Privacy
Last updated 17 October 2026
Don't Spike is local-first. Your health data lives on your phone. Our server does not store anything that identifies a person's health.
What is stored where
| Data | Where | Kept for | Leaves your phone? |
|---|---|---|---|
| Glucose, workouts, sleep, steps, heart rate (from Apple Health) | A copy on your phone | Mirrors Apple Health; can be rebuilt at any time | Only as a small aggregated summary inside an AI question, or in a CSV or PDF you export yourself |
| Your log entries (meals, exercise, notes, fingersticks) | Your phone; optionally Apple Health if you turn that on | Until you delete them | No |
| Computed daily statistics | Your phone | Recomputed on demand | No |
| Settings (units, target range, theme) | Your phone; mirrored to your account when signed in | Until you delete your account | Yes, but it contains no health data |
| Account (email, sign-in provider id) | Supabase (our sign-in provider) | Until you delete your account | Yes |
| AI usage counters (messages per day) | Supabase | Rolling 30 days | Yes, counts only |
| AI conversation history | Your phone | You can clear it any time | The current question and the summary go to our server and to Anthropic to produce the answer; neither stores them |
The AI buddy
When you ask Buddy a question, your phone sends the question and a compact summary of your statistics (a few kilobytes: time in range, averages, nights, workouts, meals, patterns). It never sends raw glucose readings, your name or your email. Our server checks your sign-in and your daily allowance, passes the question to Anthropic's Claude API to produce the answer, and logs only your user id, token counts, response time and status. Neither we nor Anthropic store the question or the summary.
Apple Health
We read only the types you allow, when a feature needs them. We write to Apple Health only the meals and fingerstick readings you log, and only if you turn that on. We never write CGM values.
No tracking
There are no analytics, advertising or crash-reporting kits in the app or on this site, and no cookies.
Deleting your account
Settings → Account → Delete account removes your sign-in and the rows above from our systems and wipes the app's local data. Your data in Apple Health is untouched, because it was never ours.
Contact
Questions about privacy: support@dontspike.app.