AcedayAceday privacy policy
Plain words, because the people reading this are students and parents. Last updated October 22, 2026.
Who we are
Aceday is a small app for students at schools that use Blackbaud. It is run by its maker, Adrien Reza, with a parent as the account holder for the services it uses (Apple, Supabase, Anthropic). Questions: hello@aceday.io.
Who can use it
Aceday is for students 13 and older. Sign-up asks for a birth year and stops if it says under 13. We do not knowingly keep any data from a child under 13; if a parent tells us that happened, we delete it.
What Aceday keeps
| What | Why | Where it lives |
|---|---|---|
| First name, birth year, grade, school name, neighborhood | To address you, to size the plan, to find gyms and food near you | Your phone. The backend only if you sign in. |
| How you train and eat (places, equipment, goals, foods you avoid) | To write the plan and the lunch ideas | Your phone. The backend only if you sign in. |
| Height and weight (optional) | Only to pick starting loads and protein per meal | Your phone. Sent to the coach only with a plan request, never shown back. |
| Your Blackbaud calendar feed link | To show your classes and homework, and to check for changes while the app is closed | Your phone's keychain. On the backend, encrypted in Supabase Vault, decrypted only inside the checking job. |
| Class notes, logged meals and photos, gym sessions, timings, memory lines | The app's whole point | Your phone. Lines from them go to the coach only when you ask it something. |
| Email address | Only if you sign in, to send the one-time code and to find your row | Supabase Auth. |
| A push token | To deliver change alerts | The backend, only if you turned alerts on. |
Aceday never asks for or stores a Blackbaud password, and never signs in to or reads the Blackbaud website. The feed link is the only credential, and it is treated like a password.
The TestFlight list on aceday.io
The form on the website keeps your email and your school, if you typed one. That is used for two emails: the TestFlight invite, and one when Aceday is on the App Store. No cookies, no tracking, no analytics. The address you signed up from is kept only as a one-way scramble, to stop one computer filling the list with spam. It lives in Aceday's own Supabase database, which only Aceday can read. Students sign up only if they are 13 or older; a parent can sign up instead. To come off the list, reply to any email from us or write to hello@aceday.io, and the row is deleted.
The AI
When you ask the coach something, brief it, log a meal by photo or voice, or use a feature marked in violet, the app sends what that feature needs (your words, the photo, the memory lines, your plan) to Aceday's own backend. The backend sends it to Anthropic's Claude API and returns the answer. The API keys never leave the backend. Anthropic does not use API data to train its models. Nothing is sent to the AI without you doing something that needs it.
The AI never gives diet, weight-loss or medical advice, never sets calorie targets, never writes graded work, and if you write about self-harm or not eating it shows support resources instead of an answer.
What Aceday does not do
- No ads, no selling or sharing of data, no analytics companies.
- No tracking of height, weight or body size over time.
- No reading of grades; a grade exists only if you type it in.
Deleting
Settings has "Delete my account and data". It erases the files on your phone, the keychain entry, your row and vault secret on the backend, and your sign-in. There is no backup to restore from. Uninstalling the app erases the phone's files too; the backend row stays until you delete it from the app or email us.
Changes
If this policy changes, the date at the top changes and the app shows a line about it on the Privacy screen.