Privacy policy

The short version: your life data stays on your phone. Cendaya is local-first — your journal, meals, moods and health vitals are stored in a database on your device, not on our servers. We can’t read your journal, and we don’t want to.

What data does Cendaya store, and where?

Moods, journal entries, meal logs and photos, health vitals and routines are stored locally on your device (SQLite and app storage). Your profile settings — name, region, language, goals — are also stored locally. You can lock the app with Face ID or fingerprint, export everything as JSON, or delete all data from Settings at any time.

What leaves the device?

Two AI features need a server: meal photo analysis and the nightly story. When you use them, the relevant content (a meal photo, or a compact summary of the day’s entries) is sent over HTTPS to our regional AI proxy, which forwards it to the AI provider (Anthropic’s Claude) and returns the result. These requests carry no account identity, and our API keys stay on the server. Requests are routed by your region (Singapore hub, with in-country options as they become available).

What about health data?

With your permission, Cendaya reads sleep, heart rate, steps, workouts and energy burn from Apple Health (and Health Connect on Android, when available). Health data is read into local storage and is never sold, shared with advertisers, or used for anything other than showing it to you and writing your story. You can revoke access in your device settings at any time.

What about observances?

If you opt into practices such as Ramadan fasting or vegetarian days, that choice is stored as a practice, never a religion label. Observance calendars are computed on your device, and the AI only ever receives neutral derived context such as “user is fasting today”.

Analytics and tracking

This website uses privacy-friendly, cookie-free analytics (Plausible) that collect aggregate page statistics only — no personal profiles, no cross-site tracking, no advertising IDs. The app contains no third-party advertising or tracking SDKs.

Your rights

Because your data lives on your device, you already hold the practical rights that privacy laws promise: access (open the app), portability (Settings → Export data), and erasure (Settings → Delete all data, or delete the app). For anything else — or for rights under Singapore PDPA, Malaysia PDPA, Indonesia PDP, Thailand PDPA or similar laws in your country — email hello@cendaya.app.

Children

Cendaya is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their data.

Changes to this policy

If this policy changes materially, we’ll say so in the app and update the date at the top of this page. Questions any time: hello@cendaya.app.