Donut

Privacy Policy

Last updated September 15, 2026

Donut is an intermittent fasting timer. It's built so that Criers never holds a copy of your personal data: your health information stays on your device, and your fasting history and Donut Box live in your own iCloud account, not on our servers. This page describes what Donut stores, and where.

Donut has no account system

There is no sign-up, no password, and no email or phone number collected by Donut. Your identity is your device's existing iCloud account (your Apple ID), used transparently through Apple's CloudKit framework. Donut never sees your Apple ID credentials.

What we store, and where

Donut has no backend server of its own. Your device and Apple's infrastructure are the entire backend. Specifically:

• On your device only: your weigh-ins, mood check-ins, and profile (including age, sex, height, weight, and goal weight), along with the health summaries for each fast. These are never stored in iCloud.
• Your private iCloud database: your fasting sessions and history, and your collected donut flavors, so they're available on your other devices. Only you can access your private CloudKit database.
• Apple Watch and widgets: your active fast is shared between your iPhone, Apple Watch, Home Screen widgets, and Live Activities using Apple's App Group and WatchConnectivity frameworks, entirely on-device and through Apple's infrastructure, never through a Criers-run server.
• A username directory: if you use Friends, the username you choose, and the donut you pick as your picture, are stored in CloudKit's public database (still Apple's infrastructure, not a Criers-run server) so friends can find you by searching for your username. No other personal information is attached to it.
• Friend requests and stickers: friend requests, friendships, and the stickers you send on a friend's fast are stored in CloudKit's public database so the other person's device can receive them.
• Fasting status shared with friends: whether you're fasting, your plan, and when you started are shared only with the friends you've accepted, through Apple's CloudKit sharing (CKShare).

Apple Health

With your permission, Donut reads the following from Apple Health to build your Fast Detail summaries and your Report Card: height, weight, date of birth, biological sex, heart rate, body temperature, sleep analysis, step count, active energy, exercise minutes, workouts, and water. Date of birth and biological sex are used only to estimate your resting calorie burn. When you manually log a weigh-in, water, workout, or another reading inside Donut, it writes that value back to Health so it stays in one place, and you can turn writing off in Settings. Health data is only ever read and written through Apple's HealthKit framework, directly between Donut and the Health app on your device. It is never stored in iCloud, never used for advertising, and Criers never receives a copy of it.

Reports and blocks

If you report someone from the Friends tab, your email app opens a message to us with their username and user ID. We only receive what you choose to send. The people you block are stored on your device, and nobody is told they've been blocked.

Purchases

donut+ is sold through the App Store. Apple processes the payment, and Criers never receives your payment details.

What we never collect

• No accounts, passwords, emails, or phone numbers collected by Donut itself.
• No advertising identifiers, no analytics profiles, no tracking across other apps or websites.
• No access to your contacts.
• No location data.

Who can see what

Your fasting history, health information, and Donut Box are visible only to you. There is no public leaderboard. Usernames can be searched so friends can find each other, but nothing else about you is visible to anyone you haven't connected with. A friend connection, and the fasting status you share through it, is visible only to the two people involved.

Selling data & ads

We never sell your data, and Donut has no advertising of any kind. Since Criers never holds a copy of your data in the first place, there is nothing for us to sell.

Deleting your data

You can delete your data at any time from Settings, Delete all data. This permanently removes your fasting history, weigh-ins, mood check-ins, profile, and Donut Box, and deletes your username, friend requests, friendships, stickers, and shared fasting status from CloudKit. You can also remove the app and delete Donut's iCloud data from your device's iCloud settings. Since Donut has no central server, there is no way for us to reach into your private iCloud storage on your behalf beyond what these built-in tools provide.

Where your data lives

Health information stays on your device and in Apple Health. Everything else lives on Apple's CloudKit infrastructure, under your own iCloud account. Donut (and Criers) never operates a server that stores or has access to your fasting or health data.

Changes

If this policy changes in a way that matters, we'll say so in the app before the change takes effect.

Contact

Questions about privacy: hello@criers.net