Trust & privacy
Built to earn your
trust, not assume it.
TIDES holds the most personal data you have: how you sleep, train, eat and feel, and what you take.
So the whole system is built around a simple stance. Your data stays on your device by default. It moves only when you allow it. And it is never faked back to you. That is not a privacy policy bolted on at the end. It is the moat.
Cloud AI, disclosed and switchable
You choose when it leaves your phone.
Signal's text intelligence runs through TIDES' own backend, and only when you allow it. On-device intelligence is on the roadmap, not live yet.
Off by default, in the cloud only if you choose.
Sensitive logs sync off your phone only when you allow it. Leave sync off and they never leave the device. When you do turn on Signal's coaching chat, your text goes through TIDES' own backend, never straight to a third party.
Via the TIDES backend, never a third party
Your controls
The switches are yours, and they are honest.
Every one of these is off until you choose it, and does exactly what it says. Nothing here is a default you have to notice and walk back later.
App lock
Keep TIDES behind Face ID or Touch ID, so your logs stay closed until it is you holding the phone.
Cloud sync of sensitive logs
A single toggle. Leave it off and your sensitive logs stay on the device. Turn it on only when you want them backed up and available across your devices.
Stay quiet during Focus
TIDES can hold its notifications while your phone is in a Focus mode, so it never interrupts the moments you set aside.
Notice my day
Optional location context you switch on yourself. When it is off, TIDES has no sense of place, and it never assumes otherwise.
Calendar read as buckets only
If you allow calendar context, TIDES reads how busy a window is, not the titles, invitees or notes of your events.
Profile visibility
You decide what your profile shows and to whom, on a card you control, never a default you have to walk back.
You own your data
It is your data, so you can take it or end it.
Ownership is not a favour we grant. It is the starting point, and every one of these lives in the app, not in a support ticket.
Export everything
Download your whole history as a JSON archive, yours to keep and to take anywhere. This is your right under GDPR and CCPA, built in rather than requested.
Delete all logs
Clear every log you have captured in one action, permanently, whenever you decide.
Clear all chat history
Wipe your entire conversation with Signal, so nothing you have asked stays behind.
Delete your account
Close the account and remove your data. No retention hold, no dark pattern between you and the button.
Honesty as a rule
It would rather say nothing than say something false.
The same discipline runs through every reading TIDES shows you. Your health is too important for fake certainty.
Every input keeps its origin
Each number carries how it came to be: observed by a sensor, reported by you, or intended as a plan. The source travels with the value, so nothing gets quietly promoted into fact.
It never fabricates a number
If the data is not there, TIDES says so. It will not invent a reading to fill a gap or round a guess into a figure with a decimal point.
Estimates are shown as estimates
A photo calorie estimate is labelled an estimate and is yours to correct before it saves. It never masquerades as a measurement.
It says when it does not know
When there is not enough of you on the page yet, TIDES shows how far along it is instead of a confident answer it has not earned.
It never diagnoses or changes a dose
TIDES does not diagnose a condition, and Protocol tracks what you already take without ever setting, suggesting or changing a dose. Anything that needs professional care is routed out of the app.
The app refuses to fake your health data. So it refuses to fake anything else.
Trust, privacy and honesty are not a section of TIDES. They are its character, the same one you feel in every reading it gives you and every switch it hands you.