Privacy

Who operates Ardo

Ardo is operated by Vlad Puzik (readyyyk). Contact weights.support@readyyyk.com about privacy, access to your records, or support.

Tracking without an account

The native iOS app can store workouts, exercise sets, food and meal entries, nutrition goals, body weight, sleep, notes and drafts on your device without signing in. Guest records are not sent to the Ardo service. The app does not create a server account for a guest.

Local tracking data and widget display files are excluded from device backups. Losing the device or deleting the app can lose unsynced records. Widgets read a small local display file; they do not request your records from our servers.

Optional cloud synchronization

If you choose to sign in and enable sync, the app sends that account’s tracking records to the Ardo backend and downloads records for use on your devices. Guest records remain separate until you explicitly choose to import and upload them.

Authentication is provided by auth.rc. Your chosen provider, currently Apple, Google, GitHub or Telegram, may supply your name, email address and provider account identifier. We use the account identifier to associate your records with you. Tokens are stored in the app’s Keychain and are not shared with the widget.

Spending is a website feature. The current native app does not create, upload or download spending records. Unsynced spending entries or drafts left by an older native version are kept locally for optional export or erasure.

How data is used and shared

We use records to provide tracking, synchronization and recovery, and account information to authenticate you. Our hosting and backup infrastructure processes records to operate the service. Operational diagnostics can include account identifiers, request paths, timestamps, response status, duration, client metadata and errors. Shared sign-in diagnostics are also processed by Axiom.

Production request validation does not log submitted record bodies, authentication headers or cookies. We do not sell tracking records, serve ads in the app, or use your records for cross-app advertising. The app does not request HealthKit access. Its external ChatGPT link does not attach tracking records.

Opening an external website, using a sign-in provider, or choosing a destination in the system share sheet subjects that interaction to the destination’s privacy practices.

Retention and deletion

Active cloud records are kept until you delete the records or your Ardo account. Guest records and drafts remain on the device until you erase them or remove the app. Signing out keeps the signed-in account’s local records separate from guest storage.

Delete Ardo account, in Account & sync, erases all of your Ardo records in the active database, including website spending, and removes that account’s records from the current device. Your shared auth.rc identity and accounts in other services are kept. Other native devices erase their local copies after they next contact the service; an offline device cannot be erased remotely.

A hashed account reference and deletion timestamp are retained to reject old sessions and prevent stale devices from recreating erased records. This is a revocation record, not a copy of your tracking history. A deleted Ardo account cannot currently be reactivated; you can continue to use local guest tracking.

Infrastructure backups can contain earlier copies of deleted records. PostgreSQL database backups are scheduled for deletion after 48 hours; under normal operation, snapshots are deleted within three days of creation, allowing for scheduled cleanup. Ardo and shared sign-in container logs, server journals, and covered system and PostgreSQL diagnostic logs have a 24-hour retention target; scheduled cleanup and file rotation can extend this period. Shared sign-in diagnostics sent to Axiom are subject to its configured 30-day retention policy. Deletion from the active database does not immediately erase these historical copies. Contact us about historical copies or other privacy requests.

Your controls

Use the app without an account, sign out to stop new synchronization for that account, erase guest records, or delete your Ardo account in Account & sync. Exporting recovery records is optional and initiated by you. You can contact us for access, correction or other data requests.

Ardo is a personal fitness and lifestyle tracker, not a medical diagnosis or treatment service. It is not designed for children. If you believe a child has supplied personal information, contact us.