Skip to content

Privacy Policy ​

Last updated: July 25, 2026 — applies to Courier for iOS.

The short version: Courier works in two modes. Out of the box it is fully local — no account, no analytics, no tracking; your health data is read on your iPhone, stays on your iPhone, and is transmitted only to servers you yourself configure. Optionally, you can sign in to Courier Cloud and let the app publish a reduced copy of your issues to Courier's servers for a hosted web archive and AI summaries. Both modes are described below.

What Courier accesses, and why ​

AccessPurpose
Apple Health — read-only (workouts, sleep, related vitals)Render your daily issue; dispatch records to your endpoints. Courier never writes to Health
Location (while using the app)Show current weather in the masthead (via Apple WeatherKit). If you enable linked weather, weather — with coordinates, if you enable that toggle — is attached to dispatches to your endpoints
Microphone & speech recognitionVoice annotations you explicitly record. Transcription is on-device when the system supports it; otherwise via Apple's speech service, or via a third-party service you configure
NotificationsTell you the result of automatic dispatches. Optional

Local mode (the default) ​

Without an account, Courier collects nothing. The developer embeds no analytics or advertising SDK and receives none of your data.

Where your data goes ​

Data leaves your iPhone in exactly two, user-configured cases:

  1. Dispatches to your subscribers — endpoints (URL + credentials) that you add yourself. Courier sends the health/annotation/weather records you chose to those servers, and nowhere else. You are the operator (or customer) of those servers; their handling of the data is yours to govern.
  2. Third-party transcription (optional) — if you configure an external transcription service, your voice recordings are uploaded to that service for transcription. On-device transcription involves no upload.

Where your data lives on the device ​

  • Health records are read from Apple Health on demand; Courier's own database (issues cache, dispatch ledger, annotations, configuration) is stored locally with iOS data protection.
  • Endpoint secrets and transcription API keys are stored in the iOS Keychain.
  • A small snapshot (last night's duration/score, workout totals, dispatch counts) is shared with the home-screen widget through the app's private App Group container — it never leaves the device.
  • No CloudKit / iCloud database is used. iOS device backups follow your system backup settings.

Retention & deletion ​

  • The dispatch ledger keeps 6 months of history, then self-cleans.
  • Annotations stay until you delete them (individually or via Clear in the notes archive).
  • Deleting the app deletes all local data. Keychain entries may survive an uninstall (an iOS behavior); Courier purges any leftovers on the first launch after a reinstall. Copies you dispatched to your own servers remain on those servers.

Courier Cloud mode (optional sign-in) ​

Courier Cloud is strictly opt-in: nothing reaches Courier's servers unless you sign in. If you do, the app additionally publishes to our servers:

  • Health summaries — daily sleep summaries and workout summaries with downsampled heart-rate and route series. Full-precision data stays in Apple Health on your device; the cloud stores a reduced "print edition" only.
  • Annotations — the notes you write or dictate, shown in your archive and used as input to your AI summaries.
  • Account basics — your sign-in identifier and email address, plus the AI-generated reports themselves.

This data is stored solely to show your archive back to you and to write your AI summaries. It is never used for advertising, never sold, and never shared with data brokers. You can export everything or delete your account — and all hosted data with it — at any time; signing out simply returns the app to local mode.

The authoritative terms for Courier Cloud are in the Courier Cloud Privacy Policy.

Children ​

Courier is not directed at children and provides no age-gated content; it holds a 4+ rating.

Changes ​

Material changes to this policy will be reflected on this page with an updated date, and noted in App Store release notes.

Contact ​

Questions or concerns: open an issue at github.com/Xheldon/Export-Data-From-Apple, or use the support contact listed on the App Store page.