Privacy Manifesto.

02. The CloudKit Vault

Protocol logs, workouts, meals, hydration, fasting state, habits, symptoms, medications, cycle entries, intimate-health entries, and progress photos are stored on-device and synced through your Encrypted iCloud Private Database.

The developers of PrimeForm have zero visibility into that vault. There is no PrimeForm server holding your records.

03. AI Coach — Apple Intelligence Only

PrimeForm's AI features run only on Apple Intelligence. There are no third-party AI providers, no PrimeForm AI server, and no API keys.

• On this iPhone — on supported devices the request is handled by Apple's on-device model and never leaves the phone.
• Apple Private Cloud Compute — on iOS 27 and later, larger requests may be handled by Apple's Private Cloud Compute. Apple processes the request only to answer it and, per Apple's published design, does not retain it or make it available to Apple staff. PrimeForm never receives it.

When you message the Coach, PrimeForm builds a context summary from your local data and includes it with your message so the answer fits your situation. It can include:

• Your name, body measurements, goals, and self-described struggles
• HealthKit-derived summaries: steps, active energy, stand minutes, sleep hours, hydration
• Daily check-in mood, energy, focus, cravings, intention, gratitude notes
• Active symptoms, current medications, medical-document metadata
• Menstrual cycle data and intimate-health entries (when logged)
• Accountability partner names and shared goals (when the partner feature is used)
• The text of every message you send the Coach

What is never included: raw HealthKit samples, your Apple ID, your email, journal/brain-dump entries, and relapse logs.

If Apple Intelligence isn't available on your device, AI features are switched off and everything else, including manual logging, keeps working.

04. Photos and Documents

Meal photos, Coach image attachments and medical document scans are analysed with Apple's frameworks: text recognition and image classification run on the device, and an estimate or summary is produced by Apple Intelligence on the device or in Private Cloud Compute as described above. No image is sent to a third party. Profile photos and weekly progress photos are never analysed.

05. Image Search

Meal and exercise cards display royalty-free imagery from Pexels. PrimeForm sends only the search keyword (e.g., "salmon", "deadlift") to api.pexels.com. No user identity is attached.

06. Accountability Sharing

Data is only shared with accountability partners you explicitly invite. Sharing happens through Apple's CloudKit-sharing primitive — PrimeForm cannot read the shared zone. You retain full control to revoke access at any time.

07. Screen Time & Family Controls

The Detox and Focus modules use Apple's Family Controls and Managed Settings frameworks. The set of apps you block stays on-device in a sandbox PrimeForm cannot read directly — Apple mediates the entire interaction. We never see which apps you block.

08. Analytics & Tracking

PrimeForm does not integrate Firebase, Crashlytics, Sentry, Mixpanel, Amplitude, or any third-party analytics SDK. There is no cross-app or cross-site tracking, no advertising identifier collection, and no usage telemetry sent to PrimeForm or any partner.

10. Your Choices

• Skip AI features, or turn off Apple Intelligence in iOS Settings, to avoid AI requests; iCloud sync and any sharing you enable remain separate.
• Sign out of iCloud or disable iCloud Drive for PrimeForm in iOS Settings to stop CloudKit sync.
• Delete the app at any time to remove all local data; CloudKit-stored data can be deleted from iOS Settings → Apple ID → iCloud → Manage Account Storage.
• Revoke Apple Health permissions in iOS Settings → Privacy & Security → Health.

11. Children

PrimeForm is not directed at children under 13. We do not knowingly collect data from anyone under 13.