NextEpic.inc operates Onwima. This policy explains what stays on your device, what is sent to our services, and your choices. Contact us at next.epic.dev@gmail.com for support or privacy requests.
Your profile, journal text and photos, weight, symptoms, injection records, chat messages, undo history, and AI estimates are stored locally. Onwima does not require an account or provide account-based record synchronization. Device backups depend on your Apple settings. Removing the app may remove local records.
Before sending a journal for AI analysis, Onwima asks for your permission. If you agree, we send the journal text, selected journal photos, and your latest manually recorded weight to our server and an Anthropic AI model hosted by Amazon Web Services (AWS) through Amazon Bedrock. They are used to estimate food nutrition, exercise calories, and exercise areas. Your profile photo is not included.
Chat logging asks for permission before its first request, including when you previously allowed journal estimates. It sends your message, up to four recent exchanges, and the latest linked records to the same server and model. This includes the food, activity, symptoms, or mood you describe. It uses that context to create records and understand corrections. Chat logging does not send your full diary, photos, profile, or Apple Health data. Your device saves the resulting records automatically and offers editing and undo. AI can misunderstand; it does not provide medical advice.
Our application database does not store journal or chat text, linked records, photos, weight input, or AI responses. It retains a random installation identifier, request identifiers, request time, model name, token counts, estimated service cost, response duration, and success or error information to operate the service, limit abuse, and diagnose failures. These operational records do not currently have automatic expiration.
AWS processes model requests in the United States, including US regions used for cross-region inference. We have not enabled model invocation content logging. AWS does not use Bedrock inputs or outputs to train its models or the model provider's models. AWS may retain or review content in the limited circumstances described in its abuse detection policy. See also AWS data protection.
You can decline sharing and still save records locally. Turn off future sharing in Profile → Settings → AI sharing. Turning sharing off does not erase estimates already stored on your device or operational records from previous requests.
Apple processes subscription payments. We use RevenueCat to validate purchases, restore access, and check whether Onwima Pro is active. RevenueCat receives purchase history and a random subscription identifier assigned by our server. Our server links this identifier to your installation so it can verify access before running AI analysis. RevenueCat also provides subscription analytics for operating the service.
We do not send your journal text, photos, health measurements, profile, or installation authentication token to RevenueCat. Neither Onwima nor RevenueCat receives your payment card details from these App Store purchases. You can restore purchases from Onwima Pro and manage or cancel subscriptions through Apple. Deleting local records or the app does not cancel a subscription. Contact us about deletion of subscription identifiers; purchase records may remain where required by the store or law.
In TestFlight and Apple review, we verify Apple-signed app transaction information to enable subscription testing. We store your selected test access mode against your installation, but do not store the signed app transaction itself. Test access does not change your purchases.
With your permission, Onwima reads daily step counts, walking and running distance, and active energy from Apple Health to show your daily activity. These HealthKit values stay on your device: they are not sent to our server or AI service, sold, used for advertising, or used to train AI. Onwima does not write to Apple Health. Manage access in Apple Health or iOS Settings.
If you enable reminders, our server stores your reminder schedule, time zone, language, recent completion dates, and Apple push token, linked to your installation identifier. This information lets us send the reminders you selected through Apple Push Notification service and avoid duplicate reminders. We also keep delivery dates, types, and outcomes.
Turning reminders off in Onwima erases the remote schedule and push token after the setting successfully reaches our server. The installation identifier and delivery history remain until removed through a privacy request. Turning notifications off only in iOS may not immediately erase the stored server schedule.
Onwima receives compatible app updates through Expo. Our hosting and delivery services process network information such as IP addresses and request details to deliver and protect these services.
Onwima does not include advertising or cross-app tracking. We do not sell your records or use your health data for advertising. Access to operational data is limited to running, securing, and supporting the service.
Onwima uses Google Firebase Crashlytics to diagnose crashes and unexpected app failures. Reports include crash stack traces, technical exception information, device and operating system details, a Crashlytics installation identifier, and app build and update identifiers. Custom failure reports use fixed technical codes; we do not attach journal text, photos, health values, names, email addresses, or authentication tokens.
Crash diagnostics are enabled in release builds and are separate from optional AI sharing. We do not include Google Analytics or advertising tracking. Firebase retains crash reports and associated identifiers for 90 days before beginning removal from its systems. See Firebase privacy and security. Contact us with questions or requests about crash diagnostics.
You can edit or delete individual records in the app. Chat → Clear removes local chat messages and undo history without deleting Journal records. Deleting a Journal record does not erase the original message from chat; clear the chat separately to remove that copy. Deleting a local record removes it from the app but does not automatically remove earlier server operational records. For access, correction, deletion, or questions about server-held data, contact next.epic.dev@gmail.com. We may need information to locate the installation and verify the request; do not email journal photos or health details unless needed for your request. We will explain any data we must retain for security or legal obligations. Copies in backups may remain until the backups expire.
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, withdraw consent, and complain to your local privacy authority. Withdrawal does not undo processing already completed.
We use encrypted connections and access controls. No storage or transmission method is completely secure. Onwima is not directed at children. Contact us if you believe a child has shared personal information without appropriate permission.
We will update the date above when this policy changes. Material changes to sharing require an updated explanation and any consent required before that sharing begins.
© 2026 NextEpic.inc