Drome for iOS

Privacy Policy

Effective July 18, 2026 - updated for optional accounts, sync, and groups

Drome is local-first. With no account, everything you log stays in a local database on your device and nothing leaves it. Accounts, sync, and friend groups are opt-in - turn them on and only the data described below goes to Drome's own server. No ads, no third-party analytics, no tracking, ever.

What Drome collects

By default, nothing. With no account, Drome (bundle ID day.drome.app) collects no data and has nothing to send anywhere. It uses no third-party analytics or advertising SDKs and no crash-reporting service - true whether or not you sign in.

Accounts, sync, and friend groups are optional. If you turn them on, Drome sends the data described below to its own server, run by Jacob Stephens. There are no third parties in that path, no advertising, and no analytics on it, and none of it is ever sold or shared.

Where your data lives (no account)

Everything you enter - water logs, workouts, reading, diet check-offs, progress photos, and challenge history - is stored in a local SQLite database on your device. The Drome home-screen widget reads and writes that same on-device database; nothing about that sharing leaves your phone.

Your device backups work the way Apple designed them: if you use iCloud Backup or an encrypted local backup, Drome's data is included in that backup under your Apple account, governed by Apple's privacy policy. Without an account, Drome itself uploads nothing.

Accounts and sign-in

An account is optional and exists only to enable sync and groups. You can sign in two ways:

Sign in with Apple. Drome stores the opaque user identifier Apple issues for you. It does not receive your name, and never sees your Apple ID password.
Email code. You enter an email address and Drome emails a six-digit sign-in code through Resend, its email provider. Drome stores that email address to identify your account.

Sign-in tokens are stored on the server only as SHA-256 hashes, never in the clear.

Sync (optional)

When you turn sync on, the events you log - the same append-only journal the app keeps locally (water, workouts, reading, diet check-offs, and markers that a task was completed) plus your challenge settings - are sent to and stored on Drome's server, so your history is backed up and available on your other devices. The server database is continuously replicated to encrypted object storage (Cloudflare R2) so it survives a server failure.

Progress photos are never uploaded. The app strips any photo reference before syncing and the server stores none, so sync records only that you completed the photo task, never the image or a link to it.

Groups (optional)

If you create or join a friend group, the other members can see only the display name you choose for that group, how far along you are (day number and current run), and whether you have finished each of today's tasks. They cannot see your progress photos, your workout or reading notes, your diet, any other challenge, your email, or your Apple identifier. The name you show is per-group, and your identity in one group cannot be linked to you in another. In-app nudges record only who nudged whom - never any message text.

Photos

Progress photos you take or attach in Drome are stored on your device only. Drome does not upload them anywhere - including when sync is on - and accesses only the photos you explicitly choose.

Export and backup

Drome can export your data on request. Exports are user-initiated: the file is created on your device and goes only where you choose to send or save it. Once you share an export, that copy is governed by whatever service you shared it to.

Data deletion

Deleting the app removes all of Drome's local data from your device (aside from copies in device backups or exports you created yourself). If you created an account, you can delete it from within the app; deleting your account removes your account, synced events, group memberships, and sessions from the server. If you never signed in, there is nothing on any server to delete.

Children

Drome is not directed at children and collects no data from anyone, including children, who does not create an account.

Changes to this policy

This policy is updated before any change to how Drome handles your data takes effect, and material changes are called out in the App Store release notes. The current policy always lives at drome.day/privacy.

Contact

Questions about this policy: email jacob@stephens.page or open an issue at github.com/JacobStephens2/drome/issues.