Last updated: August 27, 2026
Lyph ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use the Lyph mobile application ("App") and related services.
By using Lyph, you agree to the practices described in this policy. If you do not agree, please do not use the App.
Account Information: When you create an account, we collect your email address, display name, and authentication credentials. If you sign in with Apple, we receive the information you authorize Apple to share (typically name and email).
User-Generated Data: Lyph lets you capture and track aspects of your daily life by typing, taking a photo, or speaking. This includes:
Camera, Photos, and Voice Input: When you choose to capture a meal by photo or barcode, or to log by voice, Lyph accesses your camera, photo library, or microphone. These photos and voice recordings are sent to our AI provider (OpenAI) so it can analyze them — for example, to estimate nutrition from a meal photo or to transcribe a spoken log. Lyph does not store your photos or voice recordings; only the resulting entry (such as the estimated meal and macros, or the transcribed text) is saved to your account.
Apple Health (HealthKit) Data: Apple Health is optional. If you choose to connect it, you decide which categories to authorize — you can enable as few or as many as you like, such as steps, active energy, workouts, sleep, heart-rate summaries, height, and weight. With your permission, Lyph may also write completed workouts and active-energy data back to Apple Health. This data is used to personalize your tracking, daily score, and insights. When Apple Health is connected, a summary of these metrics (for example steps, active calories, sleep, resting heart rate, and weight) may be included in the context sent to our AI provider (OpenAI) to generate your coaching and insights. We never use Apple Health data for advertising, marketing, or data-mining, and we never sell it. You can revoke access at any time in Settings > Privacy & Security > Health.
Device and Usage Information: We collect basic device information (device type, OS version, app version) and anonymous crash diagnostics via Sentry to improve app stability. We do not collect your IP address for tracking purposes.
We use the information we collect to:
We do not sell your personal data. We do not use your data for advertising. We do not build profiles for third-party marketing.
Your data is stored in Supabase, a managed PostgreSQL database service, using row-level security (RLS) to ensure that your data is completely isolated from other users. All data is encrypted in transit (TLS) and at rest.
Authentication is handled through Supabase Auth with support for email/password and Apple Sign In. Passwords are never stored in plaintext.
Some data is cached locally on your device using AsyncStorage for offline access. This data remains on your device and is cleared when you sign out or delete your account.
While we implement commercially reasonable security measures, no system is 100% secure. We cannot guarantee absolute security of your data.
Lyph's AI features (the coach, insights, and weekly/monthly reviews) are powered by OpenAI's API, accessed through a secure server-side proxy. Depending on the feature, this may use OpenAI text models (such as GPT-4o and GPT-4o-mini), image analysis for meal photos, and speech-to-text (Whisper) for voice logging. When you use these features:
AI-generated content is for informational and motivational purposes only and is not a substitute for professional medical, psychological, or fitness advice.
For more information, see OpenAI's API Data Usage Policy.
We use the following third-party services to operate the App:
Each third-party service has its own privacy policy. We encourage you to review them. Lyph does not use any advertising networks, analytics/tracking SDKs, or data brokers.
We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:
Access: You can view all your data within the App at any time through the dashboard, history, and analytics screens.
Deletion: You can delete your account and all associated data at any time from the You tab in the App. Account deletion is permanent and immediate. Once deleted, your data cannot be recovered.
Apple Health: You can revoke Lyph's access to HealthKit at any time through your device's Settings > Privacy & Security > Health.
Notifications: You can manage or disable all notifications through your device settings or the App's settings screen.
Canadian Residents (PIPEDA): Canadian residents have the right to access, correct, and request deletion of their personal information. We process data in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). To exercise your rights, contact us at the email below.
California Residents (CCPA): California residents have the right to know what personal information we collect, request deletion of personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.
European Residents (GDPR): If you are located in the European Economic Area, you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Our legal basis for processing is your consent (which you can withdraw at any time) and our legitimate interest in providing the service. Contact us to exercise these rights.
We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted immediately. We do not retain backups of deleted user accounts beyond standard database backup windows (up to 7 days), after which all data is purged.
Lyph is not intended for children under the age of 13 (or 16 in jurisdictions where applicable). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you believe a child under 13 has provided us with personal data, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or on our website, with an updated "Last updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or your data, contact us at:
Email: support@lyph.app