Privacy Policy

1. Who we are

Yoke is an iPhone app for tracking protein, water and steps. It is operated by Milo Conrad, an individual based in the United Kingdom, who is the data controller for the limited information described in this policy (“Yoke”, “we”, “us”).

Contact: [email protected]

2. Scope

This policy covers the Yoke iOS app and the small server Yoke uses to request protein estimates. It doesn’t cover Apple’s App Store, your iPhone’s operating system, or the services of the providers listed in section 9, which have their own privacy policies.

3. Information kept on your iPhone

Yoke has no account system and no remote database of your meals or history. The following is stored only on your iPhone, inside Yoke:

• your bodyweight, chosen unit, goal, and calculated daily protein target, including earlier targets;
• your protein logs (amount, time, how each was logged, the estimate’s confidence and whether you edited it);
• meal descriptions you type, which are saved with the log they belong to;
• water logs (for a drink you added with Not water?, also its estimated water and the short name you confirmed);
• your daily step count, copied from Apple Health so Yoke can show it (see section 7);
• your reminder settings and when reminders are scheduled;
• whether you’ve allowed AI estimates.

Yoke does not sync this information to iCloud or to any Yoke server. Reminders are local notifications created on your iPhone with general wording; no reminder content is sent from a server.

4. Information sent for AI estimates

Yoke estimates protein, and the approximate water in drinks you describe, using artificial intelligence. The first time you start an estimate, Yoke explains what will be sent and asks for your permission. Nothing is sent for estimation unless you allow it. If you accepted an earlier version of this permission, Yoke asks again the first time you use Not water?, because that feature sends a new kind of content. If you choose “Not Now”, water, steps and reminders keep working, and you can still add water by amount.

When you request an estimate, Yoke sends only what you submit for that meal or drink:

• a typed meal description;
• a meal photo, with any optional note you add;
• the text of a voice description, after you have reviewed it and tapped Estimate Protein;
• a typed drink description, when you use Not water? to estimate the water in a drink.

This content travels over an encrypted connection to Yoke’s server, which runs on Cloudflare, and is passed to OpenAI to produce the estimate. Yoke’s server does not store it and does not write it to logs. The estimate is returned to your iPhone, where you can review and adjust it before saving.

You can withdraw permission at any time in Yoke under About & Legal → Allow AI estimates. After that, nothing more is sent for estimation. Withdrawing doesn’t affect information that has already been sent.

5. Meal photos

• Photos are only used when you take or choose one for an estimate. Yoke asks for camera access when you first use the camera.
• To let you pick an existing photo, Yoke shows your most recent photos inside the app. It asks for access to your Photos only when you open Recent Photos, and it works with limited access, in which case it shows only the photos you chose to share. Small previews are shown on your iPhone so you can choose; only the photo you tap is used, and it is sent only when you ask for an estimate.
• Yoke never saves to, edits or deletes anything in your photo library.
• Before sending, Yoke resizes the photo and re-encodes it as a new image. This removes the original file’s embedded information, such as location (GPS), camera details and other EXIF data.
• Yoke doesn’t save the photo on your iPhone and doesn’t keep it on its server. OpenAI’s handling is described in section 12.

6. Voice and speech

• Voice logging uses Apple’s speech recognition to turn what you say into text. Yoke asks for microphone and speech-recognition permission the first time you use it.
• Where your iPhone supports it, recognition happens on the device. Otherwise, Apple may process the audio on its servers under Apple’s own privacy terms.
• Yoke never sends your voice recording to Yoke’s server or to OpenAI, and doesn’t save audio. Only the transcript text you confirm is sent, as described in section 4. The transcript isn’t saved with your log.

7. Apple Health

• If you connect Apple Health, Yoke asks for permission to read your steps, walking and running distance, active energy and flights climbed, to show your daily activity in Steps. Yoke never writes to Apple Health.
• The activity data Yoke reads from Apple Health, including the daily step count Yoke saves on your iPhone so it can show it, stays on your iPhone. It is never sent to Yoke’s server or to OpenAI, never used for advertising or marketing, and never sold or shared.
• You can change or remove access at any time in the Health app or in iPhone Settings.

8. Subscriptions

• Subscriptions are sold and billed by Apple. Yoke never receives your payment details.
• Your iPhone checks your subscription with Apple. When you request an AI estimate, Yoke also sends Apple’s signed proof of your subscription to Yoke’s server, which checks it with Apple’s verification tools so that only subscribers can use AI estimates.
• The server doesn’t store or log that proof or the transaction identifiers in it. It issues a short-lived session pass (valid for up to 12 hours) that stays in your iPhone’s memory. The pass contains a pseudonymous code, derived one-way from your subscription, which the server uses only to limit how many requests can be made in a short period. That code isn’t logged or kept in a database, is held only briefly by the rate limiter (about a minute), and isn’t sent to OpenAI. Your subscription proof is still processed by Yoke’s server each time a new session pass is issued.

9. Service providers

• OpenAI provides the AI model that produces protein estimates. It receives the content described in section 4, but no name, email, account or subscription identifier from Yoke. Yoke’s OpenAI account is not opted in to sharing API inputs or outputs with OpenAI to train or improve its models. See OpenAI’s privacy policy at openai.com/policies/privacy-policy.
• Cloudflare hosts Yoke’s server and this website. As Yoke’s infrastructure provider, Cloudflare may process network information such as your IP address and request details in order to deliver and protect the service. See cloudflare.com/privacypolicy.
• Apple provides the App Store, subscription billing, Apple Health, speech recognition and notifications. See apple.com/legal/privacy.

We only share information with these providers for the purposes described in this policy, and we use providers that are bound by their own terms and data protection commitments to protect the information they process for us in a way that is consistent with this policy.

10. Logs and diagnostics

Yoke doesn’t include analytics or crash-reporting tools from other companies. For each request, Yoke’s server produces a short operational record limited to technical details: which service was used, whether it succeeded, how long it took, whether the session pass was valid, and the AI model and amount of processing used. It never includes your meal descriptions, photos, transcripts, estimates, subscription details, session pass or IP address. Cloudflare’s log storage for Yoke’s server (Workers Logs) is turned off and no log export (Logpush) is configured, so Yoke doesn’t keep these records, and Yoke doesn’t keep logs containing request content. Cloudflare may still keep its own technical records as described in its privacy policy.

If you choose to share app diagnostics with developers through your iPhone’s settings, Apple provides that information to us in accordance with Apple’s terms.

11. Why we use information, and our legal bases

• Producing AI protein estimates from the content you submit. Legal basis: your consent, which you give in the app before the first estimate and can withdraw at any time. Because meal information could reveal something about your health or diet, we treat it with care and rely on your explicit consent.
• Checking your subscription and preventing abuse of the AI service (for example rate limiting). Legal basis: performing our contract with you and our legitimate interest in keeping the service available and secure.
• Operating and securing the service, including network processing by Cloudflare. Legal basis: our legitimate interests.

Information kept only on your iPhone is used by the app on your device to show your progress, streaks and reminders; it isn’t sent to us.

12. How long information is kept

• On your iPhone: until you delete Yoke (see section 14).
• Yoke’s server: AI content and subscription proof are processed only while handling your request and aren’t stored. The pseudonymous rate-limit code is held only briefly, for about a minute. Session passes expire within 12 hours.
• OpenAI: Yoke asks OpenAI not to store requests as saved responses. OpenAI may still keep the content of API requests for up to 30 days to monitor for abuse and misuse, after which it is deleted unless OpenAI is legally required to keep it longer.
• Cloudflare and Apple: according to their own policies.

13. No advertising, tracking or sale

Yoke has no advertising, no advertising identifiers and no tracking across other companies’ apps or websites, so it doesn’t ask for tracking permission. We don’t sell or rent your information, share it for advertising, or give it to data brokers.

14. Deleting your information

• Yoke doesn’t currently let you delete individual logs within the app. To remove all information Yoke keeps on your iPhone, delete the Yoke app.
• Copies may remain in your iPhone or iCloud backups, which are controlled by you and Apple rather than Yoke.
• Because there are no accounts and Yoke’s server doesn’t store your content, we don’t hold a copy of your information to delete. Yoke can’t delete, on request, content that OpenAI may keep for abuse monitoring under its standard controls (see section 12).
• Deleting Yoke doesn’t remove data stored in Apple Health, which Yoke only reads. Manage that in the Health app.
• Deleting the app doesn’t cancel your subscription. Manage it in iPhone Settings → your name → Subscriptions.

15. Security

Information sent from Yoke travels over encrypted HTTPS connections. The AI provider’s access key is kept on Yoke’s server and is never included in the app. AI requests require a short-lived, signed session pass tied to a verified subscription, and are rate limited. No method of transmission or storage is completely secure, but we keep the information we handle to a minimum.

16. International processing

Our service providers may process information outside the United Kingdom, including in the United States. Where that happens, we rely on the contractual safeguards those providers offer for international transfers.

17. Your rights

Under UK data protection law, depending on the circumstances, you may have rights to access, correct or delete your personal information, to restrict or object to its use, and to data portability. Where we rely on your consent, you can withdraw it at any time; this doesn’t affect processing that already took place. Most of your information never leaves your iPhone, and because Yoke’s server doesn’t store content or identifiers, we usually won’t hold information that we can link to you. You can still contact us about any request at [email protected].

You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

18. Age requirement

Yoke is intended for adults aged 18 and over. It is not intended for children or anyone under 18, and they should not use it.

19. Health and AI disclaimer

Yoke helps you keep track of protein. It isn’t a medical device and doesn’t give medical, nutritional or dietary advice. Protein targets are general estimates, and meal estimates are generated by AI and can be inaccurate. Talk to a doctor or registered dietitian before making significant changes to your diet.

20. Changes to this policy

If we change how Yoke handles information, we’ll update this policy and its effective date. If a change significantly affects how your information is used, we’ll take reasonable steps to let you know, for example in the app update notes, and we’ll ask for your permission again where the law requires it.

21. Contact

Milo Conrad, United Kingdom
[email protected]