Privacy Policy

Drip

Drip stores the services you track — name, cost, billing cycle, payment dates, category, tags, notes and payment-method label — on your device, in a private App Group container shared only with Drip's own Home Screen and Lock Screen widgets and its Siri shortcuts. Drip has no account system, no analytics and no third-party code that receives your data. It offers two optional purchases: a one-time "Drip Pro" unlock that opens the app's extra features (Apple checks the entitlement on your device, including Family Sharing; the app stores only whether it is active), and a tip jar of one-off purchases that unlock nothing and change nothing about the app. Apple processes both; we never see your payment details and the app stores nothing about them beyond that local flag and a local count of how many times you have tipped. What Apple tells us about each purchase is under Purchases.

iCloud sync is on by default: your services sync between your devices through your personal iCloud account, under Apple's terms — we never have access to it. Turning it off in Settings keeps your data on the device only. Payment reminders and the weekly summary are local notifications, scheduled on your device.

Published on the App Store by Sendoa Sola.

Anchor

Anchor is a daily-support tool for people recovering from an eating disorder, meant to accompany professional treatment. Everything you enter — routine blocks and confirmations, emotional check-ins and their optional notes, urge-surfing and breathing sessions, coping-strategy usage, your safety plan (contacts, strategies, warning signs) and plans for disruptions — is stored on your device, in the app's private container. The urge-surfing Live Activity shows only its timer on your Lock Screen; it is drawn on the device and carries none of what you enter. Anchor has no account system, no analytics, no advertising, no AI chat and no third-party code that receives your data. It offers an optional tip jar: one-off purchases that change none of the app's tools — no feature of Anchor is ever behind a payment. As a thank-you, any tip also opens three optional colour themes. Apple processes the purchases; we never see your payment details. To know whether you have tipped, Anchor reads its own tips in your App Store purchase history on your device, with Apple's StoreKit, and keeps only that fact and a local count of how many times you have tipped; the app sends none of it to us. What Apple tells us about each tip is under Purchases. The name you may enter in "About you" is used only in on-device messages.

Health data. Anchor can optionally read sleep analysis, heart-rate variability, step count and exercise time from Apple Health, only after you grant permission (Settings › Health data; off by default). Anchor reads this data to show you qualitative context about rest and movement; it never writes to Health, never reads weight, body mass, body-fat or nutrition data, never uploads Health data anywhere, and never uses it for advertising or shares it with third parties. Health data stays on your device and is excluded from iCloud sync.

iCloud sync is on by default so your routines, check-ins and plans follow you between your devices through your personal iCloud account (Apple's private CloudKit database), under Apple's terms — we never have access to it. You can turn it off in Settings; your data then stays on the device only. Routine reminders, the daily check-in reminder and Live Activities are scheduled and rendered locally on your device. Emergency numbers shown in the safety plan are public helplines for your region; tapping one places a normal phone call.

Anchor is not a medical device and does not replace professional treatment. It deliberately contains no calorie, weight or body-measurement tracking.

Published on the App Store by Sendoa Sola.

Kover

Kover stores the products you add — name, category, store, purchase date and amount, country, warranty dates, serial number, support contact, notes and the receipt photo — on your device, in the app's private container. Kover has no account system, no analytics and no third-party code that receives your data. It offers two optional purchases: a one-time "Kover Pro" unlock that opens the app's extra features (Apple checks the entitlement on your device, including Family Sharing; the app stores only whether it is active), and a tip jar of one-off purchases that unlock nothing and change nothing about the app. Apple processes both; we never see your payment details and the app stores nothing about them beyond that local flag and a local count of how many times you have tipped. What Apple tells us about each purchase is under Purchases.

Receipts and the camera. When you scan a receipt, Kover uses the camera (or a photo or PDF you choose) and reads the text with Apple's on-device Vision framework. The image and the recognised text never leave the phone; the photo is kept only because it is your proof of purchase. Camera and photo-library access are requested only when you use those features.

iCloud sync is on by default so your products and receipt photos follow you between your devices through your personal iCloud account, under Apple's terms — we never have access to it. Turning it off in Settings keeps your data on the device only. Warranty reminders are local notifications, scheduled on your device. The CSV export and the per-product PDF are files you create and share yourself.

Published on the App Store by Sendoa Sola.

Tandem

Tandem stores the two partner names, their monthly incomes, every shared expense (amount, category, date, who paid, how it was split, optional name) and each settlement on your device, in a private App Group container shared only with Tandem's own widgets. Tandem has no account system, no analytics and no third-party code that receives your data. It offers two optional purchases: a one-time "Tandem Pro" unlock that opens the app's extra features (Apple checks the entitlement on your device, including Family Sharing; the app stores only whether it is active), and a tip jar of one-off purchases that unlock nothing and change nothing about the app. Apple processes both; we never see your payment details and the app stores nothing about them beyond that local flag and a local count of how many times you have tipped. What Apple tells us about each purchase is under Purchases. One phone keeps the books for both partners; nothing is sent to the other person's device or to anyone else.

iCloud sync is on by default so your expenses follow you between your own devices through your personal iCloud account, under Apple's terms — we never have access to it. Turning it off in Settings keeps your data on the device only. The weekly and month-end reminders are local notifications.

Published on the App Store by Sendoa Sola.

Meso

Meso stores your training programmes (blocks, sessions, exercises and their prescriptions), every logged session (loads, reps, reps in reserve, notes, the gym you used) and your own exercises and gyms on your device, in the app's private container. After each session it also leaves a summary of it (day, length, tonnage, sets, reps in reserve and estimated maximums) in a private App Group container on the device that only Tiller, also from Seize, reads. Meso has no account system, no analytics and no third-party code that receives your data. It offers two optional purchases: a one-time "Meso Pro" unlock that opens the app's extra features (Apple checks the entitlement on your device, including Family Sharing; the app stores only whether it is active), and a tip jar of one-off purchases that unlock nothing and change nothing about the app. Apple processes both; we never see your payment details and the app stores nothing about them beyond that local flag and a local count of how many times you have tipped. What Apple tells us about each purchase is under Purchases.

Apple Health. Off by default. If you switch it on in Settings, each finished session is written to Health as a strength-training workout (start, end and name) so it counts towards your activity. Meso never reads anything from Health and never uploads Health data anywhere; the permission and the preference live on that device only.

iCloud sync is on by default so your programmes and sessions follow you between your devices through your personal iCloud account, under Apple's terms — we never have access to it. Turning it off in Settings keeps your data on the device only. Meso has no rest timer and sends no notifications. While a session is open, a Live Activity shows the current exercise and the next set on your Lock Screen; it is drawn on the device from what the app hands it and ends with the session. The week text and the block CSV you send to a coach are files you create and share yourself.

Published on the App Store by Sendoa Sola.

Grain

Grain stores what you log — each food with its meal, day, grams and the nutrition values copied from its source — your daily targets, and the foods and recipes you create, correct or scan on your device, in the app's private container and a private App Group container shared only with Grain's own widgets and, for a daily summary (energy, macros, fibre and each meal's energy and protein), with Tiller, also from Seize, on the same device. Grain has no account system, no ads and no third-party code that receives your data. From version 0.9.0, the only thing it sends us is the anonymous usage statistics explained below, which are our own and which you can turn off. It offers optional purchases: a one-time "Grain Pro" unlock that opens the app's extra features, with a free 30-day trial you can take once per Apple ID (Apple checks the entitlement on your device, including Family Sharing; the app stores only whether it is active and, during the trial, when it ends), and a tip jar of one-off purchases that unlock nothing and change nothing about the app. Apple processes them; we never see your payment details and the app stores nothing about them beyond that local flag and a local count of how many times you have tipped. What Apple tells us about each purchase is under Purchases.

Search, barcodes and Open Food Facts. The food catalogue (CIQUAL, USDA, Grain's reference recipes and the nutrition information restaurant chains publish) ships inside the app and is searched on the device. When you scan or type a barcode that is not among your own foods, Grain sends only that number to Open Food Facts (openfoodfacts.org, an open, non-profit food database) to look the product up. From version 0.9.0, when you type in the search field (three letters or more, after a short pause), Grain also sends the words you typed to Open Food Facts' search service (search.openfoodfacts.org) to list packaged products by name. The requests name the app, not you, and nothing from your diary is sent. Open Food Facts handles them under its own terms.

Sending a product to Open Food Facts. When you save a food with a barcode, «Also send to Open Food Facts» is on by default and visible on the same form; you can turn it off, and Grain remembers your choice. While it is on, Grain sends that product — the barcode and its values per 100 g, plus its name and brand when it is new to Open Food Facts — through Grain's own Open Food Facts account, with a random identifier made for this installation so their moderators can tell contributions apart. Nothing from your diary, your targets or your Apple Account is sent. What you send is published there under the Open Database License, for anyone to use, and Grain cannot withdraw it; Open Food Facts handles it under its own terms.

Camera, labels and words. The camera is used only while you scan a barcode or photograph a nutrition label, and nothing is recorded. Labels, from the camera or a photo you choose, are read with Apple's on-device Vision framework; a meal you describe in words is interpreted on the iPhone (with Apple Intelligence where available). Neither the image nor the text leaves the phone.

Apple Health. Off by default. If you switch it on in Settings, each entry is written to Health as food (energy, protein, carbs and fat), and changed or removed there when you edit or delete it in Grain. Grain never reads anything from Health and never uploads Health data anywhere; the permission and the preference live on that device only.

Usage statistics. From version 0.9.0, to decide what to improve, Grain counts how it is used (Seize Analytics, our own code, not a third-party SDK). It tells you once, with a notice on Today and an “OK”, and from then on, unless you turn off “Help improve Grain” in Settings, it sends: how each food reaches your diary (search, barcode, written text, photo, Siri, a recent, a favourite, your recipes or foods, quick add, or a new food or recipe) and from which table (CIQUAL, USDA, a reference recipe, a restaurant chain, Open Food Facts or your own), and whether its grams were estimated or counted in units; how each barcode scan ends (found, saved before, without a table, not found or no connection); when you create a recipe; how long each tab stays on screen (time in the background does not count); which purchase screens you see and which PRO badges you tap; and whether the Tiller card is shown, opened or hidden. Never which food, how much, a barcode, a name, your targets or anything you write. With them go the app version, the language, the region setting, the kind of device (iPhone or iPad) and whether the app comes from the App Store, TestFlight or a development build. They carry a random number made for this install — not your name, your Apple Account, nor the device’s identifier — and we do not keep your IP address. They reach our server at Supabase (our processor), in the EU, in Frankfurt, which keeps them for 30 days at most, and we keep them in our own systems for up to 13 months. We use them only to decide what to improve: they are not linked to who you are, and they are not used to track you or for advertising. Turning the setting off deletes what this device sent.

Other Seize apps. Settings may show a card for Tiller, our sports-nutrition app, but only once Tiller is on the App Store in your country. To know that, Grain asks Apple's public App Store lookup (itunes.apple.com) with Tiller's app identifier and your region, at most once a day; nothing about you or your diary is sent. “View in the App Store” opens Apple's own App Store sheet, and the × hides the card for good on that device.

iCloud sync is on by default so your diary, targets and foods follow you between your devices through your personal iCloud account, under Apple's terms — we never have access to it. Turning it off in Settings keeps your data on the device only. Grain sends no notifications.

Published on the App Store by Sendoa Sola.

Logicle

Logicle is a collection of logic puzzles. Your games in progress, the puzzles you have solved, your times, hints and streaks, what you earn in the seasons, and your settings stay on your device, in the app's private container. The puzzles are made on the device, so nothing is downloaded from us while you play. Logicle has no account system and no advertising, and no third-party code receives your data. The only thing it sends us is the anonymous usage statistics described below, which are our own and which you can turn off.

Seasons. A season is a themed set of puzzles with collectible cards, titles and medals. What you earn is worked out on your device from the games you play, like the rest of your progress, and syncs through your iCloud.

Your profile. The name, avatar and title you choose in the You tab are kept in your personal iCloud key-value storage, under Apple's terms, so they follow you to your other devices; we never see them.

Game Center. If you are signed in to Game Center, Logicle sends Apple your time for each daily puzzle you solve without hints, to that day's leaderboard (in Sudoku, not if you filled in the notes automatically either); after each solved puzzle, your best streak, puzzles solved, daily puzzles solved and the week's points, to their leaderboards; and the achievements you earn. During a season, it also sends the season's points to that season's leaderboard (such as “Christmas 2026”); each of those scores carries, as numbers, which card you use as your avatar, your title and your medal, and nothing you typed. On that board you appear with your Game Center name. It also opens Apple's own Game Center screens when you ask for them. Your Game Center name, times, totals and achievements are visible to other players according to your Game Center settings, under Apple's terms; we only see what any player sees in Game Center. You can play without Game Center.

Purchases. Logicle offers optional purchases, all of which can be shared through Family Sharing: one-time unlocks, one per puzzle type or every type at once (the types added later included); a pass for each season, a one-time purchase that keeps that season for good; and a “Seasons” subscription, monthly or yearly, that opens every season, the past ones included, for as long as you are subscribed (it renews automatically until you cancel it in your Apple Account settings). There is also a tip jar of one-off purchases that unlock nothing and change nothing about the app. Apple processes them and checks on your device what you have bought; we never see your payment details. What Apple tells us about each purchase is under Purchases.

iCloud sync is on by default so your games and progress follow you between your devices through your personal iCloud account, under Apple's terms — we never have access to it. Turning it off in Settings keeps your games on the device only; your profile still follows you through iCloud key-value storage. Logicle sends no notifications.

Usage statistics. To decide what to improve, Logicle counts how it is used (Seize Analytics, our own code, not a third-party SDK). It tells you once, with a notice on the Today tab and an “OK”, and from then on, unless you turn off “Help improve Logicle” in Settings, it sends: which puzzle types, levels and modes you open; how long a game and each tab stay on screen (time in the background does not count); whether a game is solved, with how many hints and mistakes, and whether you used “Fill notes”; how long a session lasts; and which purchase screens you see, where you opened them from and which product they show. With them go the app version, the language, the region setting, the kind of device (iPhone or iPad) and whether the app comes from the App Store, TestFlight or a development build. They carry a random number made for this install — not your name, your Game Center or Apple Account, nor the device's identifier — and we do not keep your IP address. They reach our server at Supabase (our processor), in the EU, in Frankfurt, which keeps them for 30 days at most, and we keep them in our own systems for up to 13 months. We use them only to decide what to improve: they are not linked to who you are, and they are not used to track you or for advertising. Turning the setting off deletes what this device sent.

Published on the App Store by Sendoa Sola.

Heed

Heed has no account system, no ads and no third-party code that receives your data. The only thing it sends us is the anonymous usage statistics explained below, which are our own and which you can turn off. It keeps two kinds of data, in two different places.

What you write. Your settings and what you write in Heed — your values and your own sentence, your apps, the day's intentions, your alternatives, the line for each day, the closings of the day and the weekly reviews — are stored on your device and, with iCloud sync, which is on by default, in the private database of your personal iCloud account (CloudKit), under Apple's terms; we never have access to it. Turning it off in Settings keeps them on the device only.

The record of your openings. Each time one of the apps you chose opens, Heed records which app and when, the window it showed (if any), the option you picked, how it ended and how many seconds you took, and it works out from that which windows help you. This record and what Heed learns from it stay only on your device, in the app's private container and a private App Group container shared only with Heed's own widgets and Shortcuts action; they never go to iCloud and are deleted after 90 days. Heed can export them as a JSON file, but only when you ask for it, and the file goes only where you share it.

Shortcuts and your other apps. Heed works through automations you switch on in Apple's Shortcuts app ("When X is opened"): Shortcuts starts Heed and passes it the name of the app, and that is all. Heed cannot see what you do in other apps, what is on their screen or which apps you have installed. To take you back after "Continue", Heed may open that app's link (its URL scheme, or its web address as a universal link), with nothing about you attached; the first time, iOS asks whether Heed may open it.

Widgets, Live Activity and notifications. If you add them, the widgets and the Control Center control start a focus block and, while it lasts, show the minutes left, as does the Live Activity; anyone who sees your screen can read them. When a focus block ends, Heed shows a local notification if you have allowed it; it is scheduled on the device, with no server involved.

Apple Health. Off by default. If you switch it on in Settings, Heed writes mindful minutes when you finish a practice or a guided breath, and the day's mood (State of Mind) when you close the day. Heed never reads anything from Health and never uploads Health data anywhere; the mood goes only to Health, never to iCloud through Heed.

Purchases. Heed offers an optional one-time "Heed Pro" unlock that opens the app's extra features, with a free 30-day trial you can take once per Apple ID; the trial is a free purchase that charges nothing, and when it ends Pro closes and everything you wrote stays. Apple checks the entitlement on your device, including Family Sharing; the app stores only whether it is active and, during the trial, when it ends. Apple processes them; we never see your payment details. What Apple tells us about each purchase is under Purchases.

Usage statistics. From version 0.0.13, to decide what to improve, Heed counts how it is used (Seize Analytics, our own code, not a third-party SDK). It tells you once, with a notice on Today and an “OK”, and from then on, unless you turn off “Help improve Heed” in Settings, it sends: how each pause ends (the kind of window, whether you went on or let it go, how many seconds it took, whether it was in your digital sunset or a focus block, and the step of the day); each focus block you start (its length, and whether from the app or the widget); how far you get when connecting an app (the steps, and whether it is one of your own apps or one from the list, never which); when Heed asks for a rating and when you tap “Rate Heed”; how long each tab stays on screen (time in the background does not count); and which purchase screens you see and which PRO badges you tap. Never which apps you open, what you choose or write in a window, or anything from your record of openings. With them go the app version, the language, the region setting, the kind of device (iPhone or iPad) and whether the app comes from the App Store, TestFlight or a development build. They carry a random number made for this install — not your name, your Apple Account, nor the device’s identifier — and we do not keep your IP address. They reach our server at Supabase (our processor), in the EU, in Frankfurt, which keeps them for 30 days at most, and we keep them in our own systems for up to 13 months. We use them only to decide what to improve: they are not linked to who you are, and they are not used to track you or for advertising. Turning the setting off deletes what this device sent.

Heed is a wellbeing tool, not a medical device or a treatment, and it is not directed at children. Questions about Heed and your data: hello@seizeapps.com.

Published on the App Store by Sendoa Sola.

BeatRide

BeatRide builds indoor cycling classes from music. Your rider profile (level, age or maximum heart rate if you give them, and the answers to the health check), the marks you put on songs and the analysis of each song (tempo, energy and its shape) stay on your device, in the app's private container. Your class history syncs through your personal iCloud account when iCloud sync is on (the default), under Apple's terms; we never have access to it. BeatRide has no advertising, and no third-party code receives your data. The only thing it sends us is the anonymous usage statistics described below, which are our own and which you can turn off.

Your name and username. When you create your profile, your display name and the username you choose are stored in BeatRide's public iCloud database (Apple CloudKit), with your username reserved so nobody else can take it. Today nothing in the app shows them to other people. Deleting your account in Settings deletes both.

Apple Music. With your permission BeatRide reads your playlists and their songs to build classes, plays them through Apple Music, and creates a playlist in your library only when you ask it to. When BeatRide picks the music, it asks Apple Music for songs by their ISRC code. Playback follows Apple's terms; we never see your Apple Music account.

Measuring songs. To know a song's tempo, energy and shape, BeatRide downloads its 30-second Apple Music previews, measures them on the device and throws them away; it sends the song's title, artist and length to LRCLIB (a public database of song timings), from which it uses only the timings. Nothing about you goes with those requests. BeatRide also ships maps of song structure from public research datasets.

Microphone. Only Learn by listening uses it, while you run it: BeatRide plays a playlist out loud and keeps measurements of what it hears (levels and frequency bands, ten times a second) to learn each song's shape. Sound is never recorded or uploaded.

Apple Health. Off by default. If you switch it on, each class you finish is written to Health as an indoor cycling workout (start, end and the kind of class). BeatRide never reads anything from Health and never uploads Health data anywhere.

Usage statistics. To decide what to improve, BeatRide counts how it is used (Seize Analytics, our own code, not a third-party SDK). It tells you once, with a notice on the Ride tab and an “OK”, and from then on, unless you turn off “Help improve BeatRide” in Settings, it sends: each class you start (its kind, its length, where the music comes from — your playlist, BeatRide’s picks or no music — and the coach’s tone and how much it talks) and how it ends (how long you rode, whether you finished it and whether it was saved); how long each tab stays on screen (time in the background does not count); and which purchase screens you see, where you opened them from, and which PRO badges you tap. Never your songs, your playlists, your health answers or your name. With them go the app version, the language, the region setting, the kind of device (iPhone or iPad) and whether the app comes from the App Store, TestFlight or a development build. They carry a random number made for this install — not your name, your Apple Account, nor the device’s identifier — and we do not keep your IP address. They reach our server at Supabase (our processor), in the EU, in Frankfurt, which keeps them for 30 days at most, and we keep them in our own systems for up to 13 months. We use them only to decide what to improve: they are not linked to who you are, and they are not used to track you or for advertising. Turning the setting off deletes what this device sent.

In development; published by Sendoa Sola.

Tiller

Tiller is a sports-nutrition app: it works out calorie and macro targets from your details, your goal and your training, and adjusts them each week from what you ate and weighed. It has no account system, no server of its own, no ads and no tracking, and no third-party code receives your data. The only thing it sends us is the anonymous usage statistics explained below, which are our own and which you can turn off.

What you type. Your profile (sex, year of birth, height, weight, body fat if you give it, activity, training sessions, goal and pace, meals per day, a planned race, the supplements you say you take and the creatine switch), the weigh-ins and body-fat measurements you type, your dietitian's prescription and the fine-tune of your targets, the targets you apply, the history of weekly check-ins and the target each day had (for the calendar, for 400 days) are stored on your device and synced through your personal iCloud account (iCloud key-value storage), under Apple's terms; we never have access to it. None of it goes to Seize.

Apple Health. Only with your permission, Tiller reads from Health the food energy and macros logged by other apps, your workouts (their kind, start and length, the app that saved them and, for BeatRide classes, the kind of class), your body weight, body fat, lean body mass, height, date of birth and biological sex. It uses them on the device to work out and adjust your targets and to know when you have trained; they never leave the device and are never written to iCloud. When food or a workout is saved to Health, Health can wake Tiller in the background so its widgets stay up to date. If you allow it, Tiller also writes to Health the weigh-ins you type in Tiller. Tiller never uploads Health data anywhere.

Grain. If Grain, also from Seize, is installed, Tiller reads a daily summary that Grain leaves on the device (for each day: energy, macros, fibre, how many meals have entries and the energy and protein of each meal). It stays on the device, and Tiller does not open Grain's own data.

Meso. If Meso, also from Seize, is installed, Tiller reads a summary of your sessions that Meso leaves on the device (for each session: its day and length, tonnage, sets, hard sets, average reps in reserve and the estimated one-rep max of each exercise; and the weekly set range for each muscle). It stays on the device, and Tiller does not open Meso's own data.

Widgets. Tiller's widgets and its “Training day” control show what Tiller has worked out (today's targets, what you have eaten so far, your week and your weight trend) from a copy Tiller keeps on the device, in a private App Group container shared only with its own widgets. The days you say you are training are kept there too, on the device only, for 14 days.

Purchases. Tiller offers an optional one-time "Tiller Pro" unlock that opens the app's extra features, with a free 30-day trial. Apple processes them and checks the entitlement on your device, including Family Sharing; we never see your payment details. What Apple tells us about each purchase is under Purchases.

Usage statistics. To decide what to improve, Tiller counts how it is used (Seize Analytics, our own code, not a third-party SDK). It tells you once, with a notice on Today and an “OK”, and from then on, unless you turn off “Help improve Tiller” in Settings, it sends: how long each tab stays on screen (time in the background does not count); which purchase screens you see; when you apply targets; whether you take or put off the weekly check-in; and each weigh-in you type, each event you plan and when you turn the creatine switch on or off. Never your weight, what you eat, your targets or your goal. With them go the app version, the language, the region setting, the kind of device and whether the app comes from the App Store, TestFlight or a development build. They carry a random number made for this install — not your name, your Apple Account, nor the device’s identifier — and we do not keep your IP address. They reach our server at Supabase (our processor), in the EU, in Frankfurt, which keeps them for 30 days at most, and we keep them in our own systems for up to 13 months. We use them only to decide what to improve: they are not linked to who you are, and they are not used to track you or for advertising. Turning the setting off deletes what this device sent.

Tiller is not a medical device and does not replace a dietitian or a doctor. Questions about Tiller and your data: hello@seizeapps.com.

In development; published by Sendoa Sola.