Maru Privacy Policy

Maru is built privacy-first. This policy explains, in plain language, what the app does and does not do with your information.

The short version

• Your health signals are processed on your device.
• Cloud sync is optional and end-to-end encrypted — we cannot read your data.
• One optional feature, off by default, sends a summary in ranges — never your readings — to Maru's server. It is described below.
• There are no third-party analytics SDKs embedded in the app.
• We do not sell your data, ever.

What Maru stores locally

The following is stored locally on your device:

• Your signals (sleep, energy, mood, body basics, sport preferences).
• Your activity recommendations and adaptation history.
• Your preferences and settings.

You can export your data for your own use, or delete all of it at any time from Settings → Delete All Data.

Cloud sync (optional)

If you create an account, Maru syncs your signal data across your devices. Synced data is encrypted on your device before upload. The Maru server stores only opaque, encrypted blobs — it never reads, processes, or has access to your health signals in plain text. Your encryption key stays on your devices.

Account creation requires an email address and password. We use this only to authenticate you and sync your encrypted data. We do not use your email for marketing without explicit consent.

How Maru decides

Maru decides what to suggest on your device. Its safety limits are fixed rules on your phone, and nothing outside it can change them. What Maru tells you is written on your device too, by the model Apple ships with iOS or by fixed templates.

Remote second opinion (optional, off by default)

If you turn on Remote second opinion in Settings, Maru sends a summary in ranges — for example short, medium or good sleep; low, medium or high energy; whether the week is behind or on track — to Maru's server. The server passes it to a classification service (TypeSafe AI, hosted in the United States) and returns its answer to your phone.

• The summary carries no name, no account, no identifier, no health readings, no weight, no notes and no history.
• Maru's server does not store it.
• TypeSafe states that it does not use this data to train its models.
• If the answer is slow or unavailable, Maru decides on your device.
• You can turn it off at any time. Deleting all data turns it off too.

Notifications

If you enable reminders, Maru schedules local notifications on your device. No notification content is sent to any server.

Subscriptions

Maru Premium is sold as an auto-renewable subscription through Apple's App Store or Google Play. Payment, renewal, and cancellation are handled by the respective store under your account. Maru does not receive your payment details.

Health disclaimer

Maru is a wellness companion for healthy weight management. It does not provide medical advice, diagnosis, treatment, nutrition prescriptions, or guarantees about body changes. Always consult a healthcare professional for medical questions.

Contact

Questions about this policy: [email protected]