Privacy Policy

YAWI Privacy Policy

Last Updated: July 28, 2026

1. Introduction

This Privacy Policy explains how As You Wish Software, Inc. ("YAWI", "we", "our", or "us") collects, uses, discloses, and safeguards personal data when you use the YAWI mobile application (the "App"). YAWI is a personal wellness tracker. It is designed so that the wellness information you record stays on your own device.

Please read this Policy carefully. If you do not agree with it, do not use the App.

2. Scope

This Policy applies to the YAWI mobile application distributed through the Apple App Store and Google Play, and to our website at yawi.app. It does not cover third-party services you choose to connect or visit through the App; those services have their own privacy policies, and Section 9 identifies them.

3. What YAWI Stores on Your Device

The following information is written to an encrypted database on your device. It is not transmitted to us, and we have no ability to read it:

  • Wellness entries: your Captain's Log entries, journal entries, mood and wellness notes, and free-time entries.
  • Nutrition and hydration: meals, foods, custom foods, favorites, macro and calorie totals, and water intake.
  • Movement: exercise entries and activity you record or import.
  • Body metrics and goals: weight, targets, measurement-system preference, and progress tracking.
  • Imported third-party data: workouts, sleep, steps, and body weight pulled in from Apple Health or Fitbit if you connect them.
  • App state: settings, theme, reminder configuration, guided-tour progress, and encouragement ("Glimmer") history.

This data is removed when you delete your account from within the App or uninstall the App. Because it never reaches us, we cannot restore it for you, and we cannot produce a copy of it on request — you already hold the only copy.

4. What Leaves Your Device

Only the following information is transmitted off your device:

  • Account data, sent to our authentication provider (Auth0, an Okta company). When you register we send your email address, first and last name, date of birth, sex at birth, and your chosen password to Auth0, which stores your account and hashes your password. When you log in, your credentials are handled by Auth0's hosted login page. This is the only personal data held on a server on our behalf.
  • Your account identifier, sent to our account-deletion service. When you tap "Delete My Account", the App sends your login token to a small function we operate solely to delete your Auth0 account. It acts only on the account that made the request.
  • Barcode numbers, sent to Open Food Facts. When you scan a product barcode, the numeric barcode is sent to the Open Food Facts database to look up product and nutrition information. No image, and nothing identifying you, is sent.
  • Food search terms, sent to the USDA FoodData Central database. When you search for a food, the words you type are sent to this United States Department of Agriculture service to return nutrition data. Nothing identifying you is sent.
  • Fitbit authorization and data requests, if you connect Fitbit. Connecting Fitbit sends you to Fitbit's own sign-in page. Afterwards the App requests your activity, sleep, step, and body-weight records from Fitbit and stores the results on your device.

As with any internet request, the services listed above can observe your device's IP address and standard connection metadata. We do not receive that information from them.

Camera images are never transmitted or stored. The camera is used only to decode a barcode on your device; only the resulting number is sent to look up the product. Apple Health data is read through Apple's on-device framework and is not sent to us or to anyone else.

5. Health and Wellness Data

Health, nutrition, fitness, and wellness information you record or import is stored only on your device, in encrypted form. We do not collect it, receive it, store it on our servers, sell it, share it, use it for advertising, or use it to build a profile of you. Apple Health data is never used for advertising or data mining and is never written to iCloud by this App.

6. How We Use Personal Data

We use the limited account data described in Section 4 to:

  • create your account and sign you in;
  • address you by name in the App;
  • enforce our minimum age requirement of 18 (see Section 15);
  • respond to your support requests; and
  • delete your account when you ask us to.

We do not use your personal data for advertising, profiling, or any purpose unrelated to operating the App.

7. Legal Bases (EEA / UK and Similar Jurisdictions)

  • Performance of a contract: creating and maintaining your account so we can provide the App.
  • Consent: connecting an optional integration such as Fitbit or Apple Health, and enabling notifications. You may withdraw consent at any time by disconnecting the integration or turning notifications off.
  • Legal obligation: confirming you meet the minimum age and responding to lawful requests.
  • Legitimate interests: keeping the App secure and preventing abuse of the sign-in process.

8. Sharing and Disclosure

We do not sell your personal data, and we do not share it with advertisers, data brokers, or analytics companies. We disclose personal data only:

  • to the service providers listed in Section 9, and only to the extent needed to operate the App;
  • where required by law, legal process, or a valid governmental request; and
  • in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy.

9. Third-Party Services We Rely On

  • Auth0 (Okta, Inc.) — hosts your account and handles sign-in and registration.
  • Microsoft Azure — hosts the single function that deletes your account on request.
  • Open Food Facts — provides product data for scanned barcodes.
  • USDA FoodData Central — provides nutrition data for food searches.
  • Fitbit (Google LLC) — optional; provides your activity, sleep, step, and weight records if you connect it.
  • Apple Health — optional; provides workouts, sleep, steps, and body weight on your device, on iOS only.

The App also displays a small number of our own promotional links. These are plain hyperlinks to our own or a sponsor's website. There is no third-party advertising network in the App, no advertising identifier is read, and no impression or click information is transmitted to us or anyone else. Opening one of those links takes you to a site governed by its own privacy policy.

10. Data Retention

  • Account data: retained by our authentication provider until you delete your account, at which point the account record and the profile details attached to it are deleted.
  • On-device data: retained on your device until you delete your account in the App, clear the App's data, or uninstall the App. We hold no copy and therefore retain nothing after that.
  • Support correspondence: retained for as long as needed to resolve your request and to keep a record of it, then deleted.

11. Security

  • The on-device database is encrypted at rest using SQLCipher.
  • Integration tokens (for example, your Fitbit authorization) are held in the platform's secure storage — the iOS Keychain or the Android Keystore.
  • All network requests use HTTPS.
  • Sign-in is handled by our authentication provider's hosted login page; the App never stores your password.

No system is perfectly secure. Because your wellness data lives on your device, protecting your device with a passcode or biometric lock is an important part of protecting that data.

12. International Transfers

We are based in the United States, and the service providers listed in Section 9 may process account data in the United States and other countries. Where required, transfers out of the EEA or UK rely on the European Commission's Standard Contractual Clauses or another approved safeguard.

13. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to lodge a complaint with your local supervisory authority.

Because your wellness data is stored only on your device, you already have direct and complete access to it, and deleting it does not require our involvement. For the account data held by our authentication provider, contact us using the details in Section 20, or delete your account as described in Section 14. We will respond within the time required by applicable law.

14. Deleting Your Account and Data

You can delete your account and all of its data at any time:

  • In the App: go to More → Profile and tap Delete My Account. This permanently deletes your account (including your email address, name, date of birth, and sex at birth) from our authentication provider and erases the encrypted database on your device.
  • Without the App: visit https://www.asyouwishsoftware.com/yawideleteaccount or email us at support@asyouwishsoftware.com and we will delete your account for you.

Deletion is permanent and cannot be undone. We retain nothing after it completes, other than any support correspondence you sent us.

15. Children and Minimum Age

YAWI is intended for adults. You must be at least 18 years old to create an account, and registration is refused where the date of birth provided indicates an age below 18. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account, contact us at support@asyouwishsoftware.com and we will delete it.

16. Advertising, Analytics, and Tracking

The App contains no third-party advertising network, no analytics software development kit, and no crash-reporting service that transmits data to us. We do not read the Apple advertising identifier (IDFA) or the Android advertising ID, we do not track you across apps or websites owned by other companies, and we do not build advertising profiles. Diagnostic logs are written to your device only and are never uploaded.

17. Notifications and Device Permissions

  • Notifications: reminders are scheduled and delivered entirely on your device. There is no push server, and no notification content leaves your device.
  • Camera: used only to scan product barcodes. Images are processed on your device and are neither saved nor transmitted.
  • Apple Health / Fitbit: accessed only after you explicitly connect them, and only for the categories described in Section 4.

You can withdraw any of these permissions at any time in your device settings; the rest of the App will continue to work.

18. Automated Decision-Making

The App generates encouraging messages ("Glimmers") from the entries stored on your device. This happens entirely on your device, produces no legal or similarly significant effect, and is not used to make decisions about you. We have no visibility into it.

19. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last Updated" date above, and for material changes we will provide a more prominent notice in the App or by email. If a future release of YAWI begins transmitting wellness data off your device, we will update this Policy and the App's store privacy disclosures before that release ships.

20. Contact

As You Wish Software, Inc.
Email: support@asyouwishsoftware.com
Web: https://yawi.app

21. Supplemental California Notice

Categories of personal information collected in the last 12 months: identifiers (name, email address) and one category of protected-classification characteristic (date of birth and sex at birth), all collected solely to create and operate your account. We do not collect geolocation, biometric information, or commercial information, and health and wellness information is not collected because it does not leave your device.

We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes requiring an opt-out. We do not knowingly sell or share the personal information of consumers under 16. You may exercise your rights to know, delete, and correct by emailing support@asyouwishsoftware.com, and we will not discriminate against you for doing so.

22. Not a Medical or HIPAA-Covered Service

YAWI provides general wellness tracking only. It is not a medical device, and it does not diagnose, treat, cure, or prevent any medical condition. It is not a substitute for professional medical care — always consult a qualified healthcare professional for medical advice, diagnosis, or treatment. We are not a covered entity or a business associate under HIPAA.