Privacy Policy

Maru is a health companion: an AI you talk with about sleep, training and food, for you and, if you want, your partner. To do that, Maru runs a server and sends parts of what you tell it to AI models. This policy says plainly what goes where, why, and what you can do about it.

The short version

• Your account is Sign in with Apple. Maru never has a password of yours.
• Your contract, plan and memory live on Maru’s server, in a PostgreSQL database.
• To talk with you, Maru sends only what each moment needs to AI models hosted in the European Union. They don’t store it and don’t train on it, and they never receive your name, email, location or cycle dates.
• Your conversation stays on your phone. The server reads the last lines to answer a message and stores none of them.
• Apple Health data is read only with your permission. It is never used for advertising, never sold and never stored in iCloud.
• Food photos are read to describe the plate and are not kept.
• Your partner sees only what you share, category by category, and you can stop sharing at any time.
• No advertising, no data sales, and no third-party analytics or tracking, in the app or on this site.

Who is responsible

Maru is developed and operated by [name of the person or company responsible, and postal address]. For anything about your data, write to privacy@mymaru.app.

Needs legal review: Name the data controller and its address, and decide whether Maru needs a representative in the EU (GDPR Article 27) or anywhere else it will be offered.

Your account

You sign in with Apple. Apple gives Maru a stable identifier for your account and, only if you choose to share them, your name and email address, which can be a private relay address from Apple. Maru never sees your Apple ID password. Your name is used to greet you in the app and is never sent to an AI model.

What Maru keeps on its server

Maru’s server keeps, in a PostgreSQL database, what it needs to hold your plan and remember what matters:

• Your contract: your goals in numbers and in words, your why, your bad-day minimum, your rules, your season plan and its phase, and any change waiting its 72 hours.
• Your training: your routine (typed from a photo of your trainer’s plan or from a template), your practices, and your weeks and sessions.
• A daily summary of your health data (see Apple Health below) and your check-ins.
• What your plates had: protein, vegetables and portion, in words. Not the photo.
• Your cycle, only if you track one and turn it on: the day of the cycle and its phase. The dates stay on your phone.
• Memory: the patterns Maru noted about you, each a short sentence you can read and delete in Memory, and a diary of Maru’s decisions kept as the names of the tools it used and the ids of the rules that fired, without the words of the conversation.
• Proposals waiting for your yes, as the tool and its details, kept for 48 hours.
• Your link with your partner and what each of you chose to share.

Connections between the app, the server and the models are encrypted. Server logs carry identifiers and outcomes only, never health data, message text or what was sent to a model.

Needs legal review: Name the hosting provider and the country where the server and its backups run, describe encryption at rest, and say how long backups keep data after it is deleted.

What stays on your phone

• The conversation with Maru. The thread is kept on your phone for the current day only: when a new day starts, the previous one is deleted. It is protected by iOS file encryption and excluded from backups. Each message you send travels with the last lines of the thread so Maru can answer in context; the server and the model read them for that answer, and the server stores none of them.
• Raw Apple Health samples. Your phone reduces them to a daily summary first.
• Your cycle dates. Only the day of the cycle and its phase leave the phone.
• Photo metadata, such as location, which is removed before a photo is sent.

AI models: who reads what

Maru uses one model for each job, chosen by Maru and not configurable. Today they all run with an inference provider in the European Union (Germany), which does not store prompts or answers and does not train models on them.

The context of the moment is the least each moment needs: your contract (which the model can read but never change), your season and today’s plan, your recent training load and practices, the patterns in your memory, what your partner shares with you, and your senses in bands, such as “slept short” or “resting heart rate above your average”. Models never receive your name, email, location, cycle dates or raw health samples.

Before anything goes to a model, the app asks for your permission. You can withdraw it at any time; Maru then stops sending anything to the models. If Maru changes a model or where the models run, this page will say so and the app will ask you again before sending anything.

Needs legal review: Keep the inference provider’s data processing terms on file and confirm in them that prompts and outputs are not stored or used for training. Confirm the consent screen’s wording before the first message, and what the app offers to someone who declines.

Apple Health

With your permission, Maru reads from Apple Health: sleep, heart rate, resting heart rate and heart rate variability, workouts, steps and activity, cardio fitness (VO2 max) and, if you choose, menstrual cycle data. Your phone turns these readings into a daily summary before anything leaves it. You can change these permissions in the Health app at any time.

• Health data is used only to adapt your plan and your conversations with Maru.
• It is never used for advertising, marketing or data mining, and never sold.
• It is never stored in iCloud.
• It reaches the AI models only in bands, as described above.

Needs legal review: Check this list against the Health data types the app requests when it ships.

Food photos and voice notes

When you log a meal with a photo, your phone removes its location and other metadata, and the photo is read to describe the plate: protein, vegetables and portion, in words. Maru keeps that description, never the photo, and never counts calories. Voice notes are sent to be turned into text, and the audio is not kept.

Your partner

If you link Maru with your partner, each of you keeps your own contract, memory and conversation. Sharing is by category (for example training, energy, your why or your cycle), off until you turn it on, and you can turn it off at any time. Your partner never sees what you don’t share, and Maru never puts your data next to theirs to compare you.

A menstrual cycle belongs to the person who tracks it: only they decide whether it is shared. Maru uses it to adapt training and never for fertility, ovulation prediction or contraception.

Notifications

If you allow notifications, Maru’s server sends them through Apple Push Notification service, so their text passes through Apple to reach your phone.

What Maru never does

• Sell your data, or share it with advertisers or data brokers.
• Show ads, or include third-party analytics or tracking.
• Let a model train on your data.
• Send your data to anyone other than the services named on this page.

How long data is kept

• The conversation: on your phone, for the current day.
• Proposals waiting for your yes: 48 hours.
• Everything else on the server: until you delete it or delete your account.

Your choices and rights

You can read and delete the patterns in Memory at any time. You can ask for a copy of your data, have it corrected, or have your account and all of its data deleted, from the app or by writing to privacy@mymaru.app. You can withdraw your permission for Apple Health, notifications or the AI models at any time. Depending on where you live, you may also have the right to object to some processing and to complain to your data protection authority.

Needs legal review: State the legal basis for each use (explicit consent for health data under GDPR Article 9), list the rights that apply in each country where Maru is offered, and confirm that account deletion inside the app (App Review 5.1.1(v)) ships with Sign in with Apple.

Children

Maru is for adults. It is not meant for anyone under 18, and it does not knowingly collect their data.

This website

mymaru.app sets no cookies, has no analytics, and loads no scripts or fonts from other sites. It is served by Cloudflare Pages, whose servers process your IP address to deliver the pages.

Changes

When this policy changes, the date at the top changes too. If a change affects what Maru does with your data, the app will tell you before it applies.

Contact

Questions about this policy: privacy@mymaru.app