Privacy

What the apps keep, and where

The short version: the phone apps work without an account, and what you do in them stays on your phone unless you connect them to the Days on Purpose web app. If you connect, the things listed below go online so they can count toward your goals, and Train on Purpose syncs your training log. When a feature needs another company, only what that feature needs is sent to them. Nothing is sold, and there’s no advertising.

Last updated 1 October 2026 · private preview

Who runs this

The apps are made and run by Xallindrome LLC (“we”, or “the maker”) for a small group of invited people.

Questions about your data: help@daysonpurpose.com.

What every app sends, even without an account

• Feature settings: each app, on Android and iPhone, asks our server, app.daysonpurpose.com, which features are switched on. It does this without an account. The server sees your IP address, as any website does, and nothing else about you.
• Scroll on Purpose’s challenge list comes from the same server, in the same way. If your phone is connected, it asks as your phone; otherwise it asks anonymously. Nothing about who asked is stored.
• Pictures and sounds: Doorway’s story pictures and audio, and Train on Purpose’s race photos, download from our content delivery network, which sees your IP address.
• Race searches in Train on Purpose go through our server — see Train on Purpose.
• Support messages work without an account — see Support messages.

On iPhone

Scroll on Purpose, Train on Purpose and Doorway also have iPhone versions. They’re in testing and not yet available. They keep and send the same things as the Android apps described below, with these differences:

• Apple Health instead of Health Connect. Scroll on Purpose reads steps and sleep; Train on Purpose saves finished workouts and, if you turn on the import, reads other apps’ workouts. Details are under each app.
• Screen Time instead of usage access. Scroll on Purpose uses Apple’s Screen Time to limit apps. Apple shows you its own app picker and gives Scroll on Purpose only a coded token for each app you choose, never its name. The app’s screen-time report is drawn by Apple on the phone, and those minutes never reach the app or us. Because the app doesn’t know the names, an entry it sends says only “Your apps” or “This app”.
• Speech: counting reps out loud, and speaking in Doorway, use Apple’s speech recogniser. The apps ask for it to work on the phone where your iPhone can. Where it can’t, Apple may process the sound on its servers, under Apple’s privacy terms. None of the apps record or keep that audio.
• Doorway’s camera challenges use Apple’s Vision on the phone instead of Google’s ML Kit. Nothing about them is sent to Google or anyone else.
• Train on Purpose backups are files you can see in the Files app, not Google Drive.
• Connecting opens Days on Purpose in a secure browser window that shares Safari’s sign-in.

What we collect, app by app

Days on Purpose (in your web browser)

• Your account: your email address, and the first name and account number Google gives us when you sign in with Google. You can also sign in by email: we send one message with a link, which works for 15 minutes, and a 6-digit code, which works for 10.
• What you add: your goals, the progress you or your connected apps record, points and milestones, and your settings. Days on Purpose also keeps a copy of these once a day you make a change, so a mistake can be undone.
• H.A.R.D. cards (if you pick them): the picture cards you choose for what a big goal means to you. Only which cards you picked is kept, with that goal. They aren’t sent to the Coach or anyone else.
• Connected phones: which apps you’ve connected, each phone’s name as the app gives it (which can include its make and model), whether it’s an Android phone or an iPhone, a random id the app made up, and when they last checked in.
• Coach (if you use it): each time frame you start, its aim and steps, whether you did them, and the one line you can add when you look back. It’s kept with your goals. See Anthropic below for what the Coach sends to write its words.
• Why: so you can see your goals anywhere, and so your apps can count toward them.

Scroll on Purpose

• Stays on your phone: the apps you limit, how long you use each app every day, your unlocks, your settings, and what you write for a writing or creative challenge.
• Sent to Days on Purpose, only if you connect it:
  • an entry for each challenge you finish: what kind it was, which goal it counts toward, the date, how much (for example your rep count), and the name of the app it unlocked (for example “Instagram”; on iPhone just “Your apps” or “This app”). For a Spotlight or creative challenge, the entry says only that you earned an unlock, with the app’s name or “Your daily budget” — never which app you focused in, or what you wrote;
  • the time you earned, your vows (kind, target, start, end and how they went), and your strictness mode;
  • on Android, a nightly marker saying whether you stayed under your budget that day — yes or no, not your minutes (the iPhone version can’t see your minutes, so it sends none);
  • text you type for the apps to use: the name you give a recorded clip, the title of a group vow and the display name you use in it, and what you’re making room for from the guided setup;
  • if you invite an accountability partner: their name and email address, so we can email them the invitation, and the events they’re told about (a vow ended early, leaving the strictest mode, an emergency pass used);
  • when you connect: your phone’s make and model, a random device id the app made up, and your time zone.
• Spotlight challenges: you earn time by spending it in one app you chose, like a language or writing app. On Android, the app reads your phone’s usage records for that app during the session, to count the minutes. On iPhone, Screen Time tells the app each time a quarter of the minutes has passed, and the app knows the chosen app only as a coded token. Either way, the minutes stay on the phone.
• Creative challenges (a writing sprint, an edit pass, a research or learning session): what you write, your notes and what you found stay on your phone. They’re never sent to us. They leave the phone only if you share or copy them yourself, with your phone’s share sheet.
• Health Connect, or Apple Health on iPhone (only if you allow it): today’s steps, for the steps challenge, and last night’s sleep, for rested mornings. They’re read on your phone when needed, and are never stored or sent. Nothing is written to them. Only an entry saying you unlocked something can reach Days on Purpose. To remove access: on Android, in Health Connect’s settings (App permissions → Scroll on Purpose) or Android Settings; on iPhone, in Settings → Privacy & Security → Health → Scroll.
• Walks stay on your phone. The walk challenge uses your location, only while the app is open or a walk you started is under way, to measure the distance. It also remembers a “home” point if you set one. Both stay on the phone and are never sent anywhere. When you finish a walk, only an entry saying you did it can reach Days on Purpose.
• Camera: clips you record are saved to your phone’s gallery and never uploaded. The app doesn’t scan your gallery: a reels vow counts clips recorded in the app, and any clips you pick yourself, whose date and length are checked on the phone.
• Microphone and motion: counting reps is optional. Motion uses the phone’s movement sensors on the phone. Counting out loud uses your phone’s own speech recogniser, set to prefer working on the phone. Depending on your phone, the recogniser’s maker (usually Google on Android, Apple on iPhone) may still process the sound. Scroll on Purpose doesn’t record or keep audio.
• Accessibility service (optional): it tells the app only which app is in front, so a pause screen can appear straight away. It doesn’t read what’s on your screen or what you type, and what it sees stays on the phone.
• Usage access (Android): used on your phone to see how long you spend in each app, and the minutes of a Spotlight. Those minutes never leave the phone.
• Screen Time (iPhone): see On iPhone.
• Other permissions (Android): showing over other apps, for the pause screen; notifications; and seeing the apps on your phone, so you can pick which to limit (that list stays on the phone). It may send you to Android’s battery settings so limits keep working in the background. Location, camera, microphone and Health Connect are asked for only if you choose the challenges that need them.

Train on Purpose

• Stays on your phone, unless you connect: everything you log. It works without an account.
• Synced to Days on Purpose, only if you connect it: your workouts, including notes, set comments and any set you flagged as painful, and workouts imported from Health Connect, Apple Health or Strava; body measurements; routines and plans; your training brief (restrictions, starting point and equipment); saved races; and your preferences. This lets your training count toward your goals and appear on your other phones.
• Pledges (if you make one): the amount, whether you marked it paid, and, for a pledge to a person, their name and a phone number or email address, picked from your contacts one at a time. Train on Purpose can’t see the rest of your contacts. Please only add someone who’s happy to be included.
• Race search: what you type (place, ZIP code or state, distance, dates, race type) goes to our server, which asks RunSignup for matching races. RunSignup gets only the search, from our server — not your IP address or who you are. If you’re connected, your searches and saved races are kept with your account. If you’re not, the search isn’t tied to an account, but like any request it appears in our server logs.
• Google Drive backup (Android, off unless you turn it on): copies your data to a folder you can see in your own Google Drive. Train on Purpose can only see the files it made there. On iPhone, backups are files in the Files app instead.
• Saving workouts to Health Connect or Apple Health (off unless you turn it on): writes each finished workout (type, start, end, title and time zone) so your other fitness apps can see it.
• Reading workouts from Health Connect or Apple Health (off unless you turn it on): reads the workouts other apps saved — runs, rides, walks, swims and strength sessions — with their type, start, end, title, time zone, distance and which app saved them, so they show in your history and count in your week. It looks back up to 30 days, only while the app is open, and never reads heart rate, routes or the workouts Train on Purpose saved itself. Imported workouts are kept like ones you logged: on your phone, and, if you’re connected, synced to Days on Purpose, where they count toward your goals. “Stop importing” removes them from the app; nothing is deleted from Health Connect or Apple Health.
• Removing Health access: turn either switch off in Train on Purpose’s Settings. On Android you can also remove access in Health Connect’s settings (App permissions → Train); on iPhone, in Settings → Privacy & Security → Health → Train.
• Strava (only if you connect it, and only with a Days on Purpose account): you sign in on Strava’s own page and allow Days on Purpose to read your activities (not ones you set to “Only You”). Our server keeps the access Strava gives it and your Strava athlete number — not your name — and uses them to read your recent activities when the app asks: each one’s name, sport, start time and time zone, elapsed and moving time, distance, average heart rate (if recorded) and its Strava link. Never routes, maps, photos or other athletes. The phone turns them into workouts in your history, which sync to Days on Purpose like your other workouts, with their sport, distance, average heart rate and Strava link. Strava workouts never count toward your goals and are never sent to an AI. Disconnecting deletes the access and athlete number from our server and removes the Strava workouts from the app and, through sync, from Days on Purpose. If you take access back on Strava’s site instead, our server deletes what it holds when Strava tells it. Deleting your account deletes it all too.
• How-to videos: thumbnails load from YouTube’s image servers, and videos play from youtube-nocookie.com. YouTube sees that your phone asked for them, and handles that under its own terms.
• Voice reps: uses your phone’s own speech recogniser, set to prefer working on the phone. Depending on your phone, the recogniser’s maker (usually Google on Android, Apple on iPhone) may still process the sound. Train on Purpose doesn’t record or keep audio.
• Imports: a FitNotes CSV file you import is read on your phone.
• AI plans, photo enhance and scheduled Instagram posting: off unless we switch them on for your account. See below for what each sends.

Doorway

• Stays on your phone: your level, bookmarks, session history, practice, and any recordings you make. Recordings are never uploaded.
• Books: the books come with the app. Where you are in each book, your bookmarks and the words you’ve met stay on your phone, and listening uses your phone’s own voice. Nothing about your reading is sent.
• When you speak: your phone’s own speech service turns your voice into words. Depending on your phone, its maker (usually Google on Android, Apple on iPhone) may process the sound online. Doorway itself doesn’t upload your audio.
• Sent to Days on Purpose, only if you connect it: your practice and story sessions — when and how long, which scenes, how each turn went, and the words the phone recognised or you typed, cut to at most 200 characters a turn.
• “Check my own words online” (off unless you turn it on): sends the words you said, and the exercise, to our server, which asks an AI (Anthropic’s Claude) whether they meant the right thing.
• Camera challenges: on iPhone, Apple’s Vision recognises what the camera sees, on the phone, and nothing about it is sent. On Android, Google’s ML Kit recognises it, on your phone. The pictures are never saved or sent. ML Kit may send Google information about your device and the app, device identifiers, and usage and diagnostic data (such as performance and error codes). Google’s ML Kit data disclosure explains what it collects.

Support messages

• When you use Send feedback in an app, it goes to our server, whether or not you’re connected. We keep your message, which app it’s about, the app version, your email address if you gave one for a reply, and your Days on Purpose account number if the app is connected. From Train on Purpose and Doorway, it includes your phone’s make and model. You can also attach diagnostics (such as your Android or iOS version, permission and sync state, and which features are on), and untick them before sending.
• They’re kept in a private inbox inside the Days on Purpose web app that only the maker can open, so we can follow up and notice problems that keep coming back.
• Support messages are kept even if you delete your account. If you want yours removed, ask — in your deletion request or any time — and the maker will delete them by hand.
• If you review an app on Google Play, Days on Purpose copies that public review (your Play name, stars and text) into the same inbox so we can reply.

This website

No analytics, cookies, trackers, or outside fonts or scripts. The hosting service keeps ordinary request logs (address, page, time). The partner and vow link pages send the code in your link to Days on Purpose only when you press their button.

Train on Purpose extras we may switch on for some people

These start off. During the preview we may switch them on for some accounts. Each one works only if your phone is connected to Days on Purpose, and sends nothing until you use it.

• AI plans: when you ask for a plan, your goal goes to our server: its title and details, the event or race and its date, your free days, session length, equipment, starting point and limits, and any notes and links you attach. Our server opens each link and reads the page’s text. It sends all of this to Anthropic (maker of Claude), which picks from the training days the app already has. Our server keeps the request for up to 2 days and the page text for up to an hour. If AI plans are off, your phone makes the plan itself and sends nothing.
• Photo enhance: the photo you pick is made smaller on your phone (without its location) and sent to our server, which sends it to OpenAI to edit. The edited picture comes back to your phone. Our server keeps your photo and the edited picture for up to 7 days, then deletes them.
• Scheduled Instagram posting: only if you connect Instagram. The share card you approve, which can include your photo, and for a feed post a caption made from the card’s own words, go to our server. At the time you choose, it posts them to your Instagram through Meta. Our server keeps the card for up to 7 days (1 day once it’s posted), and your Instagram account name and access until you disconnect. Scheduled posting stays off by default.

Off for everyone during the preview

Some features exist in the code but are switched off for everyone taking part in the preview, so none of their data is sent:

• Doorway’s AI teacher (written and spoken replies) and live voice.

If we switch either of them on, we’ll update this page and tell you before it applies to you. Live voice is described below so you know what it would do.

Who else sees your data

We use a few other companies to run the apps. Each gets only what its job needs:

• Upstash — the online database that stores everything Days on Purpose keeps, including support messages.
• Amazon Web Services — hosts the Days on Purpose web app, its server at app.daysonpurpose.com, and this website, and sees the requests your browser and apps make. An older copy of the web app on Vercel is being retired and is no longer used by the apps. Amazon Web Services also runs the content delivery network for story pictures, sounds and race photos.
• Google — sign-in (checks it’s you and tells us your email and first name), the fonts in the Days on Purpose web app (Google sees your browser ask for them), Google Drive (only if you back up Train on Purpose there), Google Play reviews, and ML Kit in Doorway on Android only (diagnostic and usage data, described above). On most Android phones Google also makes the speech recogniser the apps use.
• Apple — on iPhone: Apple Health holds the steps, sleep and workouts the apps read or write, on your phone; Screen Time runs Scroll on Purpose’s limits on your phone; Vision recognises what Doorway’s camera sees, on your phone. Apple’s speech recogniser hears you count reps or speak Greek, on the phone where it can, and otherwise on Apple’s servers. None of these send us anything beyond what’s described above.
• Resend — sends our emails: sign-in links and codes, replies to your support messages, and accountability-partner invitations. It gets the email address and the message.
• Anthropic (maker of Claude) — only when you use Doorway’s check my own words online (the exercise and the words you said), Train on Purpose AI plans if they’re on for you (your goal, notes and linked pages, above), or the Days on Purpose Coach. The Coach sends the goal’s or epic’s title; numbers worked out from your progress, such as how far along you are and how many days it moved recently; when it last moved, and when the goals under an epic last moved; which apps recorded those entries; the deadline and the days left; for an epic, its finish condition, success criteria and the focus you chose for the time frame; the next milestone’s title; and any line you wrote for the coach. If the Coach’s AI is off or unavailable, its words are written by Days on Purpose itself and nothing is sent.
• OpenAI — only for Train on Purpose photo enhance, if it’s on for you and you use it: the photo you picked.
• Meta (Instagram) — only if scheduled posting is on for you and you connect Instagram: the share card and caption you approved, posted to your account.
• RunSignup — receives Train on Purpose race searches from our server: the search only, nothing about you or your account.
• Strava — only if you connect it in Train on Purpose. Strava sees that you allowed Days on Purpose to read your activities, and our server’s requests for them. We send Strava nothing about you; we tell it when you disconnect.
• YouTube — serves Train on Purpose’s how-to thumbnails and videos.
• Health Connect — on Android phones. Scroll on Purpose reads steps and sleep, which never leave the phone. Train on Purpose writes finished workouts and, if you turn on the import, reads other apps’ workouts, which sync to Days on Purpose like your own if you’re connected.
• WHOOP — used only by the maker’s own account. People in the preview can’t connect it.

When these companies receive something, they handle it under their own privacy terms. Anthropic and OpenAI are sent requests through our own account, without your name or email.

Doorway live voice (off during the preview)

Live voice lets you talk with the story’s characters. It’s switched off for everyone in the preview. If it’s turned on later:

• Your audio goes to the Doorway voice service on Amazon Web Services in the United States. It’s kept only in memory for your turn, then dropped — never saved.
• ElevenLabs turns your speech into words and voices the characters (with its logging turned off). OpenAI runs the story, told not to store what it’s sent. Neither is told who you are.
• The words recognised from your speech (up to 200 characters a turn) are saved so a scene can pick up where you left off, then deleted automatically after 30 days.
• Deleting your Days on Purpose account deletes them too. Backups can hold a copy for up to 35 days, and a retry queue for up to 14 days.

Where it’s processed

In the United States. The Days on Purpose web app, its server and the Doorway voice service run on Amazon Web Services’ US East (Northern Virginia) region. The other companies above may process data in the United States or elsewhere under their own terms.

How long we keep it

• On your phone: until you delete it in the app, or uninstall the app.
• Your Days on Purpose account and what’s in it: until you ask us to delete it. Sign-in sessions end after 30 days. The daily copies of your goals are kept for 90 days.
• Preview research events: 90 days.
• Accountability-partner invitations: 14 days. If a partner unsubscribes, a scrambled form of their address is kept for up to three years so they aren’t emailed again.
• Support messages: until you ask us to remove them, even after your account is deleted.
• Train on Purpose extras: AI plan requests up to 2 days, photos for enhance or Instagram up to 7 days, and an Instagram connection until you disconnect, as above.
• A Strava connection: until you disconnect, take access back on Strava, or delete your account.
• Server logs: 14 days on Amazon Web Services. The retiring Vercel copy keeps its own logs for its usual period.
• Backups: Days on Purpose makes no backups of its own. Our database provider, Upstash, may keep backups; we haven’t yet confirmed for how long. Ask us and we’ll find out and tell you.

Your choices

• Connect or not. Scroll on Purpose, Train on Purpose and Doorway all work without Days on Purpose. You can disconnect in each app’s settings, or remove a phone in Days on Purpose Settings. Even unconnected, each app still asks our server which features are on, as described above.
• Permissions. You can say no to any permission; the app tells you what won’t work without it. You can change them later in Android Settings or the iPhone’s Settings app, Health Connect access in Health Connect’s own settings, and Apple Health access in Settings → Privacy & Security → Health.
• Research events. Collected only if you agree in Days on Purpose Settings → Pilot. They’re pseudonymous and never include goal titles, notes or what you said. You can stop, or delete them, from the same place.
• See or correct your data. Most of it is visible in the apps. Ask us for anything else and we’ll send you a copy or fix it.
• Delete it. See below.

Deleting your data

Ask in Days on Purpose → Settings → Leave the preview, or write to us. The maker deletes your account and what Days on Purpose and the Doorway voice service hold for you by hand, and tells you when it’s done. A few small records are kept, and your support messages stay unless you ask for them to be removed too. The full list, and how to ask.

Children

The apps are for adults, 18 and over. They aren’t meant for anyone under 18, and we don’t knowingly collect data from them. If you think someone under 18 has used them, tell us and we’ll delete their data.

What we don’t do

• Sell or rent your data, or use it for advertising.
• Show you ads.
• Use advertising or analytics SDKs. Doorway on Android uses Google ML Kit, which sends Google some diagnostic data (see Doorway).
• Send Strava data to an AI, or count it toward your goals.
• Read the content of your screen, messages or other apps.

Changes

If this page changes, we’ll update the date at the top and tell you about anything important before it applies to you.