Aplomb is built so that we could not read your data even if we wanted
to. There is no account, no sign-up, and no server operated by us.
What the app stores
Your consent record, onboarding answers and preferences
Your episodes, guided sessions and their angle-compliance summaries
Your symptom check-ins and any notes you write for your clinician
All of it is stored on your iPhone with iOS file protection. If you are
signed into iCloud, the same data syncs through your own iCloud private
database, so it follows you to a new phone. That database belongs to
your Apple ID; we have no access to it.
What leaves your phone
Purchases are handled entirely by the App Store. We never see payment details
iCloud sync is between your device and your own iCloud, encrypted in transit
Nothing else. The app sends no analytics, runs no advertising, and contacts no server of ours. The recorded voice is bundled with the app and plays offline
What we never do
No selling or sharing of data — there is nothing on our side to sell
No advertising or tracking of any kind, in the app or on this site
No reading of your health entries — technically impossible from where we sit
Your controls
Export: Settings → Export my data gives you everything as a JSON file, and the diary exports a clinician-ready PDF
Erase: Settings → Erase everything deletes your data from the iPhone and from your iCloud private database. Purchases stay with your Apple ID
Deleting the app removes all local data; iCloud copies are removed with Erase everything or via iOS iCloud settings