Renovatio has no server.

Last updated: 2026-09-08

Renovatio is a personal analytics app. It reads records you already keep — habits, sleep and heart-rate variability, spending, investments, calendar, location, weather — and reassembles them on your phone. This page states, as precisely as we can, what that means for your data.

Personal data never leaves the device

There is no account, no sign-in, and no server that Renovatio talks to. Every join, every calculation, and every summary happens on your iPhone. Nothing you record — habits, health figures, spending, location, calendar entries — is transmitted anywhere by the app.

Summaries are generated on-device

The written briefings in C.A.R.L.O.S. are produced by Apple's on-device foundation model, running locally. No API key, no request, and no piece of your data is sent to a third-party model provider to generate them.

Network access is read-only, fixed, and off by default

The app's only network capability is a read-only connection to a small, compiled-in list of hosts — the sources it's built to import from (for example a Google Sheet, Splitwise, or a wearable's API), used to pull in the records you've connected. This capability is switched off until you turn it on, and its use is logged.

What we don't collect

We don't run analytics on your usage, we don't collect crash reports containing personal data, and we have no advertising or tracking of any kind. There is nothing for us to sell, because there is nothing that reaches us.

Your data, your device

Because everything is stored locally, deleting the app deletes your data. There is no account to close and no server-side copy to request deletion of.

Changes to this policy

If this changes — for instance if a future version adds an optional, clearly-disclosed sync feature — this page will be updated to describe it before that feature ships.

Contact

Questions about this policy can be sent to eduardo@renovatio.app.