Privacy Policy
We make small, disciplined tools with no ads, no third-party analytics, and no selling of data. This page says plainly what our apps collect, why, and what you can do about it.
01Who we are & what this covers
Palmarum LLC is an independent software studio in Missouri, USA. This policy covers the apps we publish — currently Palma, our faith & fitness ledger, and Sebastian, our AI running coach, when it is released — and this website. You can reach us any time at hello@palmarum.dev.
The short version: your data exists to show you your own ledger. We run no ads, embed no trackers or analytics, never sell or rent your information, and never use your health or location data for advertising. You can delete your account — and everything on our servers with it — from inside the app.
02What we collect
Account
An email address and password (stored only in hashed form by our backend), or your name and email from Google if you choose "Sign in with Google." We use this solely to identify your account.
Activities
Runs and walks you record or import: the GPS route, distance, pace, duration, heart rate where available, plus any name, description, or photos you choose to add. This is the ledger itself — it is stored with your account so it follows you across devices.
Location
Precise location is used only while a run you started is in progress, including in the background or with the screen locked, so your route and pace can be recorded. Tracking stops when you finish the run. We do not collect your location at any other time.
Apple Health & Health Connect (read-only)
With your permission, Palma reads from your phone's health store — Apple Health on iPhone, Google's Health Connect on Android — so workouts recorded on your watch or in other fitness apps appear in your ledger. The data types we read are the same on both: workouts (exercise sessions), heart rate, distance, and the workout's GPS route where one was shared. Imported workouts are stored with your account like any other activity, encrypted in transit. We read only; we do not write to Apple Health or Health Connect. Health data is never used for advertising or marketing, never used to train AI models, never shared with third parties for their own purposes, and never sold. Deleting an imported activity in Palma removes it from our servers; the original stays untouched in your health store.
Faith entries
Prayer, fasting, and feast-day entries you record are stored with your account, for you and — only if you share them — your Circle.
Circle
What you deliberately share with your Circle — activities, photos, comments, palms — is visible to the people in that Circle, and to no one else.
Notifications
If you enable notifications, we store your device's push token so we can deliver them. Nothing else rides along with it.
What we don't collect
- No advertising identifiers, no ad networks.
- No third-party analytics or tracking SDKs.
- No contacts, no browsing history, no data from other apps.
- Diagnostic error logs stay on your device; they reach us only if you choose to send them.
03The coach & AI
Sebastian's daily message is generated by Anthropic's Claude, called through our own server. To write the message we send your first name and your training context — the plan, its goal, this week's workouts, and what you completed or skipped. We do not send your email, your location or routes, your photos, your faith entries, or raw health readings. The text is used only to generate your message, and messages are cached on your device rather than kept as a profile of you.
04Where your data lives & who touches it
We use a small number of service providers to run the apps. They process data on our behalf, under their own security and privacy obligations — none of them may use your data for their own advertising:
05Your choices & your rights
- Permissions are yours. Location, Health, photos, and notifications can each be declined or revoked any time in your device's Settings; the app keeps working with whatever you allow.
- Disconnect integrations. Apple Health, Health Connect, and Strava can be disconnected in the app whenever you like; health-store read permissions can also be revoked in the Health or Health Connect app itself.
- Edit and delete freely. Activities can be renamed, edited, or deleted individually.
- Delete your account, in the app. Settings → Delete Account removes your account and your activities from our servers. You can also email us and we'll do it for you.
- Ask us anything. Email hello@palmarum.dev to request a copy of your data, a correction, or a deletion. Depending on where you live (GDPR, CCPA, and similar laws), these are your legal rights — we honor them for everyone, everywhere, regardless.
06Retention
We keep your data for as long as your account exists, so your ledger stays whole. When you delete your account, the data associated with it is deleted from our servers. Anything stored only on your device (caches, error logs, Strava tokens) disappears when you delete the app.
07Children
Our apps are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
08Changes
If this policy changes in a way that matters, we will update this page and its effective date, and say so in the app's release notes. We will never quietly loosen it.
09Contact
Palmarum LLC · Maryville, Missouri, USA
hello@palmarum.dev · Support