Privacy by design
Your data stays yours.
Core health and training records stay on your device. Diorama does not sell that data, use it for advertising, or track you across other companies' apps and websites.
Your records start on your device.
Diorama keeps your training, sleep, recovery, health, and journal records in protected storage on your device. You can use the app locally without a Diorama login.
Your health data is not ad inventory.
Diorama does not sell your health or training data, share it with advertisers, or use it to track you across other companies' apps and websites.
Your devices hold the keys.
Sync is optional. If you turn it on, Sign in with Apple identifies your private sync space. Records are encrypted before upload, and only an enrolled device with your key can read them. Signing in does not give Diorama the key.
Share with who you want.
Export a report or share information with a coach, clinician, or service you choose. You choose the recipient, the moment, and what leaves the app.
Usage data, not health values.
Product analytics can show that a screen opened or a feature ran. They do not include health values, journal text, pain details, or AI conversations. You can turn analytics off. Feedback is sent only when you submit it.
One switch stops AI requests.
Ray sends your message and relevant context to Diorama's server and a secure, sandboxed Google AI service when an AI feature runs. Diorama does not keep readable prompt or response content after serving the request, and Google does not use Diorama's data to train or fine-tune its models. Turn AI off and AI requests stop. See how Ray works.
Export and delete are yours.
You can export or delete local records in the app. You can also ask Diorama to delete feedback, entitlement, or other server-side records associated with you.
Founder philosophy
I'm a jaded Gen Xer who was raised by anti-establishment hippies. I think everyone is getting tired of surveillance society and our personal data being used to sell us stuff. My goal with Diorama is to share with you a fitness planning tool that is privacy-first.
It leverages a sandboxed AI model that doesn't train on my data, and everything is stored on your local device... or optionally on private, encrypted Diorama servers where only your devices have the keys to read it. As server admin, I don't get to (or want to) see your personal information unless you explicitly choose to share something.
The details
The legal policy lists every service and exception.
This page explains the product philosophy in plain language. The privacy policy covers data categories, service providers, retention, and your choices in detail.