Privacy.
The short version: Downhill has no ads, no trackers, no analytics, and we never sell data. Your weigh-ins live on your iPhone. If you create an account, they also sync to our servers so you can restore them — and you can delete everything, any time, from inside the app.
What Downhill stores on your device
Everything you put into the app is stored locally on your iPhone: your weigh-ins, notes, tags, progress photos, goal, and settings. Progress photos are saved inside the app's own storage at a reduced resolution. If you use Downhill without an account (guest mode), none of this ever leaves your device.
If you create an account
Accounts exist for one reason: so your data survives a lost phone and follows you to a new one. When you sign up and turn on sync, we store:
- Your email address — used to sign you in and send verification codes. Nothing else — no marketing email.
- Your name, if you use Sign in with Apple and choose to share it.
- Your weigh-in data — entries, notes, tags, your goal, and settings.
- Your progress photos — end-to-end encrypted. Photos are encrypted on your iPhone before upload, and the key lives only in your iCloud Keychain. We cannot view your photos, and neither can anyone with access to our servers.
Synced data is stored with row-level security: your account is the only one that can read or write it. Photos go one step further — their encryption key syncs between your devices through iCloud Keychain and never touches our servers, so they are unreadable to us by design. The honest flip side: if you permanently lose access to your iCloud Keychain, we can't recover your photos for you. That's the point.
Apple Health
If you connect Apple Health, Downhill reads and writes exactly one thing: body weight. We never request or access any other Health data. Health access is optional and controlled by you in iOS Settings. Weight entries imported from Health are treated like any other entry — they stay on your device unless you've signed in and enabled sync.
Who we share data with
No one, for any commercial purpose. Downhill uses three service providers to function:
- Supabase hosts our database and sign-in service (your synced data and email).
- Resend delivers verification-code emails when you sign up or reset your password.
- Apple handles your purchase, Sign in with Apple, and Apple Health. We never see your payment details.
There are no advertising networks and no analytics SDKs in the app. Downhill's App Store privacy label reports no tracking, because there is none.
Deleting your data
You own your data, including the exit:
- Export — download all your entries as a CSV file from Settings, any time.
- Delete your account — Settings → Account → Delete Account permanently removes your account and everything synced to our servers.
- Local data — deleting the app removes all data stored on your device.
Changes to this policy
If this policy changes in a way that matters, we'll note it in the app's release notes and update the date at the top of this page.
Questions
Email us at support@downhillweight.com. A human reads it.