Privacy Policy

The short version

DYALD keeps your data on your iPhone and also syncs it to your DYALD account, so it is there when you sign in again and so a coach you choose can see it.
There are two separate steps. When you create an account, you agree that your own data is stored in your account. A coach can see your data only after you accept that coach's invite, on a screen that lists exactly what they will see. You can end coaching at any time.
Your account data is held on our server, which runs on Supabase (wawplzethbibnzroruca.supabase.co). If you sign in with Google, Google's sign-in servers are contacted as well.
The AI runs on your iPhone. Your logs, photos and chat messages are never sent to any cloud AI service.
There is no advertising and no tracking in the app, and no outside analytics or crash-reporting service. DYALD does count a few anonymous milestones and receive crash reports on our own server, with nothing that names you. See Crash reports and anonymous usage below.
Photos you scan are read by an AI model on your iPhone and deleted straight afterwards. They are never uploaded.
Apple Health is optional and off until you tap Connect. If you connect it, your weight and body fat from Health are added to your logs, so they sync to your account and your coach can see them. Your active energy from Health stays on your iPhone and is never sent anywhere. Your steps and sleep stay on your iPhone too, unless you turn on Share steps and sleep with my coach, which is off until you do: then your daily step total and hours of sleep go to your DYALD account and your coach can see them. See Apple Health below.
If you work with a coach, you can choose to tell them what you do for work and your race or ethnicity. Both are optional, race and ethnicity has a consent screen of its own, and your coach sees only group totals once 5 or more of their clients have answered, never your name or your own answer. See Optional answers about you below.
Progress photos you take are different: they are private to you and stored in your DYALD account, with the location and camera details removed. A coach sees only the ones you choose to share, and only while you are working together.

What DYALD keeps on your iPhone

Your data is stored on your iPhone, in the app's private storage, as a working copy, so the app works offline and syncs when it can.

Account: your email address, how you signed in, and an account id. Your sign-in session is stored in the iOS Keychain on this device only. For an email account, your password is checked by our server's sign-in service and is not stored on your iPhone.
Profile: your first and last name, date of birth, height, weight, biological sex, goal and unit preference. The app uses these to work out your calorie and protein targets.
Training background: how long you have trained, how many days a week you can train, the equipment you have, any injuries or limits you pick (lower back, knee, shoulder, hip, wrist, ankle or neck) or type in your own words, and when you answered. Every question is optional. The app uses them to order the ready-made programs, to set how fast a big lower-body lift moves up when you are new to training, and to add a short note to exercises that load an area you picked. It is something you tell DYALD, not a diagnosis, and DYALD gives no medical advice about it.
Food allergies: the allergens you pick (for example peanuts or milk), anything you type under Something else, or that you have none, and when you answered. The app uses them to leave out recipes and meal suggestions that contain them and to warn you about food you log. They are a list you give, not a diagnosis. The AI that runs on your iPhone reads them so it does not suggest those foods; they are never sent to an outside AI service.
Your logs: meals (name, calories, protein, carbs, fat, time), weigh-ins, workout sets (exercise, weight, reps), daily check-ins, your own exercises and foods, your training split, your goals, your meal reminders, and what you choose to do with the weekly suggestions.
Progress photos: the front, side and back photos you take to track your progress, each with the day it was taken. DYALD removes the location and camera details from a photo before saving it, and keeps it on your iPhone until it has been backed up to your account.
Small settings: how many free AI chat messages you have used today, whether you have seen the feature tour, your assistant language, and the people you blocked in Live Rooms. These stay on your iPhone.

Your AI chat is held in memory while the app is open; it is not kept as a chat history and is not sent to any outside AI service. What the on-device AI remembers is different: the facts you asked it to keep, a short summary of your chat and your last few messages are stored in your DYALD account (see below), so they come back on a new phone. Only you can read them. No coach feature ever does.

The files that hold your profile, account and logs on your iPhone are excluded from iCloud and computer backups and use iOS file protection. What has synced to your account, which as of this version includes your workouts, stays on our server if you lose or replace your iPhone and comes back automatically when you sign in again. Your progress photos are backed up to your account as well, in private storage, so they come back on a new iPhone. Body scans are never synced and stay on the iPhone that took them.

What leaves your iPhone

These are all of the network connections the app makes in this version.

Our server, run on Supabase (`wawplzethbibnzroruca.supabase.co`)

This is where your DYALD account lives. Supabase hosts and stores this data for us, and it is used only to run the app's features: syncing your account, coaching when you have agreed to it, and, with nothing that names you, counting crashes and a few milestones so we can fix and improve the app. Your IP address and your iPhone's standard request headers reach the server with every request, as with any web request. The server receives:

Your account: email address, account id and how you signed in. For an email account, your password goes to Supabase's sign-in service, which stores it only in hashed form.
Your profile: name, age, biological sex, height, weight, goal, units, time zone and language setting.
Your training background, as you told DYALD (how long you have trained, days a week, equipment, the injuries or limits you picked or typed, and when). Only you, and a coach whose link with you is active, can read it; only you can change it.
Your health and fitness logs: meals, supplements, weigh-ins, daily check-ins (weight, calories, protein, whether you trained, and an optional note), body fat readings and tape measurements, and the calorie and protein targets worked out from them, including a change you make to your own targets when you are not working with a coach. Your workout sessions and sets (workout names and dates, exercises, muscle groups, reps, weights, times, distances and cardio details) are stored in your DYALD account, past and future, so they come back if you get a new phone. Only you and your linked coach can see them, only when you choose to share them with your linked coach, so that coach can review your training. Workouts stay in your account until you delete them or delete your account. Deleting a workout in DYALD deletes its copy from your account the next time your iPhone is online. Workouts your coach logs for you, including their notes, are stored in your account and shown on your iPhone. Body fat readings and tape measurements work the same way: a coach whose link with you is active can read them, and only you can change them.
Your steps and sleep, only if you turn on Share steps and sleep with my coach, which is off until you do: one total of steps and one total of minutes asleep for each day, nothing finer than a day, starting with today and the two days before it. Only you and your coach can see them, and your coach only while you are working together. Turning it off, or ending coaching, deletes the days you shared from our server. See Apple Health below.
Your progress photos, if you take any: the photo itself (a JPEG with the location and camera details removed), the day it was taken, which pose it is, and whether you have shared it with your coach. The photos are held in private storage that only you can open. A coach can open a photo only if you shared it and your link with them is active; ending coaching switches sharing off for every photo. Deleting a photo removes it from your iPhone and from our storage.
Your goals and how close you are to each one, and the peptides you track and log. A coach whose link with you is active can read your goals. A coach can read your peptides only while you have turned on sharing them in Profile, which is off by default.
Your food allergies, as you told DYALD (the allergens you picked, what you typed, or that you have none, and when). Only you, and a coach whose link with you is active, can read them; only you can change them.
Your optional answers about you, if you give any: your occupation, and your race and ethnicity together with the time you agreed to share it. Only you can read them. Your coach cannot read them and sees only group totals of 5 or more people. See Optional answers about you below.
What DYALD's on-device AI remembers about you: facts you asked it to keep, and a short summary of your chat with it and your last few messages with it. This is stored in your DYALD account too, so it comes back if you get a new phone. Only you can read it. No coach feature ever reads it, and you can clear it in Settings under What the AI remembers.
If you work with a coach: the coaching link, the messages you and your coach send in your coaching thread, voice broadcasts your coach records and your reactions to them, and the meal plans, programs and notes your coach assigns.
If you apply to be a coach: your application (years of experience, specialties, phone number, Instagram and TikTok usernames, and the optional bio and certification details) and the decision on it. As a coach, your client list, the time you log, the message drafts you prepare and send, and the exercise videos, poster images and voice notes you upload for your clients.
Feedback you send from Settings, Help, Send feedback: your message, the category you pick (bug, idea or other), the app version, the iOS version and your iPhone model. If you turn on Include my email so you can reply, which is off until you do, your email address and account id go with it; otherwise the message is stored without your email address or account id. Until it is sent, the message waits on your iPhone for up to 14 days. If you delete your account, the message stays and your email address and account id are removed from it.
Crash reports and anonymous usage counts, which are not tied to your account. See Crash reports and anonymous usage below.
Reports you file about another person, with the reason you chose.

Other services

Google (accounts.google.com and oauth2.googleapis.com), only if you choose Continue with Google. You sign in on Google's own page at accounts.google.com, and the app never sees your Google password. The app then asks oauth2.googleapis.com to complete the sign-in and receives your name, your email address and your Google account id. It passes Google's sign-in token to our server to create or open your DYALD account. Google handles your sign-in under its own privacy policy.
Open Food Facts (world.openfoodfacts.org). When you scan or type a barcode, use Search foods, use Identify by Photo, or finish a plate scan, the app asks Open Food Facts for nutrition numbers. What it sends is the barcode digits, the words you typed, or the food names the on-device AI recognised, plus your IP address and the app's user-agent text. It does not send your photo, your name, your email or your logs. Open Food Facts is an independent service and handles those requests under its own privacy policy.
Hugging Face (huggingface.co). Only when you tap Download in Settings, AI Model, your iPhone asks Hugging Face for the AI model file, which is about 2.6 GB. Hugging Face can pass the request on to its own content-delivery servers. The request contains no account, profile or log data, but as with any web request those servers can see your IP address and the standard headers your iPhone sends.
Our website (dyald.io). When you open the Privacy Policy, Terms of Use or Support from the app, it first checks that the page on dyald.io loads, then opens it in Safari. If it does not load, the app shows its own copy instead. The check sends no account, profile or log data, only your IP address and the standard headers, as with any web request. The password-reset email also opens a page there, which passes the reset link to the app and nowhere else.
Apple. Sign in with Apple and App Store purchases are provided by Apple and run under Apple's own privacy terms. If you use Sign in with Apple, the name and email address Apple shares go to your DYALD account. DYALD does not receive your card or payment details.

Nothing else is contacted. The app contains code for a live-audio provider for Live Rooms, but it is not switched on in this version, so it receives nothing from you.

Your coach and the two consents

Creating an account. When you sign up, you agree that your own data syncs to your DYALD account. At that point only you can see it.
Accepting a coach's invite. A coach sees nothing until you enter their invite code and confirm a second screen that lists what they will see: your name, goal, age, sex, height and goal weight, your weight, weigh-in history, body fat readings and tape measurements, the meals you log, the supplements you log, your calorie and protein targets and every change to them, your daily check-ins, the messages you send in your coaching thread, the food allergies you told DYALD, your injuries, equipment and experience, your goals and how close you are to each one, the peptides you track (only if you turn on sharing in Profile, which is off by default), the progress photos you choose to share, and the workouts they log for you. The same screen lists what stays on your iPhone: your body scan and the food photos you scan, which are never saved. Our server enforces this: a coach can read your data only while your coaching link is active.
Sharing your own workouts. Right after you join a coach, and any time after in Profile › My Coach, you choose plainly whether that coach also sees your own workouts, past and future: every session you log from then on, plus every one you already logged before you chose. This is separate from the consent above. Accepting an invite alone does not share them. Your own workouts are stored in your DYALD account either way, so they come back on a new phone, but a coach reads them only while you have sharing switched on and your link with them is active; turning it off removes your coach's access right away.
Sharing your steps and sleep. This is a third choice and it is off until you turn it on. If Apple Health is connected, you are asked once right after you join a coach, and you can change it any time in Profile › My Coach or in Settings under Apple Health. Accepting an invite alone does not share them. See Apple Health below for exactly what is sent.

You can end coaching, stop sharing your own workouts, or stop sharing your steps and sleep, at any time from your profile. The moment you do, your coach loses access to your logs, including any workouts you had shared. Your data stays in your DYALD account regardless: ending coaching or stopping sharing changes who can see it, not whether DYALD keeps it. The one exception is shared steps and sleep, which are on our server only for your coach to see, so they are deleted when you stop sharing them or coaching ends. The messages the two of you already exchanged stay readable to both of you, and neither of you can add to the thread.

AI on your iPhone

Plate scanning, the DYALD AI chat and the drafts the app suggests are produced by an AI model that runs on your iPhone once you have downloaded it. Your logs, photos and chat messages are not sent to any AI service. When you scan a photo, the app shrinks it, writes it to a temporary file for the model to read, and deletes the file straight afterwards. The app does not keep your scan photos.

If a coach edits and sends a message the on-device AI drafted, that message is sent to our server like any other coaching message.

Until you download the model, a plate scan shows a clearly labelled demo result and the chat says the model is not ready. AI estimates are approximate.

Camera, photos, microphone and speech

Camera: used for scanning food and barcodes, for taking progress photos, for the camera preview in Live Rooms, and when a coach records an exercise video, which is uploaded to our server so their clients can watch it. You are asked for permission the first time.
Photos: choosing a meal photo, or an existing photo to add to your progress photos, uses the system photo picker, which gives the app only the photo you choose.
Microphone and speech recognition: used when you log a set or a weigh-in by voice, when a coach records a voice broadcast, and for the level meter in Live Rooms. Voice logging uses Apple's speech recognition set to run on your iPhone only, so your voice is not sent to Apple or to us, and the app does not save that audio. Where your iPhone cannot recognise speech on the device, the microphone button is switched off and you type instead. A coach's voice broadcast, voice note or exercise video is different: it is recorded on purpose and uploaded to our server so their clients can play it.

You can change any of these permissions in the iOS Settings app.

Apple Health

Apple Health is optional. DYALD does not ask for it until you tap Connect Apple Health, in Settings or in setup. The Health permission sheet then lists each kind of data separately, and you choose which ones to allow.

What DYALD reads from Apple Health, if you allow it:

Weight and body fat. DYALD looks at the last 90 days and adds one reading per day from other apps and scales to your logs, labelled From Apple Health. Anything DYALD itself saved to Health is not read back in. A weigh-in you typed for a day is never replaced by an imported one, and one you delete stays deleted.
Steps, active energy and last night's sleep. These are shown on the Stats card. Steps and sleep are also sent to your coach, but only if you turn that on (see below).

What DYALD saves to Apple Health, if you allow it: your finished workouts (start and end time), the weigh-ins you type (weight), and the meals you log (calories, protein, carbs and fat). Editing or deleting one in DYALD edits or deletes the copy DYALD saved. DYALD can only change what it saved itself.

What syncs and what does not:

Weight and body fat that DYALD reads from Apple Health become ordinary weigh-ins and body fat readings in your DYALD account. Like any other weigh-in or body fat reading, they are stored on our server (Supabase), they come back if you get a new phone, and a coach whose link with you is active can see them. This is how coaching works, and it is the reason to connect.
Active energy stays on your iPhone. It is read when you open the app, shown on your screen, and kept only in the app's memory. It is not saved to the app's storage, not sent to our server, not shown to a coach, and not used by the AI or to work out your targets.
Steps and sleep stay on your iPhone too, unless you turn on Share steps and sleep with my coach, in Profile under My Coach or in Settings under Apple Health. It is off until you turn it on. If Apple Health is connected, you are asked once when you join a coach; if it is not, you are not asked. With it on, DYALD sends one total of steps and one total of minutes asleep for each day, nothing finer than a day, starting with today and the two days before it, to your DYALD account on our server. DYALD sends them while the app is open and Apple Health is connected. Only you and your coach can see them, and your coach only while you are working together. Turn it off and DYALD stops sending new days and deletes the days you already shared from our server, as soon as your iPhone is online. Ending coaching deletes them too. They are not used by the AI or to work out your targets.
The workouts, weigh-ins and meals DYALD saves to Apple Health are the same ones that already sync as described above. Saving them to Health sends nothing new to our server.
Which Apple Health readings DYALD has already looked at (an internal id for each, with no readings in it) is kept on your iPhone only, so a reading is not added twice.

Apple Health data is never used for advertising, never sold, and never shared with data brokers or any other third party. DYALD does not use it for tracking. The only readings from Apple Health that leave your iPhone are the weight and body fat described above and, only if you turn it on, your daily steps and sleep totals. They go only to your DYALD account on our server.

To stop: in DYALD, open Settings, Apple Health and tap Disconnect Apple Health. DYALD then stops reading from and saving to Health. Weigh-ins and body fat readings already added to your DYALD account stay there until you delete them or delete your account, and what DYALD already saved in Health stays in Health. Disconnecting also stops new steps and sleep from being sent; days you already shared stay until you turn off Share steps and sleep with my coach. To change what DYALD may read or save, or to remove its access completely, open the Health app and go to Sharing, then Apps, then DYALD (or iOS Settings, Health, Data Access & Devices). Delete Account does not change your Apple Health permissions or remove the readings stored in Health; delete those in the Health app.

Optional answers about you

If you work with a coach, DYALD offers two optional questions, so your coach can see who their clients are as groups. You can skip both, and skipping stores nothing.

Occupation. You pick one from a short list (for example Student, Office / desk job or Healthcare). Prefer not to say stores nothing.
Race and ethnicity. This is sensitive information, so it has a screen of its own before the question, which says what it is used for. You choose any options that fit, or tap No thanks. DYALD stores an answer only after you continue past that screen and save, and it records when you did. Prefer not to say stores nothing.

Where it is stored: in your DYALD account on our server, where only you can read, change or delete it. Your coach cannot read it, even while you are working together.

What your coach sees: group totals for the clients they currently coach, never your name and never your own answer. A total appears only once 5 or more of that coach's clients have answered that question, and a group smaller than 5 is merged into one group called Other / fewer than 5 so that no total shows fewer than 5 people. Race and ethnicity totals can add up to more than 100 percent because you can choose more than one option. Your coach also sees clients by age group (for example 25 to 34), worked out from the age you gave for your goal. That is not a new question, and your coach can already see your age while you work together. When coaching ends, you drop out of that coach's totals.

What it is used for: only to show those totals, and, for age and occupation only, to suggest post ideas to your coach, worked out in your coach's app from the totals. Your race and ethnicity is never used to make those ideas. It is not used for advertising, not sold, not shared with any other company, not read by the AI and not used to work out your targets.

Taking it back: in Profile › My Coach › About you you can change your answers at any time. Remove race and ethnicity deletes that answer and your agreement to share it. Remove my answers deletes everything you gave. Saving and removing need a connection: when your iPhone is online the answer is saved or deleted on our server straight away, and if it is not, the app tells you it could not. Once an answer is removed, your coach's totals stop counting you the next time they load. Deleting your account deletes it too.

Crash reports and anonymous usage

These go to our own server (the Supabase address above), not to an outside analytics or crash-reporting company, and not with your name, email, account id or anything you typed.

Crash, hang and similar reports. iOS only hands DYALD these reports if you allow it in iOS Settings, under Privacy & Security, Analytics & Improvements, Share With App Developers. Each is the technical report iOS writes about the app: where it stopped, counters and codes, the app and iOS versions and your iPhone model. DYALD has no switch for these of its own.
Anonymous usage counts. DYALD counts six milestones: finishing setup, logging your first meal, finishing your first workout, opening your weekly recap (at most once a day), joining a coach and starting DYALD Pro. Each count is the milestone, the day, the app version and the iOS version. This is on by default. Turn it off in Settings, Privacy, Share anonymous usage, and nothing more is sent and anything waiting is dropped.

Both carry a random number that the app makes fresh each day. It lets our server limit how many reports one iPhone can send in a day. It is made on your iPhone, is not tied to your account, and cannot be linked from one day to the next. As with any web request, our server also sees your IP address.

Live Rooms

Live audio and video are not switched on in this version. The camera and microphone in a Live Room only show you your own preview and your own level, on your screen. A coach's scheduled live classes are listed from our server.

Subscriptions

DYALD Pro is sold through the App Store. Apple handles the payment and tells the app whether your subscription is active. The app does not receive your payment details and does not send purchase information to our server.

Notifications

Meal reminders, if you switch them on, are local notifications scheduled on your iPhone. There is no push server.

No tracking

DYALD does not track you. It does not use your data for advertising, does not share it with data brokers and does not use an advertising identifier. Your data is linked to your account only so the app's features work.

Your choices

Stop sharing workouts (Profile › My Coach) removes your coach's access to your own workouts, past and future, as soon as your iPhone is online. Your workouts keep syncing to your DYALD account either way, so they come back if you get a new phone. Ending coaching also removes that access straight away.
Share steps and sleep with my coach (Profile › My Coach, or Settings, Apple Health) turned off stops new days being sent and deletes the days you already shared from our server, as soon as your iPhone is online. Ending coaching deletes them too.
About you (Profile › My Coach) lets you change or remove your occupation, and your race and ethnicity, at any time. See Optional answers about you above.
Share anonymous usage (Settings, Privacy) turned off stops the usage counts. Crash reports follow the Share With App Developers setting in iOS Settings.
Delete a workout in DYALD to delete its copy from your account, as soon as your iPhone is online.
Sign Out (Settings, Account) signs you out on this iPhone. Your account and synced data stay on our server so you can sign back in.
End coaching (Profile) removes your coach's access to your logs straight away.
Delete Account (Settings, Account) asks our server to delete your account. A server function removes your sign-in record, and with it every row that belongs to you in our database: your profile, goals and targets, training background, food allergies, meals, workouts, weigh-ins, check-ins, coaching links, messages you sent, meal plans and programs assigned to you, progress photo records, the steps and sleep days you shared, your optional answers about you, a coach application, and reports you filed. Feedback you sent stays, with your email address and account id removed from it. Your progress photos are stored separately from the database too, so the same step erases them first. If you are a coach, it first erases the audio files of every voice broadcast you recorded, and the exercise videos and voice notes you uploaded, which are stored separately from the database; if those cannot be erased, your account is not deleted and the app tells you so, and you can try again. The app then erases your data on this iPhone: your profile, logs, saved foods and exercises, reminders, settings and saved sign-in details. If the server cannot be reached, the app still erases this iPhone and tells you which part did not finish, so you can sign in and choose Delete Account again.
Deleting the app removes everything the app stored on your iPhone, apart from Keychain items, which iOS can keep until you use Delete Account. It does not delete your account on our server. Use Delete Account for that.
Disconnect Apple Health (Settings, Apple Health) stops DYALD reading from and saving to Apple Health straight away. See Apple Health above for what stays where.
The downloaded AI model can be removed at any time in Settings, AI Model.

To ask for a copy of your data, or for help deleting it, write to the contact email at the top of this policy.

Children

DYALD is for people who are 13 or older. Setup asks for your date of birth. If you are under 13, the app stops setup, does not save a profile and offers only Sign Out.

Health information

DYALD gives general wellness and nutrition information. It is not medical advice, diagnosis or treatment, and AI food estimates are approximate. Talk to a qualified professional before you change your diet, supplements or exercise, especially if you have a health condition.

Changes to this policy

If the app starts to collect or send anything new, this policy will be updated first and the effective date at the top will change. The current version is always available in the app, in Settings, under Support & Legal (also in the app menu), and at dyald.io/privacy.

Contact

Write to the contact email in the details at the top of this policy.