Privacy Policy

Last updated: May 13, 2026

GYAM ("we", "our", or "the app") is committed to protecting your privacy. This policy explains what data we collect and how we use it.

Data We Collect

Health Data (Steps)

GYAM reads your step count from Apple HealthKit to determine if you've reached your daily goal. This data is processed entirely on your device and is never sent to our servers. Step data is not used for advertising or shared with any third party.

App Usage Data (Screen Time)

GYAM uses Apple's Screen Time API (Family Controls) to block apps you select. The list of apps you choose to block is stored only on your device and is never transmitted to our servers.

Instagram Username (Optional)

If you enable the Instagram Story accountability option, you may provide your Instagram username. This username is stored locally on your device and is transmitted to our server (api.gyam.app) only to verify that you posted the required accountability story. We do not share this with third parties and do not retain it beyond verification.

Recovery Credits (iCloud Key-Value Store)

Recovery credits you purchase are synced across your devices using Apple's iCloud Key-Value Store. This sync is managed by Apple's iCloud infrastructure; we do not receive or store this data on our servers. Credits are not linked to any personal identifier beyond your Apple ID.

Feedback Submissions (Optional)

If you use the in-app feedback form, the following data is sent to our server (api.gyam.app):

Feedback category (Bug, Feature request, Question, or Other)
Your free-text message
Device model, iOS version, app version, and build number

This information is used only to respond to and triage feedback. It is not linked to any personal identifier, not used for advertising, and not shared with third parties.

Data We Do NOT Collect

Personal identification information (name, email, address)
Location data
Contact lists or photos
Browsing history
Analytics about your in-app behavior

Data Storage

Your settings, goals, and progress are stored locally on your device using iOS secure storage (App Group UserDefaults and Keychain). Recovery credits are additionally synced via iCloud Key-Value Store. We do not operate traditional user accounts or backend databases containing your personal data.

Third-Party Services

GYAM integrates with the following third-party services:

Apple HealthKit — Reads your step count on-device only. Data never leaves your device.
Apple Screen Time (Family Controls) — Blocks selected apps on-device only.
Apple iCloud Key-Value Store — Syncs recovery credit balances across your devices via your Apple ID.
Instagram — Optional. Used only when you choose the Instagram Story accountability option. We verify story posts via our backend; your username is not shared further.
Google AdMob — Shown only if you select the "Watch Ads" accountability option. Every ad request includes the npa=1 parameter, which explicitly requests non-personalized ads. No App Tracking Transparency (ATT) prompt is shown, and your HealthKit or Screen Time data is not shared with Google. Google AdMob may still collect limited device information (IP address, device identifiers, ad interactions) for fraud prevention and ad delivery as described in Google's AdMob data disclosure and Google's Privacy Policy.
Apple In-App Purchases (StoreKit) — Used for recovery credit purchases. Payments are processed by Apple. We do not receive or store payment card information.

Advertising

GYAM only shows ads if you explicitly select the "Watch Ads" option as your accountability consequence. Every ad request includes npa=1, explicitly opting out of ad personalization. No App Tracking Transparency (ATT) prompt is shown because we do not use data for cross-app tracking.

Children's Privacy

GYAM is not intended for children under 13. We do not knowingly collect data from children.

Your Privacy Choices

You have control over your data:

HealthKit Access — Revoke in Settings > Health > Data Access & Devices > GYAM
Screen Time Access — Revoke in Settings > Screen Time
iCloud Sync — Disable iCloud Drive in Settings > [Your Name] > iCloud to stop credit sync
Ad Personalization — Ads are already non-personalized. Manage additional ad preferences in Settings > Privacy & Security > Apple Advertising
Delete All Data — Delete the app to remove all locally stored data. Your iCloud Key-Value Store entry for recovery credits can be cleared by signing out of iCloud before deleting the app.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact Us

If you have questions about this privacy policy, contact us at support@gyam.app.