Privacy Policy

1. Who we are

Dear Bruce ("the app", "we") is a personal discipline and health companion published by GHZ CREATIVE - F.Z.E. It is available as an iOS application and at dearbruce.app.

For any privacy question or request, contact us at contact@dearbruce.app.

2. Data we collect

We only collect what the app needs to work. Everything below is data you create or explicitly connect:

• Account: your name, email address and a unique identifier when you sign in with Apple, or an anonymous device identifier if you use the app as a guest.
• Daily tracking: check-ins, habits, prayers, objectives, to-dos, notes, focus sessions, workouts, fasting windows, reading progress.
• Health data you authorize: steps, body weight, sleep, heart-rate variability, resting heart rate and active energy — read from Apple Health (HealthKit) and, if you connect it, from Garmin. Weight you log in the app can be written back to Apple Health.
• Photos: transformation checkpoint photos you take or import. They are protected by a PIN code inside the app.
• Finance: savings goals and money entries you log manually. We never connect to your bank.
• Social: your display name, avatar and scores if you add friends or join challenges.

We do not collect your location, contacts, browsing history or advertising identifiers.

3. How we use it

Your data is used for one purpose: showing you your own progress and syncing it between your devices.

• Sync: your data is stored on our servers so you can recover it on a new iPhone.
• Coaching: some daily context (scores, sleep, steps — never photos, never finance details) may be sent to an AI language-model provider to generate a short daily coaching note. This data is not used to train models.
• Health data from Apple Health or Garmin is used exclusively to display your own metrics and compute your recovery score. It is never used for advertising, never sold, and never shared with third parties for their own purposes.

4. What we never do

• We never sell your data.
• We never show ads.
• We never share your health data with advertisers or data brokers.
• We never read data you have not explicitly authorized.

5. Storage & security

Your data is stored in a private database on our own servers, protected by encryption in transit (TLS), firewalling and daily backups. Access tokens on your device are stored in the iOS Keychain. Photos are stored inside your encrypted account data and gated by a PIN in the app.

6. Your rights

You can export, correct or delete your data at any time. To delete your account and all associated data, contact us at contact@dearbruce.app — deletion is executed within 30 days. If you are in the EU/EEA, you additionally benefit from the rights granted by the GDPR (access, rectification, erasure, portability, objection).

7. Third-party services

• Apple (Sign in with Apple, HealthKit, TestFlight/App Store) — see Apple’s privacy policy.
• Garmin (if you connect it) — health metrics are fetched from the Garmin API with your explicit consent and can be disconnected at any time.
• AI provider (OpenRouter) — receives anonymized daily context to generate coaching text; no identifiers, photos or financial data.

8. Children

Dear Bruce is not directed at children under 13 and we do not knowingly collect data from them.

9. Changes

We may update this policy as the app evolves. The date below always reflects the latest revision. Significant changes will be announced in the app.