Renovatio has no server.

Renovatio is a personal analytics app. It reads records you already keep — habits, sleep and heart-rate variability, spending, investments, calendar, location, weather — and reassembles them on your phone. This page states, as precisely as we can, what that means for your data.

Personal data never leaves your own devices

There is no Renovatio account, no sign-in, and no server that Renovatio talks to. Every join, every calculation, and every summary happens on your iPhone. Nothing you record — habits, health figures, spending, location, calendar entries — is sent to us or to anyone else. The two places your records can live outside the phone are both yours: a data folder you choose, which may be in iCloud Drive, and a Google Sheet you already keep. Both are described below.

Summaries and recognition happen on the device

The written briefings and answers in C.A.R.L.O.S. are produced by Apple's on-device foundation model, running locally. No API key, no request, and no piece of your data is sent to a third-party model provider to generate them. Spoken notes are transcribed with on-device speech recognition only, and the app does not fall back to a server when that is unavailable. Photographs are labelled and made searchable, and receipts are read, by Apple's on-device Vision framework and a model that ships inside the app.

Apple Health, Calendar and Photos

With your permission, the app reads from Apple Health: sleep, workouts, heart rate, heart-rate variability, resting heart rate, steps, distance, active energy, VO2 max, body weight, body and wrist temperature, and running metrics. It never writes to Health. What it reads is shown in the app and copied into your data folder, so that the record can be rebuilt from it; it is not sent to us or to any third party, sold, or used for advertising.

It also reads, with your permission, today's calendar events and your photo library, to place them on the days they belong to. It writes to neither. You can change or withdraw each permission at any time in the Settings app or, for Health, in the Health app.

Network access is read-only, fixed, and off by default

The app's only network capability is a read-only connection to a compiled-in list of hosts: Open-Meteo for weather, and Intervals.icu for training records you have connected. It sends no personal data and makes no write request. The Intervals.icu key you enter is kept in this iPhone's keychain and is not synced to other devices. The capability is switched off until you turn it on, and every request is logged in the app.

The data folder and iCloud Drive

The app reads its records from one folder that you choose on the phone, and writes back to it: records it has fetched or read from Health, habit answers waiting to go into your sheet, and the backups made by "Back up now", including voice notes. The app has no iCloud code and no iCloud entitlement. If you choose a folder in iCloud Drive, iOS keeps it in step with your other devices, and the files are held in your Apple account under Apple's terms and your own iCloud settings, including Advanced Data Protection if you have turned it on. We have no access to that folder. If you choose a folder that is only on the phone, nothing is synced.

Google user data

The daily habit record is a Google Sheet. The iPhone app never connects to Google. The Renovatio tools on your Mac do, after you sign in with Google and grant access to Google Sheets. They use that access for two things only: reading the rows of the one sheet they are set up for, and writing into that sheet the habit answers you entered in the app. They do not open any other spreadsheet.

The sign-in token is stored on your Mac. What is read from the sheet goes into your data folder so the app can show it. None of it is sent to us or to any third party, sold, used for advertising, or used to develop, improve or train AI or machine-learning models. No person reads it except you. Renovatio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove the access at any time from your Google Account's third-party access page; deleting the token file on the Mac stops these tools using it.

What we don't collect

The app runs no analytics on your usage, collects no crash reports containing personal data, and has no advertising or tracking of any kind. There is nothing for us to sell, because there is nothing that reaches us.

Your data, your device

Deleting the app deletes what it keeps on the phone. Files in your data folder stay where you put them — in iCloud Drive and on your Mac, if that is where the folder is — until you delete them, and your Google Sheet stays in your Google account. There is no Renovatio account to close and no copy on any server of ours to request deletion of.

The website's contact form

This section is about renovatio.app, not the app. The contact form asks for your name, email address and a message. When you send it, the site passes those three things to us as one email to eduardo@renovatio.app, so that we can read and answer it. The site does not store them, and the form collects nothing else. The site is hosted by Cloudflare, and our email provider, Namecheap Private Email, delivers the message. The email stays in our mailbox for as long as the conversation needs it. You can ask us at any time to delete it. The legal basis is Art. 6(1)(b) or (f) GDPR: answering a request you chose to send.

To keep out automated spam, the page carries a signed time stamp, and the site checks each message against known spam patterns before passing it on. Neither stores anything or sets a cookie. If the form shows a Cloudflare Turnstile check, Cloudflare also receives your IP address and technical details of your browser for that check alone; it sets no cookies. The legal basis is Art. 6(1)(f) GDPR: keeping the form usable and free of abuse.

Website analytics

This section is about renovatio.app and hq.renovatio.app, not the app. With your consent, the website uses Google Analytics 4 to count visits and see which pages are read. On your first visit, a notice asks whether you accept. Until you press "Accept", no Analytics code loads and nothing is sent to Google. If you accept, Google Analytics sets cookies (named _ga and _ga_…) and sends Google the pages you open, the site you came from, your browser, device and approximate location, and your IP address, which Google Analytics 4 does not store. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may also be processed by Google LLC in the United States, which is certified under the EU–US Data Privacy Framework. The legal basis is your consent: Art. 6(1)(a) GDPR and § 25(1) TDDDG. Your choice is stored for twelve months in a cookie named renovatio-analytics, which both sites share, so one answer covers both.

You can withdraw or change your choice at any time. Withdrawing here applies to both sites and deletes the Analytics cookies.

Change analytics choice

Changes to this policy

If this changes — for instance if a future version adds an optional, clearly-disclosed sync feature — this page will be updated to describe it before that feature ships.

Contact

Questions about this policy can be sent to eduardo@renovatio.app.