What we keep, and who can see it.

What we collect

Your account. The email address you sign in with, and the name on your Google account when you sign in with it. Sign-in is handled by our identity service; we never see or store a password.

What you put in. Whatever you type, photograph or import: in Health, your workouts, weigh-ins, blood pressure readings with their time and notes, lab results, medications, the gyms and equipment you describe. In the other apps, the plans, lists, expenses and messages they exist for. We keep it so the app can show it back to you.

What you connect. If you link a watch (COROS, or Garmin through Intervals.icu), we read the activities it recorded and keep a copy of them in your log. We keep the token that lets us read them until you unlink.

Apple Health. On an iPhone, Dfive Health can read workouts, weight and blood pressure from the Health app, and daily totals of your activity, cardio fitness, sleep and recovery, body composition, walking and, if another app logs them, food and drink (the health data notice lists each one), and can write the workouts and readings you logged back to it. You choose exactly which, in the Health app, and you can withdraw any of it there at any time. Health app data is used only to show it in your own log and to shape your own training. It is never used for advertising or marketing, never sold, never shared with a data broker, and never disclosed to a third party except as you direct, which is what Apple requires of every app that reads it and what we would do anyway.

Payments. If you buy the app or subscribe, Apple takes the payment. We receive a signed receipt that says what was bought and until when. We never see your card.

What we do not collect. We do not run advertising, analytics trackers or fingerprinting. There are no third-party cookies. The web app keeps a sign-in token and your own preferences in your browser and nothing else.

Where it lives

On Amazon Web Services in the United States (Oregon), in databases encrypted at rest, backed up continuously. Each app keeps its own data, keyed to your account; one app cannot read another's. Photos you upload are stored in a private bucket readable only by the function that reads them for you.

Who can see it

You. Everything in your account is yours, and nobody else using the app can see it. Where an app is shared on purpose — a sailing crew, a household, a shared bill — the people in that group see what the group is for, and the app says so where it happens.

Us. The people who run Dfive can read the databases, with administrator credentials, to fix something or to repair a record you ask us about. We do not browse. If we have to touch a record of yours we will tell you what we did.

AI. Some features send what you give them to a language model to read: a photo of a whiteboard, a workout typed in your own words, a lab report. That goes to Anthropic's Claude running inside our own AWS account (Amazon Bedrock), in the same region, under terms that do not allow it to be stored or used to train models. Nothing is sent unless you have allowed it in the app and use one of those features, and the app says which they are. Health asks before the first one; switch it off in Settings → Pro.

Nobody else. We do not sell data, share it with advertisers, or hand it to anyone else, unless the law compels us, in which case we will tell you if we are allowed to.

How long

For as long as your account exists. When you delete something in an app it is gone from the app at once; a deleted workout can be put back for 30 days, then it is gone from our databases too. Backups age out within 35 days.

Your choices

Take it with you. Health exports your blood work and your blood pressure log as a PDF, and your whole account as a file from Settings. Ask and we will produce the same for any other app.

Delete it. In Dfive Health, Settings → Delete account removes the account and everything in it at once. For any other app, email info@dfive.us from the address on the account and we delete it within seven days and confirm when it is done. A subscription is cancelled in your Apple ID settings, not by us.

Health data. Dfive Health asks before it keeps anything the first time you sign in. Its health data notice says exactly what it collects, why, where it comes from and who it goes to.

Children. These apps are for adults. A household app can hold a child's name because a parent put it there; we do not knowingly open accounts for anyone under 16.

Changes

If this page changes in a way that matters, the date at the top moves and we say so in the app. Previous versions are kept in our source history.