Last updated: 4 August 2026
Ayumu is a personal self-care app. This policy explains what we collect, why, where it is stored, and the control you have over it. We have tried to write it plainly rather than in legal boilerplate.
Ayumu is operated by the app's developer ("we", "us"). For any privacy question or request, contact us at hello@ayumu.app.
We only hold what you enter into the app, plus the minimum needed to run an account.
| Data | Why we hold it |
|---|---|
| Account — email address, name, password | To create your account, sign you in, and let you reset a forgotten password. Passwords are stored only as a salted bcrypt hash; we never store or see the password itself. |
| Profile — your "dream name", personal vision, wake/bed times, daily goals and reminder preferences | To personalise the app and schedule your reminders. Your dream name (not your real name) is what other users see on the leaderboard. |
| Activity you log — tasks, water, mood, sleep, focus/work sessions, meditation, breathwork, reading, workouts, exercises and body weight | This is the core purpose of the app: to show you your own history, streaks, XP and progress. |
| Written entries — morning and evening journals, gratitude notes, thought reframes, day notes and captions | So you can read back what you wrote. These are personal reflections and we treat them as sensitive. |
| Health-related details — age, sex, height, weight, activity level and goal (for the calorie calculator), plus calories logged | Only to calculate your calorie and macro targets and show your nutrition history. |
| Progress photos — images you choose to upload, with an optional caption, date and body weight | To build your private progress gallery. Photos are stored in a private bucket and are only ever served to you through short-lived, expiring links. |
Ayumu includes a leaderboard ranking users by XP. It shows only your dream name and your XP total — never your real name, email, or anything you have written or logged. If you would rather not be identifiable, choose a dream name that isn't your real name. Everything else in the app is private to you.
Reminders and timer alarms are scheduled on your device by the Android system. We do not operate a push-notification server and do not collect a push token. You can turn any reminder off in the app, or all of them off in your phone's settings.
We use a small number of service providers to run the app. They process data on our behalf and are not permitted to use it for their own purposes.
| Provider | Purpose |
|---|---|
| Supabase | Database (your account and entries) and private file storage (progress photos). |
| Render | Hosting for the app's backend server. |
| Resend | Sending account emails only — verification and password-reset codes. Never marketing. |
Data is transmitted over encrypted HTTPS connections. Our servers and database are hosted outside your country of residence, so your information may be processed internationally.
We keep your data for as long as your account exists. If you delete your account, your profile, entries and photos are permanently deleted from our database and file storage. Deletion is immediate and cannot be undone, so export or save anything you want to keep first. Backups may persist for a short period before rotating out.
Depending on where you live (for example the UK, EU, or other regions with comparable laws) you may have additional rights, including to object to or restrict processing, or to lodge a complaint with your local data protection authority. Contact us and we will help.
Ayumu is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Passwords are hashed, traffic is encrypted in transit, progress photos live in a private bucket reachable only through expiring signed links, and every request is scoped so an account can only ever read its own data. No system is perfectly secure, but we take reasonable measures to protect your information and will notify affected users of any breach that puts their data at risk.
Ayumu's calorie targets, wellbeing prompts and other guidance are general information for self-care and are not medical advice. Speak to a qualified professional before making significant changes to your diet, exercise or health routine, and do not rely on the app to diagnose or treat any condition.
If we change this policy we will update the date at the top and, for significant changes, notify you in the app. Continuing to use Ayumu after a change means you accept the updated policy.
Questions, requests or complaints: hello@ayumu.app.