Privacy Policy
Last updated: 6 September 2026
CarveOS is a health app. This policy explains what data CarveOS handles. The short version: what you log stays on your device. CarveOS has an account so it can keep you signed in; it does not upload your log, and it contains no advertising and no cross-app or cross-site tracking. It does use one analytics service, PostHog, described below.
What CarveOS stores on your device
CarveOS stores your app preferences, and — as features arrive — what you log in the app. All of it is written to the app's own storage on your device, and none of it is uploaded. Signing in does not sync it.
Your account
CarveOS requires an account, created with Sign in with Apple or Sign in with Google. Either way the provider gives us two things: an identifier that stands for you within our apps, and an email address — your real one or, with Apple's Hide My Email, a private relay address Apple manages. We never see your Apple or Google password. Accounts made with different providers are joined only when their verified email addresses match; otherwise they are separate accounts.
On our server we store that identifier, that email address, and session records — which app you signed in to, an identifier for the device, and timestamps — so you stay signed in and can see and revoke your sessions. That is the complete list; your log is not on it.
What we do not do
- We do not receive, store or transmit what you log in the app.
- We do not sell, rent or share your data with anyone.
- We do not track you across other companies' apps or websites, build an advertising profile of you, or serve advertising.
- We use two third-party SDKs that receive data: PostHog, limited to the events listed under “Product analytics” above, and Firebase Crashlytics, which receives the crash reports described there. We do not use an advertising SDK.
Product analytics
CarveOS uses PostHog for product analytics. It records how the app is used so we can find what is broken and what is confusing. It is deliberately narrow, and this list is exhaustive:
- Screen views — the name of the screen you opened, e.g. "today" or "settings".
- Sign-in outcomes — that a sign-in succeeded or failed, and which provider (Apple or Google) was used. Cancelling a sign-in sheet records nothing.
- Error reports — the type of an error and where in the app it happened.
- Crash reports — if the app crashes, the technical report of where it stopped: the stack, your device model and its iOS version. No part of your data is in it.
- Every event carries the app's name, so events from CarveOS can be told from those of our other apps.
What analytics never receives: your profile fields, your body measurements, or any answer you gave during setup. Those values are not sent to PostHog by any code path in the app.
These events are not linked to you. The app never sends your user id, your email address or your name to PostHog, and never asks it to build a profile of you. PostHog does receive the technical information any network request carries, including your IP address, and it acts as our processor under our instructions. It does not sell your data or use it for advertising, and we do not combine these events with data from other companies' apps or websites.
Deleting your data
What is stored on your device goes when you delete the app. Your account, its email address and its session records are held on our server and are not removed by deleting the app.
If your device backs up to iCloud, your CarveOS data may be included in that backup. That backup is between you and Apple under Apple's terms; we have no access to it.
Children
CarveOS is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes, the date at the top of this page changes with it. If CarveOS ever gains a feature that sends your log anywhere, this policy will say so plainly before that feature ships.
Contact
Questions about this policy? Write to resources@thetinyapp.com.