LogZero

Privacy posture

What we don't know about you.

Most apps tell you they value privacy as they send your data to their servers, partners and sales teams. We don't see any of your data, because it's all stored on device.

Jump to the formal Privacy Policy ↓

01

On-device storage.

Every entry (moods, foods, meds, weights, todos) is stored in a local database on your phone. No cloud sync. No remote backup. No exceptions.

02

No accounts.

No sign-up. No email. No password. No identifiers. Open the app and start tracking. There is no "you" we know about because there is no "you" we ask about.

03

Zero analytics.

No Google Analytics. No Plausible. No Fathom. No Mixpanel. No Amplitude. No Firebase. No crash reporters tied to user identifiers. We measure success in App Store reviews, not surveillance.

04

No ads, anywhere.

No banner ads. No interstitials. No "promoted" content. No affiliate links. No referral codes. Your subscription funds the app. We have no other revenue.

05

Audited dependencies.

Every library that ships in the app is reviewed for data-exfiltration risk before integration. The App Store privacy label tells the truth: Data Not Collected.

06

You can export everything.

JSON export from Settings. CSV or encrypted backup on Pro. Take your data anywhere. Delete it from us by deleting the app. There is nothing else to delete.

Verified at the source

App Store says the same thing.

Apple shows this card before you download. We declared what we collect. The answer is nothing.

What we never do

A list, in case it isn't clear.

  • We never sell, share, license, or otherwise transfer your data to third parties.
  • We never aggregate "anonymized" usage data for sale. Even "anonymized" is antithetical to the brand.
  • We never integrate ad networks. We never track conversions across the web.
  • We never partner with health insurers, employers, or data brokers.
  • We never offer a "free" tier funded by data extraction. Free means free.
  • We never integrate fonts, scripts, or assets from another domain, everything is self-hosted.

Common questions

Questions about data privacy in tracking apps

Do mental health apps sell my data?

Many do. Mozilla's Privacy Not Included project, the FTC ($7.8M fine against BetterHelp), and PBS NewsHour have all documented mental health apps sharing or selling user data with advertisers and brokers. LogZero is built so that this is structurally impossible. There is no server to share data from.

What does "on-device only" actually mean?

Every entry (moods, foods, medications, weights, exercise minutes, meditation sessions, todos, custom metrics) is stored in a local database on your iPhone. The app does not transmit any of it. No cloud sync. No analytics. No telemetry.

What happens to my data if I delete LogZero?

iOS deletes the app's local database when you delete the app. There is no server-side record to clean up because there is no server-side copy. If you want a backup, export to JSON before uninstalling.

Legal

Privacy Policy

Short and to the point, as it should be.

Effective

Summary

LogZero collects no personal data. The LogZero iOS app stores your entries on your device, which are encrypted by AES-256 symmetric key encryption.

Apple may collect data related to App Store purchases and subscriptions (managed by Apple under their own privacy policy, not ours).

What this policy covers

This policy applies to the LogZero iOS application, the LogZero.app website, and any LogZero-branded software or services operated by Andrew Hoffman, LLC.

Where your tracking entries live

Every entry you make in the app (moods, foods, medications, weights, exercise minutes, meditation sessions, todos, etc) are stored in a local database on your device. The data is encrypted with AES-256 symmetric key cryptography. The data does not leave your device unless you explicitly export it.

If iOS device backups are enabled on your iPhone, your app data may be included in those backups (managed by Apple's iCloud Backup, governed by Apple's own privacy policy). You can exclude LogZero from iOS backups in Settings → [your name] → iCloud → Manage Account Storage → Backups.

Information we collect from the iOS app

We collect nothing from the app.

  • No personal identifiers. No name, email, phone number, or account is required.
  • No tracking data. No advertising IDs, no IDFA, no device fingerprinting.
  • No usage analytics. No screen views, taps, or session lengths are reported.
  • No crash reporters tied to identity. If a future version adds crash reporting, it will be privacy-preserving and disclosed here.
  • No ad networks. The app implements zero advertising, and therefore connects to zero ad servers.
  • No data-collecting libraries. No analytics, ad, or behavioral telemetry libraries of any kind ship with the app.

Information we collect from this website

The LogZero.app website is hosted on Cloudflare Pages. As the network operator, Cloudflare may process standard request metadata (IP address, timestamp, requested URL, user agent) for security, abuse prevention, and basic operation of the web server. Any retention of that metadata is governed entirely by Cloudflare's own privacy and data-retention policies, available at www.cloudflare.com/privacypolicy.

Third parties

LogZero relies on two service providers, and only for the narrow purposes described below:

  • Apple Inc. — distributes the iOS app via the App Store and processes all subscription and Lifetime purchases through In-App Purchase. Apple's handling of your Apple ID, payment information, and App Store activity is governed by Apple's Privacy Policy.
  • Cloudflare, Inc. — hosts the LogZero.app website (Cloudflare Pages). Cloudflare's handling of edge request metadata is governed by Cloudflare's Privacy Policy.

We use no other processors, sub-processors, analytics vendors, advertising networks, customer-support platforms, or data brokers.

Payments & subscriptions

LogZero subscriptions and the Lifetime purchase are processed through Apple's In-App Purchase system. Apple manages the transaction, including any personal/payment data. See Apple's privacy policy for details. We do not see your payment information; we receive only Apple's aggregated revenue reports.

Data export & deletion

Export: Open the app → Settings → Data & Backups → Export. The export produces a JSON file containing all your entries. You can move it via AirDrop, save it to Files, or share it however you'd like.

Deletion: Deleting the LogZero app from your device deletes the local database. There is no server-side record to delete. To delete your data navigate to Settings → Data & Backups → Delete all data.

Health data & HealthKit

LogZero does not integrate with Apple HealthKit. The app does not read from HealthKit and does not write to HealthKit. Health-related entries you create in the app (moods, medications, weights, exercise minutes, meditation sessions) are stored only in the app's local database on your device, as described above. We never use health-related data for advertising, never share it with third parties, and never disclose it to data brokers.

Regional rights

Residents of the European Union, United Kingdom, and Switzerland have rights under the GDPR (access, rectification, erasure, restriction, portability, and objection). Residents of California have rights under the CCPA and CPRA (know, delete, correct, opt out of sale, opt out of sharing). Residents of Brazil have rights under the LGPD; residents of Canada under PIPEDA; and residents of other jurisdictions under their respective laws.

Because LogZero collects no personal data, processes no personal data, shares no personal data, and sells no personal data, exercising these rights is automatic — there is nothing on our end to access, correct, port, restrict, or delete. The app itself provides full data portability via JSON export, and full data deletion by uninstalling the app.

If you have a regional-rights question or want a written confirmation for compliance purposes, contact us at the address below.

Contact

For any privacy question, reach out via the contact form.

Changes to this policy

If this policy changes, the "Effective" date above will be updated. Material changes will be announced on the LogZero website.

Make the boring choice.

Get LogZero, and know exactly where your data lives.