Local-first
Your training log is written to your device and read from your device. The app is fully functional with no network connection at all. Sync is an option you switch on, not a default you have to escape.
Privacy architecture
We architecturally cannot read your session data.
Not "we choose not to". Not "we anonymise it". The system is built so that the readable form of your log exists only on hardware you hold. A promise is a policy; this is a constraint.
End-to-end encrypted sync
If you sync across devices, entries are encrypted on-device with a key derived from your passphrase. The key is never transmitted and never escrowed. What reaches our infrastructure is ciphertext we have no means of decrypting.
Zero third-party ad-tech
No analytics SDKs, no attribution frameworks, no advertising identifiers, no session recording, no third-party pixels. There is no data sharing agreement to disclose because there is no data sharing.
Discreet mode
A neutral app name and a plain geometric icon on your home screen, with optional biometric gating on launch and no content in notification previews.
One-tap purge
A single confirmed action erases the local database and issues a delete for any synced ciphertext. It is available whether or not you are a subscriber, and it does not require contacting anyone.
The PQ assessment
The assessment on this website runs entirely in your browser. Answers live in memory for the duration of the session and are never transmitted, stored or logged. Closing the tab discards them.
In plain terms
We hold an account identifier, a subscription status and, if you sync, an opaque block of ciphertext. That is the complete list. We cannot tell you when you last trained, because we do not know.
Circles operate on the same constraint. A Circle can be shown a badge or a streak count because those are derived on your device and published deliberately. It cannot be shown session occurrence, timing, duration or partner, because that information never exists on our side in a readable form.
If a legal request arrives, we can produce only what we hold. We would rather that be as close to nothing as engineering allows.