Privacy Policy
In short. Most of what you record in Naked lives on your iPhone. When you have an account, a copy is backed up to our cloud database so it isn't lost, and you can turn that off. If you allow AI features, what you share in them is sent to a third-party AI provider to write replies. We record how the app is used, never what you write or log, so we can fix problems and improve it. We don't sell your data, show ads, or track you across other apps and websites.
What we collect, and why
Your account. A random account ID, and either the phone number you sign in with or the identifier Sign in with Apple gives us. Your phone number is used to send sign-in codes (through Twilio) and to recognise your account. If you use Sign in with Apple, we don't keep your email address.
What you record. Mood, sleep, energy, cycle and period, symptoms, pregnancy, postpartum and menopause details, intimacy and fertility logs, feeding, food (including calories and macros when you record them, and your current and goal weight if you enter them), check-in answers, Talk conversations, and things you tell Naked about your life. This is stored on your iPhone. While you have an account and backup is on, a copy is sent over an encrypted connection to our database (hosted by Supabase), linked to your account, so it can be restored. You can turn backup off in Profile; doing so deletes the backed-up copy.
Apple Health. With your permission, Naked reads (and never writes) data such as sleep, steps, activity and workouts. It is used only to show you your own patterns and is backed up with the rest of your records. Health data is never used for advertising, never sold, and never shared except as described under AI features, when you allow them.
AI features. Only with your permission. When you use Talk, the conversation in the Daily Check-In, explanations in Insights, or food photo recognition (which also estimates calories and macros for the meal, as an estimate you can change), the message or photo you send and relevant context — for example recent mood, sleep, energy, cycle phase, and notes from earlier conversations — is sent from our server to a third-party AI provider, which generates the response. Our server doesn't keep a copy of these requests, and doesn't send the provider your phone number, email or account details. Under the provider's terms with us, this data isn't used to train its models, and the provider may retain requests and responses, including food photos, for up to 30 days to detect abuse before deleting them. You can turn AI features off in Profile at any time, and Naked keeps working without them.
Girl Talk. Posts and replies are shown to other members anonymously, under a randomly assigned name. They are stored on our servers with a one-way code that links them to your account, so you can manage and delete them and so we can act on abuse. Before anything is posted, its text is checked by an automated moderation service to screen out abuse; those checks aren't retained. Reports you make are recorded.
Your Circle. If you use Your Circle, the people you invite see your first name, your profile photo if you add one, and the updates you choose to post: how you're feeling, anything you write, what you need, and any of your logs you choose to share with them. Updates disappear after 48 hours. We keep a short history of what you shared (the day, the feeling word and who it went to, up to your last 30 updates) so your friends can see how you've been lately. When a friend taps "Want to talk?", "Want to call?" or "I'm here", or reacts to your update, you get a notification and a card in the app; those requests expire after 24 hours. Circle doesn't include private messaging. Removing someone from your Circle removes what they could see.
Sharing a Snapshot. If you share a Snapshot, we create a private link containing only what you put in it (how you're feeling, a little context and what you need) and your first name. Anyone with the link can open it, and it expires after 30 days. It never includes your health data or your account details.
Your trusted person. If you add a trusted person, we keep their name and phone number so we can text them (through Twilio) when you choose to let them know you could use some support. The text contains only your first name and a fixed sentence, never what you wrote, your mood or anything you logged.
How the app is used. We record events about how the app is used, such as which screens are opened, which features are used, when something fails to load, and how long our server takes to respond, along with your account ID, the app version, your iPhone model and iOS version. We use PostHog for this, which also estimates your rough location (country and region) from your IP address. On the welcome, sign-up and free-trial screens only, we may record how you move through the screen to find where people get stuck, with text you type hidden. These events never include what you write or log: no health data, check-in answers, Talk or Girl Talk messages, or phone numbers. Some of these events are also stored in our Supabase database. When the app crashes, freezes or is closed by iOS, it sends a technical crash report to PostHog: where in the app's code the problem happened, the type of error, the app version, your iPhone model and iOS version, and your account ID. Crash reports never include what you write or log. If you've chosen to share analytics with app developers in your iPhone's settings, Apple also sends us crash reports.
Notifications. A device token from Apple, used only to deliver the notifications you turn on.
Support. If you email us, we keep the conversation so we can help you.
What we don't do
- We don't sell or rent your personal data.
- We don't show ads or use your data for advertising.
- We don't track you across other companies' apps or websites.
Who processes data for us
We use a small number of service providers, each only to provide their service to us: Vercel (runs our server), Upstash (stores accounts, Girl Talk, Your Circle, Snapshots and your trusted person), Supabase (the backup database and app usage events), a third-party AI provider (AI features and Girl Talk moderation), PostHog (app usage analytics and crash reports), Twilio (sign-in codes and texts to your trusted person), and Apple (Sign in with Apple, payments, notifications, crash reports and Apple Health).
Keeping and deleting your data
We keep your data while you have an account. In the app, go to Profile → Delete account & data. This deletes your account, your cloud backup, the app usage events stored with it, your Girl Talk posts and replies, your trusted person, and everything in Your Circle (you're removed from your friends' Circles too) from our servers, and erases Naked's data on your iPhone. Snapshot links you've shared stay open until they expire. Usage analytics held by PostHog are linked to your account ID and are deleted on request: email us. If you subscribe, billing is handled by Apple and continues until you cancel in your iPhone's Settings. You can also ask us to delete your data by emailing us.
Security
Data moves between the app and our servers over encrypted connections. On your iPhone, Naked's data is protected by iOS data protection, and you can add a Face ID lock in Profile.
Age
Naked is for adults 18 and over. We don't knowingly collect data from anyone under 18.
Your choices
You can turn off AI features, backup and notifications, and change Apple Health access, at any time. You can delete your account in the app, or email us to ask what we hold about you or to delete it.
Changes
If this policy changes, we'll update this page and its effective date, and tell you in the app when a change affects how your data is used.