.6 GB. Hugging Face can pass the request on to its own content-delivery servers. The request contains no account, profile or log data, but as with any web request those servers can see your IP address and the standard headers your iPhone sends.
• Our website (dyld.io). When you open the Privacy Policy, Terms of Use or Support from the app, it first checks that the page on dyld.io loads, then opens it in Safari. If it does not load, the app shows its own copy instead. The check sends no account, profile or log data, only your IP address and the standard headers, as with any web request. The password-reset email also opens a page there, which passes the reset link to the app and nowhere else.
• Apple. Sign in with Apple and App Store purchases are provided by Apple and run under Apple's own privacy terms. If you use Sign in with Apple, the name and email address Apple shares go to your Dyld account. Dyld does not receive your card or payment details.

Nothing else is contacted. The app contains code for a live-audio provider for Live Rooms, but it is not switched on in this version, so it receives nothing from you.

Your coach and the two consents

• Creating an account. When you sign up, you agree that your own data syncs to your Dyld account. At that point only you can see it.
• Accepting a coach's invite. A coach sees nothing until you enter their invite code and confirm a second screen that lists what they will see: your weight and weigh-in history, the meals you log, your daily check-ins and the messages you send in your coaching thread. Your workout sets are not on that list because they stay on your iPhone. The same screen says what they will never see: your progress photos and your body scans. Our server enforces this: a coach can read your data only while your coaching link is active.

You can end coaching at any time from your profile. The moment you do, your coach loses access to your logs. The messages the two of you already exchanged stay readable to both of you, and neither of you can add to the thread.

AI on your iPhone

Plate scanning, the Dyld AI chat and the drafts the app suggests are produced by an AI model that runs on your iPhone once you have downloaded it. Your logs, photos and chat messages are not sent to any AI service. When you scan a photo, the app shrinks it, writes it to a temporary file for the model to read, and deletes the file straight afterwards. The app does not keep your scan photos.

If a coach edits and sends a message the on-device AI drafted, that message is sent to our server like any other coaching message.

Until you download the model, a plate scan shows a clearly labelled demo result and the chat says the model is not ready. AI estimates are approximate.

Camera, photos, microphone and speech

• Camera: used for scanning food and barcodes, and for the camera preview in Live Rooms. You are asked for permission the first time.
• Photos: choosing a meal photo uses the system photo picker, which gives the app only the photo you choose.
• Microphone and speech recognition: used when you log a set or a weigh-in by voice, when a coach records a voice broadcast, and for the level meter in Live Rooms. Voice logging uses Apple's speech recognition set to run on your iPhone only, so your voice is not sent to Apple or to us, and the app does not save that audio. Where your iPhone cannot recognise speech on the device, the microphone button is switched off and you type instead. A coach's voice broadcast is different: it is recorded on purpose and uploaded to our server so their clients can play it.

You can change any of these permissions in the iOS Settings app.

Live Rooms

Live audio and video are not switched on in this version. The camera and microphone in a Live Room only show you your own preview and your own level, on your screen. A coach's scheduled live classes are listed from our server.

Subscriptions

Dyld Pro is sold through the App Store. Apple handles the payment and tells the app whether your subscription is active. The app does not receive your payment details and does not send purchase information to our server.

Notifications

Meal reminders, if you switch them on, are local notifications scheduled on your iPhone. There is no push server.

No tracking

Dyld does not track you. It does not use your data for advertising, does not share it with data brokers and does not use an advertising identifier. Your data is linked to your account only so the app's features work.

Your choices

• Sign Out (Profile, Account) signs you out on this iPhone. Your account and synced data stay on our server so you can sign back in.
• End coaching (Profile) removes your coach's access to your logs straight away.
• Delete Account (Profile, Account) asks our server to delete your account. A server function removes your sign-in record, and with it every row that belongs to you in our database: your profile, goals and targets, meals, workouts, weigh-ins, check-ins, coaching links, messages you sent, meal plans and programs assigned to you, a coach application, and reports you filed. If you are a coach, it first erases the audio files of every voice broadcast you recorded, which are stored separately from the database; if those cannot be erased, your account is not deleted and the app tells you so, and you can try again. The app then erases your data on this iPhone: your profile, logs, saved foods and exercises, reminders, settings and saved sign-in details. If the server cannot be reached, the app still erases this iPhone and tells you which part did not finish, so you can sign in and choose Delete Account again.
• Deleting the app removes everything the app stored on your iPhone, apart from Keychain items, which iOS can keep until you use Delete Account. It does not delete your account on our server. Use Delete Account for that.
• The downloaded AI model can be removed at any time in Profile, AI Model.

To ask for a copy of your data, or for help deleting it, write to the contact email at the top of this policy.

Children

Dyld is for people who are 13 or older. Setup asks for your date of birth. If you are under 13, the app stops setup, does not save a profile and offers only Sign Out.

Health information

Dyld gives general wellness and nutrition information. It is not medical advice, diagnosis or treatment, and AI food estimates are approximate. Talk to a qualified professional before you change your diet, supplements or exercise, especially if you have a health condition.

Changes to this policy

If the app starts to collect or send anything new, this policy will be updated first and the effective date at the top will change. The current version is always available in the app, in Profile, under Support & Legal, and at dyld.io/privacy.

Contact

Write to the contact email in the details at the top of this policy.