Your data is yours alone.

Last updated 24 September 2026

The short version

Oath does not collect your data. There is no account to create, no analytics running in the background, and no tracking of any kind. We cannot see your workouts, your runs and their routes, your meditation, your journal, your photos or your vow, and we never will.

Your location is used only while you track a run, a ride or another activity that you start, and your journal is encrypted on your device before it syncs. Each is described in full below.

One thing leaves your device for a service we use: the receipt Apple issues when you buy Oath Pro, which is checked so your purchase unlocks and can be restored later. It carries no personal information. That is described in full under Purchases below.

A few things your device asks of Apple or Spotify go to them directly and never through us: the map behind a route, the name of a place, walking directions when you ask a route to follow paths, and the title of a Spotify playlist you paste. Each is named in the section it belongs to.

What the app stores

Everything you record in Oath, your vow, workouts, activities and their routes, including the cadence measured along them, breathing and meditation sessions, journal pages, abstentions, progress photos, bodyweight entries, routines and the music you give them, streaks and achievements, is stored on your devices and in your private iCloud database. This is Apple infrastructure tied to your Apple ID. It is used only to sync your data between your own devices, and it is not accessible to us.

Photos and face data

Oath does not collect, store, process or use face data. The app performs no facial recognition, face detection, face mapping or biometric analysis of any kind, and it never creates a faceprint or biometric template. It does not use the TrueDepth camera, ARKit or any face tracking technology.

Face ID appears in one place only. Your journal is locked by default, and to open it your device asks for Face ID, Touch ID or your passcode. That check is made entirely by Apple's system: Oath is told only whether it succeeded, and never receives any face data or anything else about you.

The camera is used for one purpose only: the progress photos you choose to take inside the app, in a front, back or side pose, so you can see your physical progress over time. You may also import a photo from your library instead, or add one to a journal page.

When you share a progress photo, you can ask Oath to lift you out of the background, so what you send is you and not the room behind you. To do that your device works out the shape of the person in the picture, using Apple’s Vision framework, entirely on the device. That is a shape and nothing more: it recognises nobody, it makes no faceprint or biometric template of any kind, and it tells Oath nothing about who is in the photo. Neither the photo nor the shape is sent anywhere, and none of it happens unless you choose a backdrop that needs it.

Progress photos are stored on your device and in your private iCloud database, the same as everything else you record in Oath. Photos on a journal page are encrypted with the page, as described below. They are never uploaded to us, and they are never shared with any third party. We operate no server that receives them, and we cannot see them.

Photos are kept until you delete them. You can delete any single photo from the gallery, or clear them all at once in Settings under Reset Stats. Deleting the app from all your devices and removing Oath data from iCloud also erases them. We hold no copy, so there is nothing left for us to retain.

Your journal

The journal is off until you turn it on. When you write a page, its words and any photos on it are encrypted on your device before they are saved, so your private iCloud only ever holds a sealed copy. The key that opens them is kept in your iCloud Keychain, which carries it to your other devices so they can read your pages too. We never have the key, and we cannot read your journal.

Delete All Data in Settings removes your pages and destroys the key, so any copy left anywhere can no longer be read. Turning the journal off, or using Reset Stats, keeps your pages.

Location and routes

Oath uses your location only while you are tracking a run, a walk, a hike, a ride or another GPS activity that you started, on your iPhone or your Apple Watch. It follows your route to measure distance, pace or speed and to draw it on a map, and it keeps doing so with the screen off until you finish. The moment the activity ends, Oath stops using your location, and it never uses it at any other time.

The route is saved with that activity on your devices and in your private iCloud database. It is never sent to us. On Apple Watch, if you allow it, the route is also saved to Apple Health with the workout.

Maps are drawn by Apple Maps. To show one, your device asks Apple for the map of that area, as any app showing a map does, and Apple’s privacy policy covers that request.

Two things send part of a route off your device, both only because you asked for them, and both to Apple rather than to us. If you turn on Follow paths for a route, your device asks Apple Maps for walking directions between points along it, so the line can sit on the paths you actually ran. And if you share a run with the place it was run shown on the card, your device asks Apple for the name of the place it started from; you can turn that off before sharing. Apple’s privacy policy covers both requests. Nothing about your route ever reaches us.

Apple Health

Oath works with Apple Health only if you allow it, and only for the following. On iPhone, it saves your finished workouts and your mindful minutes, and it can read your latest bodyweight so the weight in Oath starts where Health is. On Apple Watch, it saves the workouts you log there, with the route, distance and energy of a run, and your mindful minutes. It reads your heart rate and active energy during a workout to show them on your wrist.

Heart rate is shown on your wrist as you go, and the readings belong to Apple Health, which keeps them. Oath does not. When you look at a run afterwards and it shows you how hard each stretch was, it is asking Health for the beats over that stretch of time at that moment. Nothing about your heart is written into Oath’s own records or into your iCloud database, and it is yours to delete in the Health app whenever you like. Your cadence is measured by Oath rather than read from Health, so that one is kept with the route.

Health data is never sent to us, never used for advertising, and never shared with anyone. It is governed by Apple’s Health privacy controls, and you can change or withdraw access at any time in the Health app or in Settings.

Apple Watch

Oath on Apple Watch works on its own, so you can leave your iPhone behind. What you log on the watch is kept on the watch until your iPhone is in reach, then passed directly to it over Apple's own encrypted link between your devices and saved with the rest of your data. Your iPhone sends the watch your routines and settings the same way. Nothing passes through us.

Focus

If you turn on Focus, Oath uses Apple's Screen Time framework to shut the apps you choose while a workout or a meditation is open. You pick them in Apple's own chooser, and Oath is handed only sealed tokens that stand for them: it never learns which apps you chose, or anything about how you use your device. Your choice stays on that device and is not synced. The apps return the moment your session ends.

Music

If you give a routine music from your Apple Music library, Oath asks for access to your library so you can choose a playlist, and saves your choice and its track list with the routine. Nothing about your music is sent to us.

You can point a routine at a folder of your own music files instead — on your device, in iCloud Drive, or anywhere the Files app reaches. Oath does not copy them or read anything but the audio in that folder. It remembers where the folder is, on that device only; that reference never syncs and never leaves the device, so a routine opened on another device asks you to point at a folder there. Playing them is done entirely on your device.

You can also choose a sound to go under a video you share — one of Oath’s own ambiences, one of the beats the app writes for itself, or an audio file of your own. A file you choose is the one piece of audio Oath does copy: it takes as much of it as the longest video could use and keeps that copy in its own folder on that device, so the sound is still there when you export. That copy never syncs, never leaves the device, and is replaced when you choose another or removed with the app. What you do with a video carrying music you did not write is between you and whoever owns it.

If you add a Spotify playlist link instead, Oath asks Spotify’s public embed service for the playlist’s name so the routine can show it, and follows a short link to its full address first when that is what you pasted. Those requests go from your device to Spotify and, like any request on the web, include your IP address. Spotify’s privacy policy covers them. Starting the workout then opens the playlist in Spotify.

Notifications and sharing

Reminders and milestone notifications are scheduled on your device and never pass through a server. A milestone for something you are going without never names it, so nothing private appears on your lock screen.

When you share a routine or a workout, it goes only where you send it, as plain text through the share sheet.

A picture or video you make of a run, a workout or your progress photos is drawn on your device and goes only where you send it. It carries what is on it — your route, your figures, or the photographs themselves — and never your vow or your journal. Nothing is uploaded to us to make one, and we keep no copy. Where you send it is then covered by whatever you sent it through.

Other apps

The foot of Settings shows the other apps we make. To list them your device asks Apple’s public App Store lookup which apps we publish, and keeps the answer for a while so it need not ask often. The request says nothing about you beyond what any web request says, and it sends Apple nothing you have recorded in Oath.

Purchases

Subscriptions and the one-time lifetime purchase are processed by Apple through the App Store. We never see your payment details, and Apple never gives them to us.

To confirm a purchase is genuine, to know whether it is still active, and to restore it when you move to a new device, Oath uses RevenueCat. They act as our data processor. RevenueCat receives an anonymous identifier generated for your installation, your device model and operating system version, your country, and the purchase receipt Apple issues. They do not receive your name, your email address, your Apple ID, or anything you record in Oath. Their privacy policy is at revenuecat.com/privacy.

The anonymous identifier is not linked to you, and it is not shared with anyone else or used to follow you across other apps or websites.

What we do not do

No accounts, and no collection of names or email addresses
No face data, facial recognition or biometric analysis
No use of your location outside an activity you are tracking
No analytics or telemetry
No advertising and no advertising identifiers
No tracking of you across other apps or websites
Nothing you record in Oath is sent to us, ever
Nothing is sent to anyone else either, but for the few requests your device makes to Apple or Spotify when you ask for a map, a place name, a route that follows paths, the title of a playlist you pasted, or the list of our other apps
No selling or sharing of your data, your health data or your location

This website

This site is a set of static pages served by Cloudflare. It sets no cookies, runs no analytics and loads no tracking scripts. There are no advertising pixels, no third party embeds and no social media buttons. The fonts are served from this site rather than from a font network, so no one else sees that you visited.

Like any website, it has to be delivered by a server. Cloudflare processes the ordinary request information needed to do that and to defend the site from attack, including your IP address. We do not build profiles from it, and we do not combine it with anything else.

The free tools

The meditation timer, the breathing exercises and the cold plunge timer run entirely inside your browser. The sound is generated on your device rather than streamed. Your chosen length, pattern and session are never sent to us, and they are not saved anywhere, not even on your own computer. Close the tab and the session is gone.

Links to the App Store

The download buttons, and the banner Safari may show at the top of the page, take you to Apple. Once you are there, Apple's privacy policy applies rather than ours.

Deleting your data

Your data belongs to you. Delete All Data in Settings erases everything, your journal included, from your device and your private iCloud. Reset Stats lets you clear your history, progress photos or weight history, and always keeps your vow, routines and journal. Deleting the app from all your devices and removing Oath data from iCloud also erases everything. Anything you chose to save to Apple Health stays there until you delete it in the Health app.

Changes and contact

If this policy ever changes, the change will be described here with a new date above. Questions are welcome at support@the-oath.app.