Mightly

Draft — under review.

Privacy Policy

Effective: October 22, 2026 · Applies to the Mightly iOS app, published by Ayyed LLC ("we", "us").

The short version

  • Your health information — medications, doses, meals, weight, symptoms and progress photos — is stored on your iPhone. We don't have accounts and we don't keep it on our servers.
  • When you use AI meal analysis or meal suggestions, the photo or request is sent through our server to our AI provider to produce the result. We don't store it.
  • We never sell your data, never use it for advertising, and never share Apple Health data with anyone.
  • You can export or delete everything from inside the app at any time.

1. Information stored only on your device

Information you enter or that the app calculates stays in the app's storage on your iPhone, protected by iOS data protection: your profile answers (such as height, weight, goal, birth year and sex), medication and dose logs, injection sites, meals and nutrition estimates, water, symptoms, strength check-ins, targets and progress photos. It is included in your iPhone or iCloud device backup, which Apple controls.

2. Apple Health

If you allow it, Mightly reads your body weight from Apple Health and writes body weight, dietary protein, fiber, water and energy to Apple Health. Health data is used only to provide the app's features. We do not use Health data for advertising or marketing, do not sell it, do not share it with third parties, and do not store it on our servers. You can change access at any time in the Health app.

3. Information that leaves your device

AI meal analysis and suggestions

When you take or choose a meal photo for analysis, or ask for meal suggestions, the app sends the photo (resized) or the minimum details needed (such as symptoms you selected and how much protein is left for the day) to our server, which forwards it to our AI provider, Anthropic, PBC, to generate the result. Our server does not store photos or request contents. Anthropic processes this content to provide the service under its commercial terms and privacy policy. Don't include faces or documents in meal photos.

To prevent abuse, our server uses an anonymous app user ID to check that your subscription is active and to apply daily usage limits. It keeps a short-lived counter tied to that ID, not your name or email.

Subscriptions

Payments are processed by Apple. We use RevenueCat, Inc. to manage subscription status. RevenueCat receives purchase information from Apple and an anonymous app user ID. We do not receive your payment card details.

Usage analytics

We use PostHog to understand how the app is used (for example, which onboarding step people stop at, or that a meal was logged). These events contain an anonymous identifier, device and app version information, and event names. They do not include health values such as your weight, dose, meals, symptoms or photos. We don't record screens, taps or sessions. You can turn analytics off anytime in Plan → Settings → Share anonymous usage data.

Crash and diagnostic data

If you've opted in to share analytics with app developers in iOS settings, Apple may provide us with anonymized crash reports.

4. Consumer health data

Using a GLP-1 companion app may itself suggest information about your health. Some U.S. state laws (for example, Washington's My Health My Data Act) give you specific rights over consumer health data. We collect such data only as described above, use it only to provide the features you request, do not sell it, and share it only with the service providers named in this policy to operate the app. You may request access to or deletion of data we hold by emailing us; because most data never leaves your device, deleting it in the app (or deleting the app) removes it.

5. What we don't do

6. Retention and deletion

On-device data stays until you delete it. Use Plan → Settings → Delete all data, or delete the app. Analytics events are retained for up to 12 months. RevenueCat retains purchase records as needed for subscription management and legal obligations.

7. Children

Mightly is intended for adults 18 and older and is not directed to children. We do not knowingly collect information from children.

8. Security

Data on your device is protected by iOS encryption. All network requests use HTTPS. Our AI server holds no user database.

9. Your choices and rights

You can decline Apple Health or notification access, export your data as CSV, and delete it at any time. Depending on where you live, you may have rights to access, correct, delete or port your data, and to appeal our decision. Contact us at hello@ayyed.com.

10. Changes

We'll update this page and the effective date when this policy changes, and notify you in the app for material changes.

Contact

Ayyed LLC, New Jersey, USA · hello@ayyed.com