Who we are
Driff is an app for Android, Windows, macOS and Linux, with watch apps for Wear OS and Garmin, and this website. In this policy, “we” means the people who make Driff. You can reach us at help@driffapp.com.
What Driff keeps, and where
Your areas and weekly amounts, sessions, journal, photos, the songs you add, everything in plugins (flashcards, workouts, meals, sleep and the rest) and your settings are kept on the device you use them on: in a database inside the app on a phone or computer, and in the browser’s own storage in the browser demo. Photos are copied into the app, so clearing your camera roll doesn’t remove them.
None of it is sent to us. Driff has no server that holds your data, and it works without a connection.
Backups
When you back up, Driff writes your data and photos to a folder you choose: on the device, on a USB drive, or a folder another service keeps in sync, such as Google Drive. That copy is yours. Driff never uploads it anywhere itself; if the folder lives with another service, that service’s terms apply to it.
Health Connect (Android)
Health Connect is Android’s store for health data on your phone. Garmin, Fitbit, Samsung and other apps write to it. If you connect it in Driff (Health → Settings → Health Connect) and allow each kind, Driff reads and writes only the following. It reads at most the last 30 days, only while Driff is open, and never your location or routes.
What Driff reads, and what for
| Sleep | The night on Today: when you slept and its stages, and the regularity and sleep need worked out from them. |
| Heart rate | Your heart rate overnight, and over a workout. |
| Resting heart rate | Shown with the night. |
| Heart rate variability, blood oxygen, breathing rate | Overnight, shown with the night. |
| Weight, body fat | Your weight and how it’s trending. |
| Workouts, with their calories, distance, climb and speed | Workouts from your watch in Fitness’s history, and as time toward an area. |
| VO2 max | Shown above Fitness’s history. |
| Steps, floors | A line on Today with the day’s steps, distance and floors. |
What Driff writes, if you choose to share it
| Meals | Each meal’s energy, protein, carbs, fat, fiber, sugar and sodium, with the meal and its name. |
| Water | Each day’s water. |
| Weight | Weight you type into Driff. |
| Workouts | Workouts you finish in Fitness, as strength training. |
Each kind is off until you turn it on. What Driff reads from Health Connect stays on your phone, in Driff’s own database. It is never sent to us or anyone else, never sold, never used for advertising, and used only to show it to you in Driff.
Stopping, and deleting
- Disconnect in Health → Settings → Health Connect stops it on that phone. What already came in stays in Driff until you delete it.
- Permissions can be taken back at any time in Health Connect, under App permissions → Driff.
- What came in goes when you delete those entries in Driff, or everything with Settings → Erase everything.
- What Driff wrote leaves Health Connect when you delete it in Driff, or you can remove it in Health Connect. Turning a kind off in Driff leaves what’s already there.
Watches
The Wear OS and Garmin apps talk only to Driff on your phone: the Wear OS app through Google’s link between a phone and its watch, the Garmin app through the Garmin Connect app on your phone. They carry your areas’ names, today’s minutes, the running session and your taps. Watches keep no history and never talk to a server of ours.
On a Garmin, Driff’s watch app can also bring over, once a day, what the watch measures and keeps to itself: Body Battery, stress, intensity minutes, recovery, resting heart rate, VO2 max, blood oxygen and breathing. It stays on your phone like the rest.
When Driff goes online
Driff connects only when you do something that needs it, and then only to the service involved:
- Music. Pasting a link or searching asks Spotify, YouTube or Deezer about that song (the link, or your search words) and fetches its cover. Playing it loads that service’s own player, under its own privacy terms.
- Food. Scanning a barcode or searching packaged foods asks Open Food Facts (the barcode, or your search words). The foods that come with Driff work offline. Reading a recipe from a link fetches that page.
- Exercises. An exercise’s steps and picture come from the free-exercise-db project on GitHub.
- Health Connect. If it isn’t installed, Driff can open its page in Google Play.
- AI features, only with Plus: Driff’s relay and the AI provider, below.
These requests carry what they need, like a link, a barcode or search words, and your device’s ordinary network details, such as its IP address. We aren’t part of them and receive nothing.
AI
Driff’s AI features are part of the Plus plan, which isn’t available yet. Each is off until you turn it on. A request goes from your device to Driff’s relay, which checks your plan, counts the request toward your limits and passes it to the AI provider (Anthropic or OpenAI) under its API terms. The answer comes back the same way. Neither the relay nor Driff stores what was in a request. AI requests can’t be end-to-end encrypted, because the model has to read them, so each feature sends only what it needs.
The Focus coach, on a computer, checks whether the window in front fits the session you’re in. It sends only while a session runs, each window at most once a session:
- the session’s area, its part, and what counts for it, in your words;
- up to 12 windows you said count;
- the window’s app and title, with email addresses and long numbers taken out;
- a picture of that window, only if you turn on “Look at the window too”.
Never sent: Driff’s own windows, password managers and private browser windows. Driff keeps no record of the windows it saw, only how many minutes were on course, drifted or neither, and the windows you tell it count. If a build of Driff lets you enter your own OpenAI key instead, Focus sends the same items straight to OpenAI under your account, and the key stays on that computer: not in backups, and not synced.
Hints when you’re stuck will send the problem in front of you (a picture of the window) and the session’s area. Meals from a photo will send the photo you take for that meal. Insights will send totals and patterns from your weeks, never your journal or photos. None of these is in Driff yet. When each arrives, it will be off until you turn it on and will say what it sends before sending anything. This policy will be updated first.
Sync, Plus and accounts
Sync and Plus aren’t available yet. When they are, they’ll be optional and paid, and they’ll need an account: an email address to sign in with. Payment goes through the App Store, Google Play or our payment provider on a computer; we receive whether your plan is active, never your card details.
With Sync, your devices encrypt everything before it leaves them, so our server only stores what it can’t read: your rows and photos as ciphertext, how much space they take, and when they changed. This section will set out exactly what the server holds before Sync is offered.
This website
This site sets no cookies and runs no analytics or ads. Its fonts and pictures come from the site itself, not from other companies. Like any website, the server that hosts it may keep ordinary request logs for security.
Children
Driff is for a general audience and isn’t directed at children under 13. It collects nothing about anyone, so we hold nothing about a child.
Your choices
Everything Driff holds is on your device, where you can see it, back it up (Settings → Back up), change it and delete it (Settings → Erase everything, or uninstall). We hold no personal data about you, so there’s nothing for us to hand over or erase. If you have a question about your data, write to us.
Changes
If this policy changes, the new version goes here with a new date at the top. Anything new that would send data off your device will be off until you turn it on.