Privacy Policy

Pally is a fitness, nutrition and training app operated by Louis Gallimore, trading as ORIGIN, who is responsible for the personal information described in this policy.

For privacy, support, access or deletion requests, contact hello@originagency.uk. This policy covers the Pally app. When you visit this website, the separate ORIGIN website privacy policy and cookie policy also apply.

• Account and profile: your account identifier, email address, name if provided, age, height, weight, goals, training experience and preferences. Apple sign-in may provide a private relay email address.
• Nutrition and daily activity: food and supplement records, portions, saved meals and recipes, calorie and macro targets, water, steps and sleep.
• Training and progress: programmes, schedules, exercise sets, unfinished and completed workouts, measurements, check-ins and optional progress photos.
• Photos and voice: an optional profile picture, images you select for a food estimate or progress review, and recordings you make for voice Coach requests.
• Coach content: your questions, replies, check-in notes, Coach settings and the relevant nutrition, fitness and health context used for a request.
• Service and support records: authentication/security records, AI usage and allowance records, request type, outcome, model and timing, and information you send when asking for help.

Account records are stored on your device and backed up to private Supabase services when connected. Offline saving does not itself confirm a successful cloud backup. Selected profile and progress photos are copied into app storage; deleting an original from your photo library does not necessarily remove the app copy.

We use your information to operate and secure your account; save and recover your records; calculate fitness targets and estimates; show nutrition, workouts and progress; provide reminders you enable; answer support requests; and deliver optional Coach and photo features you request.

Our lawful bases include performing the service you request, our legitimate interests in securing the service and preventing misuse, compliance with applicable legal obligations, and consent for optional processing where required. Health information can receive additional protection under data-protection law. Optional Apple Health access and sharing with OpenAI require separate permission; giving one permission does not give the other.

We do not sell your personal information or use your individual health information for targeted advertising. Pally does not intentionally include an advertising or behavioural-tracking SDK. Apple and TestFlight may provide platform diagnostics under their own settings and policies. Pally does not make automated decisions about employment, insurance, credit or similar eligibility.

Pally provides general fitness information. It is not a clinician, diagnosis, treatment or emergency service. Food information, targets and AI estimates can be inaccurate.

On supported iPhones, Pally reads the Apple Health types you authorise: steps, sleep, body mass, workouts and active energy. Apple Watch records can arrive through Apple Health on your iPhone; Pally is not a separate Apple Watch app. Pally does not currently write data to HealthKit.

You choose camera, photo-library, microphone, notification and Health permissions. You can deny or revoke them in device settings. Revoking permission stops future access; it does not automatically erase records already saved in Pally. Health information is used for the fitness features you choose, not advertising or data brokerage.

Before a live AI request, Pally asks permission to send your question and relevant nutrition, training and health context to OpenAI through Pally’s server. Voice requests send the recording for transcription. Meal estimates and progress reviews send the images you select. Coach focus and response-style preferences help tailor replies.

Pally filters account names, email addresses, device photo paths and unrelated fields from structured AI context. Information you type into a question or note can still be included, so do not enter another person’s private information.

You can decline and continue using core tracking. Use Account & data → Turn off AI sharing to withdraw permission for future requests. A later live request will ask again. Withdrawal cannot undo processing that has already occurred. An on-device fallback is identified when a live AI response is unavailable.

OpenAI API data is not used to train its models by default. Pally requests that generated responses are not retained as response application state. This does not guarantee zero retention: OpenAI may retain abuse-monitoring content for up to 30 days, with applicable legal and safety exceptions. Audio transcription and image processing have endpoint-specific rules. See OpenAI’s API data controls.

Questions and replies remain in your Pally Coach history. AI allowance and operational records contain account and request metadata rather than the submitted message, image or audio content. Temporary converted images and voice files are cleaned up after the request where Pally controls those files; logged progress originals remain in your private log.

Online product searches and barcode lookups send the search phrase or product barcode to Open Food Facts. Your fitness profile and food diary are not included with that lookup. A provider may receive ordinary connection information such as the requesting IP address. Barcode scanning does not itself send the camera image to Open Food Facts.

Bundled UK CoFID and USDA reference foods are searched locally; those dataset publishers do not receive your local reference searches. Food and restaurant coverage is incomplete and values should be checked against packaging when accuracy matters.

Daily and meal snapshots are generated when you choose to share them. Pally opens your device share options; you select the recipient or destination. Snapshots and account exports may reveal sensitive information. Copies shared or saved outside Pally are controlled by you and the receiving service.

• Supabase: authentication, private database records, photo storage and server functions. The current project database is hosted in the eu-west-1 region in Ireland.
• OpenAI: optional Coach replies, transcription and image analysis with the permission described above.
• Open Food Facts: public food/product lookup.
• Apple and Expo: platform, sign-in, build and app-distribution services. Apple Health permissions are managed through Apple.

Hosting the database in Ireland does not mean all processing stays in Ireland. Providers may process information outside the UK and EEA, including in the United States. Applicable provider data-processing terms and transfer arrangements govern that processing; contact us for information about the safeguards relevant to your request.

We may also disclose information when required by law or necessary to investigate misuse and protect the service. Pally does not currently offer live trainer/client sharing or a public feed of private records.

Account and active app records are retained to provide your history until you remove them or delete your account. Recovery snapshots may contain earlier versions of records. Removing or replacing a photo hides it from the active log but can leave its old private app, backup or recovery file until account deletion. Removing a photo from the log is therefore not a guarantee that every copy has been erased.

Contact hello@originagency.uk if you need an individual photo or historical record erased from retained copies. We will verify the request and explain what has been removed and any applicable legal or technical limits. Provider-managed disaster-recovery backups, authentication/security logs and operational records can have separate retention periods; contact us for the applicable periods. We do not claim that account deletion immediately removes every provider backup.

OpenAI retention is separate from your Pally history and is described in section 5. Records you export or share, and originals in your own photo library, are outside Pally’s deletion controls.

Account & data provides an export of your currently logged records and available photos. Missing photos are reported. Recovery JSON exports contain records only, not photo files.

Account & data → Delete account requests permanent deletion of your authentication account, associated cloud records and uploaded photos. After successful server deletion, Pally clears that account’s records, recovery copies and app-owned media on the phone completing deletion. Apple sign-in accounts require fresh Apple confirmation so linked Apple authorisation can be revoked. If a step fails, Pally asks you to retry or contact support.

Deleting an account cannot remotely wipe offline files already held on another device. Access to the deleted cloud account is removed, but you should also clear Pally’s local data on your other devices. Deleting the app alone does not delete the cloud account. You may also request help with deletion by emailing hello@originagency.uk.

You can edit your profile and logs, change permissions, turn off AI sharing, export your information and request deletion. Where applicable, you have rights to access, correct, erase, restrict or object to processing, and to receive a portable copy. Rights depend on the circumstances and may have legal exceptions. Withdrawing consent does not affect processing that took place before withdrawal.

Email hello@originagency.uk to exercise a right or ask about privacy. Use your account email where possible. We may ask for proportionate identity verification and aim to respond within one month, explaining any permitted extension. Please do not send passwords or unnecessary sensitive documents.

You can complain to the UK Information Commissioner’s Office. You can also contact the data-protection authority where you live.

Pally is intended for adults aged 18 and over. Do not create an account or submit personal information if you are under 18. If you believe a child has provided information, contact us so we can investigate and arrange its removal.

We use account access controls and private storage to reduce unauthorised access. No service can guarantee absolute security. Contact us promptly if you suspect an account or privacy issue.

We update this page when the service or our practices change and show the current date below. Material changes will be communicated through appropriate app or account channels. An updated AI disclosure can require fresh permission. A future change of operator will be reflected in this policy.