Privacy Policy

Sedona · Last updated: 5 October 2026

Sedona (“the app,” “we,” “us”) helps you log your food, stress, work, and exercise and get personalized coaching. We built Sedona to be private by default: there are no user accounts, no ads, and no analytics or tracking. This policy explains what data the app handles and where it goes.

Data stored on your device

Everything you log is stored locally on your device using Apple’s on-device database. We do not run servers that store the data you log. This includes:

Your profile: name, age, gender, height, weight, activity level, and goal
Food entries and nutrition (calories, protein, carbs, fats, fiber, sugar)
Stress levels, work hours, and notes
Exercise and workout entries, and weight history
Your meal-plan preferences: diet style, allergies, foods you avoid, how much time you have to cook, budget, meals per day, and anything you write in the free-text field about your days
The meal plans the AI generates for you

Deleting the app removes this data from your device.

Apple Health (HealthKit)

If you grant permission, Sedona reads activity and workout data from Apple Health — steps, walking/running distance, active and resting energy, exercise minutes, and workouts — so it can show your exercise alongside your nutrition and stress and improve your coaching. Sedona does not write data to Apple Health. We never use Health data for advertising or marketing, and we never sell it. You can review or revoke this access at any time in Settings › Health › Data Access & Devices.

AI features (data sent to Anthropic)

Three features use AI. Each sends data off your device only at the moment you use it, and only to Anthropic, PBC, which operates the Claude AI model that produces the result. Nothing is sent in the background.

AI Coach. The message you type, plus a brief summary of your recent nutrition, stress, work hours, exercise, and profile (age, gender, height, weight, goal).
Photo food logging (Pro). The photo of the meal you choose, so the model can estimate its calories and macros. We do not store the photo.
AI meal plans (Pro). Your calorie and macro targets, your profile, a summary of your recent days, and your meal-plan preferences — including any allergies you have entered and the free-text note about your days. Please don’t write anything in that note you would rather not have sent.

This data is used solely to produce the reply, the estimate or the plan you asked for.

We do not send your name, email, or any account identifier.
Anthropic processes this data to return a response and, per its policies, does not use data submitted through its API to train its models; it may retain content briefly for trust-and-safety purposes.
See Anthropic’s privacy policy: anthropic.com/legal/privacy.

If you never use these three features, none of this data leaves your device.

How AI requests reach Anthropic

AI requests do not travel from your phone to Anthropic directly. They pass through a small relay server we operate on Cloudflare, which attaches our API credentials and applies rate limits so the service cannot be abused. The relay does not store your requests or anything you have logged.

Alongside each request the relay receives a per-install identifier — Apple’s identifierForVendor — used only to count how many requests one installation is making. To apply the daily fair-use limit, the relay keeps that count — a number stored against the identifier, never the content of a request — for up to 48 hours, after which it is deleted automatically. The identifier is specific to this app on your device, is never shared with other developers, and is reset if you delete the app, so it cannot be used to identify you or follow you anywhere else.

If you subscribe to Sedona Pro, the app also sends Apple’s signed record of your subscription with each AI request, so the relay can confirm the subscription is genuine and apply the Pro allowance. The relay checks Apple’s signature and does not keep the record. It may count Pro requests against the subscription’s transaction identifier instead of the per-install identifier, kept for the same 48 hours.

Cloudflare may log ordinary network metadata such as IP addresses as part of running the service.

Food search (USDA)

When you search for foods, the word(s) you type are sent to the U.S. Department of Agriculture’s FoodData Central API to look up nutrition information. The search term is not linked to your identity.

What we don’t do

No user accounts or logins
No advertising and no ad networks
No analytics, tracking, or third-party tracking SDKs
No selling or sharing of your data with data brokers
No tracking you across other apps or websites

Subscriptions

Sedona offers an optional Pro subscription handled entirely by Apple through the App Store. We do not receive or store your payment information. Subscriptions and billing are governed by Apple’s standard terms.

Children

Sedona is not directed to children and is intended for users aged 13 and older.

Your choices

Revoke Apple Health access in the iOS Settings app at any time.
Avoid sending anything to Anthropic by not using the AI Coach, photo food logging or AI meal plans. The rest of the app works entirely on your device without them.
Clear or edit your meal-plan preferences, including the free-text note, at any time in Meal Plan › Preferences.
Delete all locally stored data by deleting the app.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new “Last updated” date.

Contact

Questions about this policy? Contact us at nutritionssage@gmail.com.