← Wholeday
Wholeday for iPhone
Privacy Policy
Effective October 18, 2026 · Version 7
The short version
- The Wholeday app has no account and no Wholeday servers. Your food, medications, weight, labs and notes are stored on your iPhone.
- We never see your data. We don't sell it, share it, or use it for advertising, and the app contains no analytics, advertising or tracking code.
- A few features contact outside services only when you use them: food look-ups (USDA and Open Food Facts), voice dictation on iPhones that can't transcribe on the device, and the optional Claude (AI) answers in Coach, if you add your own key and turn it on.
- Apple Health is used only with your permission and is never used for advertising.
- You can export, back up or delete everything from Settings.
- The website stores your email only if you join the waitlist, and counts visits without cookies.
Who we are
Wholeday is made by STI Financial LLC, doing business as Wholeday, Temecula, California ("we", "us"). This policy covers the Wholeday app for iPhone, its Lock Screen activities, and this website. It explains what the app handles, where that information goes, and the choices you have.
Because Wholeday keeps your information on your device, we are not a healthcare provider or health plan, and HIPAA does not apply to the app. We still treat everything you enter as sensitive health information.
What Wholeday stores on your iPhone
Wholeday stores what you enter, and what you allow it to read from Apple Health, in a database inside the app on your iPhone. We have no copy and no access to it.
| Category | Examples | Why |
|---|
| Profile | Birth date, sex for the calorie formula, height, weight, activity level, goal and pace | To work out calorie and protein targets |
| Food and water | Meals, portions, recipes, foods you create, barcodes, water, fasting times, meal plans, grocery lists | Your food log, plans and progress |
| Body | Weigh-ins, body fat, measurements, progress photos | Trends and progress |
| Medications | Names, doses and schedules from your prescription, doses taken or skipped, injection sites, vials and pens, supplies | Reminders, your dose history, supply and refill alerts |
| Symptoms and check-ins | Appetite, "food noise", side effects, notes | To show patterns over your dose cycle |
| Lab results | Values, units, ranges and draw dates you enter | Your lab history and the report for your prescriber |
| Settings | Units, reminder preferences, app icon, the date you agreed to the medical notice | To run the app the way you set it |
Wholeday doesn't ask for your name, email, phone number, address or payment details.
When data leaves your iPhone
Only in these cases, and only when you use the feature:
Food look-ups
When a food isn't in the list built into the app, Wholeday sends the words you search for, or the barcode you scan, to the USDA FoodData Central database or the Open Food Facts database. If you added your own USDA key in Settings, it is sent with USDA searches. Nothing about you is sent with these requests. Like any website, these services see your device's internet (IP) address. Their own privacy policies apply: USDA / USA.gov and Open Food Facts.
Voice logging
When you describe a meal by voice, Wholeday asks Apple's speech recognition to transcribe it on your iPhone. On iPhones or languages that can't do this on the device, Apple's speech service processes the audio under Apple's privacy policy. We never receive the audio or the text.
Things you choose to send
- Apple Health: food, water, weight and body fat you log are written to Apple Health if you allow it. Apple Health stores and protects them on your device and, if you use iCloud, in your iCloud account.
- Backups: Wholeday saves backup files to a folder you choose, such as On My iPhone, iCloud Drive or another storage provider. That provider stores the file under its own terms. Turn on Settings → Encrypt backups to seal every backup with a password (AES-256); the password stays in your iPhone's Keychain and is never put in the backup. Without it, backup files are not encrypted, so choose a folder you trust.
- Reports and exports: the report for your prescriber and exported spreadsheet (CSV) files go only where you send them, using the iPhone share sheet.
- Claude (AI) in Coach (optional): off unless you add your own Anthropic API key and turn it on in Settings. Then questions you type in the coach (not the ones you pick from its list) are sent to Anthropic's Claude, with only the kinds of data you switch on (food log and targets, weight and goal, meal plan, medications (names, doses you logged, schedule, missed doses, injection sites, supply, the estimated phase, and the appetite and side effects from your check-ins), and Apple Health activity: steps, active energy, sleep, resting heart rate, heart rate variability, and your latest blood pressure and blood glucose); each is off by default, and Claude reads them only when a question needs them. Your name, birth date, notes, lab results and photos are never sent. Anthropic processes these requests under its own API terms and privacy policy. Your key is stored in your iPhone's Keychain and sent only to Anthropic. You can turn this off or remove the key at any time.
- Sharing to your own AI app: without Claude set up, you can share a typed question to an AI app of your choice. Wholeday builds the message from your question and only the data you allowed in Settings → Coach, and you send it with the iPhone share sheet. Wholeday sends nothing itself and never receives the reply. Once shared, that app's own privacy terms apply, and it may store or use what you send.
- Grocery list: if you add your grocery list to Reminders, those items are stored by the Reminders app.
- Crash reports: if you turn on "Share with App Developers" in iPhone Settings, Apple may share anonymous crash and usage diagnostics with us. These don't contain your health entries.
What we never do
- Sell, rent or trade your information.
- Share health information with advertisers, data brokers, insurers or employers.
- Use Apple Health data, or anything you log, for advertising or marketing.
- Include analytics, advertising, attribution or tracking code from other companies in the app.
- Track you across other companies' apps or websites.
- Use your information to train AI models.
Apple Health
With your permission, Wholeday reads from Apple Health:
- Steps, active energy, workouts and Activity ring goals
- Resting heart rate, heart rate variability and sleep
- Blood pressure and blood glucose readings
- Weight, body fat and height
- Birth date and biological sex, to fill in your profile
- Dietary energy, protein, carbohydrate, fat, fiber, sodium and water
It writes food energy and nutrients, water, weight and body fat that you log in Wholeday. You choose each item when Wholeday asks and can change your choices at any time in the Health app. Health data is used only to provide Wholeday's features to you. It is never shared with third parties, used for advertising, or stored outside your iPhone and Apple Health.
On-device intelligence
Meal photo recognition, reading nutrition and medication labels, and the coach's answers to questions you pick from its list all run on your iPhone, using Apple's on-device frameworks, including Apple Intelligence where available. Photos and labels are never sent to us or to an AI service. Questions you type in the coach stay on your iPhone too, unless you set up the optional AI coach with Claude (see When data leaves your iPhone), in which case they go to Anthropic with only the data you allow.
Medication levels, phases and lab timing shown in the app are estimates calculated on your iPhone from published averages.
Permissions
| Permission | Used for | If you say no |
|---|
| Apple Health | Reading activity, sleep and weight; writing the food you log | Enter details yourself; everything else works |
| Camera | Scanning barcodes, nutrition labels and medication labels; meal photos | Search or type instead |
| Photos | Choosing a label or meal photo you already took | Use the camera or type instead |
| Microphone and speech recognition | Describing a meal by voice | Type instead |
| Notifications | Dose, follow-up, refill and fasting reminders | No reminders |
| Reminders | Adding your grocery list to the Reminders app | Use the list inside Wholeday |
| Live Activities | Fasting timer and next dose on the Lock Screen | See them in the app instead |
Security
Your information is protected by your iPhone's passcode and Apple's data protection. Progress photos use complete file protection, so they can't be read while your iPhone is locked. Because there are no Wholeday servers, there is no central database to breach. Backups can be encrypted with a password of your choice. Keep your iPhone protected with a passcode, and keep backups in a place you trust.
Keeping and deleting your data
Wholeday keeps your information on your iPhone until you delete it.
- Delete everything: Settings → Delete all data removes your entries, photos, settings and restore copies. You can also remove the data Wholeday wrote to Apple Health at the same time.
- Delete one item: swipe or edit any entry.
- Delete the app: removes its data from your iPhone. Data in Apple Health and any backup files you saved stay until you delete them there.
- Take it with you: make a backup or export in Settings at any time.
Your rights
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas and other US states, the EU and UK under GDPR, or Canada), you may have the right to access, correct, delete or port your personal information, to withdraw consent, and to opt out of its sale, sharing or use for targeted advertising.
You can exercise all of these directly in the app, because your information is on your device. We don't hold a copy, so we can't look it up for you. We don't sell or share personal information and don't use it for targeted advertising or profiling. If you have a question or complaint, contact us below; we will respond within 30 days. In the EU or UK you may also complain to your data protection authority.
Consumer health data (Washington, Nevada, Connecticut)
This section is our consumer health data privacy policy under Washington's My Health My Data Act, Nevada's SB 370 and Connecticut's consumer health data provisions.
- Categories collected: the health information described in What Wholeday stores, including medications and doses, symptoms, weight and body measurements, lab results, food intake, fasting, and the Apple Health data you allow.
- Purpose: only to provide the app's features to you on your iPhone.
- Sources: you, and Apple Health with your permission.
- Sharing: we do not collect, receive or share your consumer health data, and we do not sell it. The only disclosures are the ones you start yourself, described in When data leaves your iPhone.
- Your rights: to confirm, access, delete and withdraw consent. You can do all of these in the app (Settings → Delete all data, or deny a permission). Contact us below with questions; you may appeal a decision by replying to our response, and in Washington you may contact the Attorney General if we deny your appeal.
This website
wholedayapp.com (and getwholeday.com, which redirects to it) is separate from the app. Nothing you do on the website is linked to the app or to anything you store in it.
The waitlist
If you join the waitlist, we store your email address, your answer to "How did you hear about Wholeday?" if you give one, and the date and time you joined, in a database in our own Cloudflare account (Cloudflare D1). We use them only to email you about Wholeday's beta and launch, and the answer only to count which channels work. We don't store your IP address, device or browser details with your sign-up, and we never sell or share the list. These emails are sent from our own address. If we use an email service to send the launch emails, we'll name it here before sending them. Every email has an unsubscribe link. To be removed at any time, use that link or write to [email protected]. We delete the waitlist within 12 months of launch, or sooner when you ask.
Spam protection
To stop automated sign-ups, the website briefly counts requests from the same connection. It uses a scrambled (hashed) form of your IP address, held in memory for about a minute and never written to the database.
Visit counts
We use Cloudflare Web Analytics to count visits. It doesn't use cookies or local storage, and it doesn't identify you or follow you to other sites. We see totals such as page views, the referring website, country and browser type. See Cloudflare's privacy policy.
Hosting
Cloudflare hosts the website. Like any web host, Cloudflare processes your IP address to deliver pages and to protect the site from attacks, under its own privacy policy.
The website has no cookies, ads, social media pixels or other trackers, and serves its fonts itself. The waitlist is for adults (18 and over).
Children
Wholeday is not intended for children under 13, and we don't knowingly collect information from them. Calorie targets are designed for adults: when someone under 18 sets up the app, Wholeday turns off weight-loss goals and suggests setting targets with a doctor.
Not medical advice
Wholeday is a tracking tool. It does not diagnose, treat or replace your prescriber or care team, and it never suggests, changes or judges a medication dose. Medication levels, phases, calorie targets and dates are estimates. In an emergency, call your local emergency number.
Changes to this policy
If we change how Wholeday handles your information, we'll update this page and its effective date. Material changes, such as any new kind of data leaving your iPhone, will be explained in the app before they take effect and will require your agreement.
Privacy questions or requests: [email protected]