Dura is a health and fitness app for iPhone. This policy describes what we collect, why, and who else sees it.
Dura is not medical advice
Tracking, charts, and AI suggestions are for personal fitness use only. They are not diagnosis, treatment, or a substitute for a clinician.
Account
Email and password via our auth provider (Supabase). We store a profile (display preferences, units, app version) so the app works across devices. Password-reset and signup-confirm links go through HTTPS on this domain.
Health and fitness data you enter or sync
This can include body metrics (weight, waist, BIA), food log (including meal photos you choose to upload), water, workouts, goals, plan preferences, and AI recommendation history. That data lives in our database (and meal photos in private storage), scoped to your account. Row-level security is meant to keep other users from reading it.
Apple Health
If you turn on Connections, Dura can read weight, prior-night sleep, and VO₂ max from Apple Health, and can write weight you save in the app back to Apple Health. Sleep used for Rest is read on-device for display and badges; we do not store a full sleep archive in our servers today. You can revoke Health access in iOS Settings.
Camera and photos
Used only when you add food with a picture (camera or library). Photos are uploaded so we can estimate the meal; you confirm macros before they count in the log.
AI features
Paid AI (meal estimate, plans, analyzers, Researcher, and similar) sends what that feature needs to our servers and to the model provider (today: OpenAI). Analyzers are designed to send aggregates, not raw meal-photo dumps. Do not put information in prompts that you do not want processed that way.
Invites
Invite codes tie a new account to the person who invited them so referral credits can be granted. The code is not a public profile.
Purchases
In-app credit packs are planned (Apple). Until they ship, we do not collect App Store payment details ourselves; Apple does. We may store credit balances and, later, purchase receipts needed to fulfill credits.
Analytics and crashes
We intend to use crash reporting (Sentry) and, later, product analytics (PostHog) for screens and funnels. Those tools must not receive waist, weight, BIA, or meal photos. They are not required for the app to run; we will update this policy when they are on in production.
Children
Dura is not directed at children under 13. We do not knowingly collect their data.
Retention and deletion
We keep account and fitness data while the account exists so history and sync work. To delete an account and associated data, email the address on the Support page. Some records may remain for a short period in backups or as required by law.
Your choices
You can skip Apple Health, skip meal photos, and skip paid AI. You can sign out. You control Health permissions in iOS.
Contact
See Support.
Changes
We will post updates here and change the date above.