Last updated: 10 October 2026
Ayumu is a personal self-care app. This policy explains what we collect, why, where it is stored, and the control you have over it. We have tried to write it plainly rather than in legal boilerplate.
Ayumu is operated by the app's developer ("we", "us"). For any privacy question or request, contact us at hello@ayumu.app.
We only hold what you enter into the app, plus the minimum needed to run an account.
| Data | Why we hold it |
|---|---|
| Account — email address, name, password | To create your account, sign you in, and let you reset a forgotten password. Passwords are stored only as a salted bcrypt hash; we never store or see the password itself. |
| Profile and settings — your "dream name", personal vision, wake/bed times, daily goals, reminder choices, which Home screen tiles you show, and similar app settings; and, if you answer it, how you heard about Ayumu | To personalise the app and schedule your reminders. How you heard about Ayumu is optional, never shown to anyone, and only counted in totals so we know which channels work. Settings are saved to your account so they follow you to a new phone after you sign in. Your dream name (not your real name) is what other people see if you join the leaderboard or add friends. |
| Activity you log — tasks, water, mood, sleep, focus/work sessions, meditation, breathwork, reading, workouts, exercises, challenges, countdowns and body weight | This is the core purpose of the app: to show you your own history, streaks, XP and progress. |
| Written entries — morning and evening journals, gratitude notes, thought reframes, day notes and captions | So you can read back what you wrote. These are personal reflections and we treat them as sensitive. |
| Health-related details — age, sex, height, weight, activity level and goal (for the calorie calculator), plus food and calories logged | Only to calculate your calorie and macro targets and show your nutrition history. |
| Cycle tracking ("Track Her") — period start and end dates, and optional daily notes of flow, symptoms, mood and free text; only if you choose to use it | Only to show you your own calendar and estimate your next period, fertile window and ovulation. Estimates are calculated when you open the screen and are never stored. Cycle data never appears on the scorecard, leaderboard, friends screens or in crash reports. You can export it as a CSV file, or delete all of it, from inside the app without deleting your account. |
| Photos — progress photos (with an optional caption, date and body weight), photos you attach to journal entries, and your vision photo; only images you choose to upload | To show them back to you. Photos are stored in private storage and are only ever served to you through short-lived, expiring links. |
| Friends — your friend code, the friend requests you send and accept, and cheers you send | So you and the friends you choose can see each other's progress and cheer each other on (see section 3). |
| Invites — who invited you (and the code you used), and whether the invite reward has been paid | To pay the invite reward to you both, at most once, and to stop rewards being gamed. Until the reward is paid, the friend who invited you can see how many days you have used Ayumu — a count only, never what you logged. |
| In-app notices — the updates listed under the bell: cheers, invite updates, and badge, mission and challenge rewards | So you can see what happened while you were away. Each notice is deleted after 30 days. |
| Push token — an address for your phone that lets notifications reach it, issued through Expo by Apple (on iPhone) or Google (on Android, together with a Firebase installation ID) | Only to deliver the notifications our server sends: friends' cheers, invite updates, and badge, mission and challenge rewards. It is not used for advertising and is removed when you sign out. |
| Reports and blocks — if you report or block another user: who, the reason you chose and any note you add | To review reports, keep the leaderboard and friends features safe, and hide people you have blocked from you. A report reaches us as an email containing the reported person's dream name, the reason and your note. |
| Crash reports — when the app or our server hits an error: the error, where in the code it happened, the app version, basic device details (model, operating system) and a random installation ID | To find and fix bugs. Crash reports are not linked to your account, name or email, and are set up to leave out what you write and log, including journals, moods and cycle data (see section 5). |
Like any online service, our hosting providers see your IP address when the app connects. We use it briefly, in memory, to slow down password-guessing and abuse, and we do not store it in your account. Our hosting providers' standard logs record it for up to about 30 days. When you search in the app (for example for a food), the search words are used to answer that request and are not stored.
Everything you write and log is private to you. The only things other people can see are:
If you would rather not be identifiable, choose a dream name that isn't your real name. You can report or block anyone you see on the leaderboard or in your friends list using the ⋯ button. Blocking someone removes them from your friends and leaderboard and stops their requests and cheers; they are not told. Reports come to us by email and we review them within 24 hours; the person you report is not told who reported them.
Your reminders and timer alarms are scheduled on your phone and work without our server. Our server sends only a few kinds of notification: a cheer from a friend, invite updates (a friend joined with your code, or an invite reward was paid), and badge, mission and challenge rewards. They are delivered through Expo's push service and then Apple Push Notification service (iPhone) or Google Firebase Cloud Messaging (Android). A copy of each also appears under the bell in the app for 30 days. You can turn any reminder off in the app, or all notifications off in your phone's settings.
We use a small number of service providers to run the app. They process data on our behalf and are not permitted to use it for their own purposes.
| Provider | Purpose |
|---|---|
| Supabase | Database (your account and entries) and private file storage (photos). |
| Render | Hosting for the app's backend server. |
| Cloudflare | Protects and speeds up the connection to our server, hosts this website, and keeps a private backup copy of uploaded photos. |
| Resend | Account emails: verification codes, password-reset codes, and a notice when your password is changed. Also sends report alerts to us (the reported person's dream name, the reason and the reporter's note). Never marketing. |
| Expo | Notifications: passes our server's notifications on to Apple and Google. |
| Apple Push Notification service | Delivers notifications to iPhones. |
| Google Firebase Cloud Messaging | Delivers notifications to Android phones, using a Firebase installation ID for that phone, only for delivery. |
| Sentry | Crash reports from the app and our server, kept for 30 days. Set up so that request contents, journals, moods, cycle data, your name and your email are not sent, and so that IP addresses are not stored. |
| Have I Been Pwned | When you choose a new password, we check it hasn't already been exposed in a public data breach. Only the first five characters of a one-way scrambled form (hash) of the password are sent; the password itself never leaves our server. |
Third-party content. Meditation and yoga videos are YouTube videos shown inside the app. YouTube is not one of our processors: it serves its own content under its own terms, and we send it nothing about you.
| Provider | What happens |
|---|---|
| YouTube (Google) | Plays meditation and yoga videos and shows their thumbnails (Ayumu uses YouTube API Services). When you play a video (or a list shows its thumbnail), Google may receive your IP address and device data under Google's privacy policy. |
Data is transmitted over encrypted HTTPS connections. Our servers and database are hosted outside your country of residence, so your information may be processed internationally.
We keep your data for as long as your account exists. If you delete your account, your profile, entries, photos, friends, invites, in-app notices, reports and blocks are permanently deleted from our database and file storage straight away. This cannot be undone, so export or save anything you want to keep first. Copies in our backups are removed as the backups rotate: the daily database backups within 7 days, and the photo backup copy within a few days.
Some things are kept for a fixed time: in-app notices for 30 days, our hosting providers' logs (which include IP addresses) for up to about 30 days, and crash reports for 30 days.
Settings kept only on your phone, such as App lock, are wiped when you sign out.
Depending on where you live (for example the UK, EU, or other regions with comparable laws) you may have additional rights, including to object to or restrict processing, or to lodge a complaint with your local data protection authority. Contact us and we will help.
Ayumu is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Passwords are hashed, traffic is encrypted in transit, photos live in private storage reachable only through expiring signed links, and every request is scoped so an account can only ever read its own data. We refuse passwords known from public data breaches, limit repeated sign-in attempts, email you when your password changes, and let you sign out of all devices from the app. You can also turn on App lock so Ayumu asks for your Face ID, fingerprint or phone PIN before opening. No system is perfectly secure, but we take reasonable measures to protect your information and will notify affected users of any breach that puts their data at risk.
Ayumu is for general wellbeing. Its calorie targets, breathing and movement exercises, wellbeing prompts and other guidance are general information for self-care and are not medical advice. Speak to a qualified professional before making significant changes to your diet, exercise or health routine, and do not rely on the app to diagnose or treat any condition. Cycle predictions in Track Her are estimates from the dates you enter; they are not a method of contraception and not a diagnosis.
If we change this policy we will update the date at the top and, for significant changes, notify you in the app. Continuing to use Ayumu after a change means you accept the updated policy.
Questions, requests or complaints: hello@ayumu.app.