Privacy Policy
Updated October 20, 2026
Who we are
AllYes is provided by Dmitrii Dovgei. Contact demid.druz@gmail.com for support and privacy requests. This policy explains the information used by the iPhone app and these support pages.
Account and shared Pacts
When you use Sign in with Apple, we receive an account identifier and the name and email address Apple provides, including a relay address if you choose Hide My Email. We store your display name, optional avatar, language, time zone, Pacts, accepted terms, participants, invitations, check-ins, comments, progress, photos you submit and result confirmations. Exercise amounts and habit records are information you enter yourself. AllYes does not read HealthKit, track your location or access your address book.
Why and with whom
We use this information to sign you in, synchronize your Pacts across devices, show shared progress to participants, deliver enabled notifications and handle safety reports. Your name and avatar are visible to people in your Pacts. Pact participants can see shared terms, progress and submitted evidence. Protect invitation links: someone with a valid invitation may preview its terms and join while it remains available. Only upload photos and personal information you have the right to share.
Service providers and notifications
Supabase processes authentication, database records and uploaded files for AllYes. Our current project is hosted in Europe; provider operations may involve other countries. Apple processes sign-in, App Store purchases and push delivery. Technical request information, including IP addresses, may be processed by hosting providers for operation and security. Notification text can show a Pact title and participant name on your lock screen. You can disable notifications or hide previews in iPhone Settings. Local reminders are scheduled on your device.
Purchases, analytics and advertising
Apple handles payment. AllYes receives verified subscription status and expiration through StoreKit, not your card details. We do not integrate advertising networks, cross-app tracking or third-party product analytics. Apple may provide installation, purchase, crash and TestFlight information under its policies and your settings. We do not sell your personal information or use Pact content for advertising.
Retention, deletion and your choices
Account information and shared content are retained while needed to operate your account and Pacts. Profile lets you edit your name and avatar, change preferences, export data and request account deletion. Deletion removes your sign-in account, profile, uploaded avatar, check-ins and proof files. Accepted Pact terms and shared event history, including names previously recorded in that history, may remain for other participants. Contact us to request removal of personal information from retained shared records. Copies already exported by participants cannot be removed from their devices by AllYes. Provider logs, backups and support correspondence may remain for security, recovery or legal obligations; they are not used to restore an active deleted account.
Privacy requests and security
Write to demid.druz@gmail.com to request access, correction, deletion or a copy of your data, or to raise a concern. We may ask for information necessary to verify that the account is yours. Depending on your country, you may also have rights to restrict or object to processing and complain to your data protection authority. We use authenticated access controls and encrypted connections, but no service can promise absolute security. Do not put sensitive medical, financial or identity documents into Pacts.
Support pages and changes
These pages are hosted by Sites on Cloudflare infrastructure. Hosting providers receive technical request data to deliver and protect the pages. We have not added advertising pixels or a photo upload form. If you email us, we receive your email address and message to handle the request. We update this policy when data handling changes. The current date appears above.