Achilles Privacy Policy

Effective October 13, 2026

Achilles is a personal planner for your day, health habits, money and studies. This policy explains what Achilles keeps, where it keeps it, and the few times anything leaves your device. It applies to the Achilles app published by Arjun Potluri ("we") on the App Store.

The short version

• No account. You never sign up, and we never see who you are.
• Your data stays on your device. What you enter in Achilles is stored on your iPhone, not on our servers. We don't have servers that receive it.
• We don't collect, sell or share your data. No ads, no analytics, no tracking, and no third-party code that does any of these.
• A few things go out, and only for features you use: news headlines are downloaded for your topics, and a topic you name yourself is searched on Google News; events you add to Apple Calendar sync through your calendar account; and your device's backups include most of Achilles' data.

What Achilles keeps, and where

Everything below is stored only on your device, in Achilles' own storage, protected by iOS file encryption ("data protection"), so it can't be read while your device is locked.

• What you enter: your answers during setup (such as your goals, work hours, fitness level, injuries, diet and allergies), reminders and priorities, workouts, sleep, food and water, expenses, money you received, bills and budgets, topics, notes and in-app calendars, and your settings.
• Apple Health data, if you connect it: Achilles can read workouts, sleep, water, food that other apps saved, steps, heart rate, resting heart rate, heart rate variability, breathing rate, blood oxygen, weight, active energy and distances. You choose what it may read in iPhone Settings › Privacy & Security › Health, and you can turn it off there at any time. Achilles never writes to Apple Health, never sends Health data anywhere, and never uses it for advertising. Health entries are kept in their own storage, which Achilles marks to stay out of iCloud and computer backups; after a restore, Achilles reads them from Apple Health again.
• Purchases you choose to log automatically: if you set up the optional Shortcuts automations, iOS hands Achilles the text of your Wallet purchase notifications and, for the email automation, of each email notification it sees (the sender's name, the subject and the start of the email, as your Mail or Gmail notification shows them). Achilles adds purchases, money you received and payments you sent on your device. Unless you turn on the Daily Brief, it keeps nothing from other emails. A short activity log of these runs stays on your device for 14 days and doesn't keep the text of emails.
• Daily Brief (optional, off until you turn it on): with it on, Achilles keeps the sender's name, the subject and the start of each email notification the email automation hands it, on your device for 48 hours, to show your most important emails from the last day at the top of Today. Sign-in codes and password-reset emails are never kept. Where Apple Intelligence is on, the one-line summaries are written on your device by Apple's on-device model. Nothing from your email is sent to us or anyone else. Turning the Daily Brief off, or Delete all data, deletes everything it kept.
• Gym photos, if you scan a gym: when you use Scan this gym, you take photos or choose them from your library. Achilles reads them on your device to find the equipment (Apple's Vision reads machine labels, and where Apple Intelligence is on, Apple's on-device model looks at the photo), then lets them go: the photos aren't saved or sent anywhere. Achilles asks for the camera only when you tap Take a photo; choosing photos uses iOS's photo picker, which gives Achilles only the photos you pick. What it keeps is your workout and the equipment you confirmed.

Things that leave your device

• News for your topics. Achilles downloads headlines from public news sites for the topics you choose, and for a topic you name yourself it searches Google News for that name. These requests contain nothing about you except the topic name and what any internet request carries (such as your IP address). They use no cookies or account. You can turn news off in Settings, which also deletes the saved headlines. Achilles shows each story's headline, the site's name and when it was published; tapping one opens the story on the publisher's website in your browser, under that site's own privacy policy.
• Apple Calendar. If you allow calendar access, Achilles shows your events, keeps its gym sessions in its own "Achilles" calendar, and saves events you add or change in Achilles to your calendars. Those events sync through your calendar account (such as iCloud or Google) under that provider's terms, like any event.
• Canvas, if you connect it. You paste your Canvas calendar-feed link into Achilles, which checks it and hands it to Apple Calendar to subscribe. Apple Calendar then downloads that feed from your school's Canvas site and keeps it up to date; Achilles doesn't keep the link and reads that calendar like your others. Anyone with the link can see your course calendar, so Achilles shows only its start.
• Ready-made automations. If you tap Turn on automatic logging or Turn on email reading, the Shortcuts app downloads the ready-made automation from Apple's iCloud, under Apple's terms. The automation contains no data about you, and Achilles isn't part of that download.
• Backups. iCloud Backup and computer backups include Achilles' data, as they do other apps' data, except Apple Health entries and a few temporary files. Backups are handled by Apple (or by your computer) under their terms.
• Exports you make. Settings › Export my data creates one file, locked with a password you choose, with your entries and settings. It goes wherever you save it, and nobody can open it without the password.
• Siri and Shortcuts. When you use Siri to add something, Apple processes your request under Apple's privacy policy and passes Achilles the result, such as an amount and a place.
• Crash reports. If you turn on sharing with app developers in iPhone Settings, Apple may send us crash reports. They don't include what you entered in Achilles.
• Emails you send us. Settings › Send feedback or report a problem opens an email to us in your own mail app, with your Achilles version, iOS version and iPhone model filled in. Nothing else from Achilles goes with it, and nothing is sent until you send it. We use your email only to answer you (see the support page for how long we keep it).

On-device intelligence

Two features use Apple Intelligence on your device: the one-line summaries in the Daily Brief, and recognizing equipment in gym photos. Both run on your device with Apple's on-device model; nothing is sent to us or to another AI service, and your health, calendar and money data is never given to it.

Notifications

Reminders and alerts are scheduled on your device by Achilles itself; nothing is sent through a push service. Spending notifications never show amounts, stores or how your budget stands. With Private mode on, all of Achilles' notifications are generic.

How long data is kept, and deleting it

• Entries you delete are removed permanently after 30 days. The automation activity log keeps only the last 14 days. Daily numbers read from Apple Health (such as steps) are kept until you delete all data.
• Delete all data in Settings removes everything Achilles stores on the device. It doesn't change Apple Health or your Apple Calendar.
• Deleting the app removes its data from your device. Copies in your backups follow your backup settings, and exports stay wherever you saved them.
• Because we never receive your data, we can't see, export or delete it for you; the app gives you those controls (Export my data, Import an export, Delete all data). If you have questions about your data, contact us.

Consumer health data

Some of what you enter or connect may be health data under laws such as Washington's My Health My Data Act. Achilles keeps it on your device, as described above: we never receive it, and we don't collect, share or sell it. You can see and change it in the app at any time, and Settings › Data on this device › Delete all data removes it. If you have questions about it, contact us.

Children

Achilles isn't directed to children under 13, and we don't knowingly collect data from children. Because the app doesn't send us your data, we receive nothing from anyone.

Changes

If this policy changes, we'll update this page and its effective date, and describe significant changes in the app's release notes.

Contact

Arjun Potluri · achillesapp.help@gmail.com