trunnk
Privacy Policy
Effective 9 November 2026
The short version. trunnk keeps your treats, workouts, photos and Health-derived totals on your phone. It does not need an account, and it has no ads, trackers or third-party analytics.
If you choose to sign in with Apple, a handful of daily numbers (your balance, miles earned and spent, treat count and step total for each day) are stored on our servers so they can be verified and, later, shared with friends you accept. You can delete that account and its data from inside the app at any time.
1. Who we are
trunnk is made by Kinpo LLC ("we", "us"). This policy covers the trunnk app for iPhone and Apple Watch, its Home Screen widget and watch complication, and the servers that support them. Questions go to andrew@kinpollc.com.
2. What stays on your device
The following is stored only on your iPhone (and, as a read-only snapshot, on a paired Apple Watch). We cannot see it.
- Every treat and workout you log, including when, what, how long and what it cost or earned.
- Your settings: step goal, credit cap, time zone, whether Health is connected, whether you wear a fitness tracker, and your Pro status.
- Daily step and distance totals read from Apple Health (see section 3).
- Photos you attach to workouts as proof (see section 5).
- Your custom treats, if you are a Pro user.
Deleting the app deletes all of this. There is no cloud backup of the ledger other than whatever your own iCloud or iTunes device backup includes.
3. Apple Health
With your permission, trunnk reads two things from Apple Health: your daily step count and your daily walking and running distance. It uses them to work out how many miles you have earned each day.
- trunnk never writes to Apple Health.
- Health data is not used for advertising or marketing, is not sold, and is not shared with any third party or data broker.
- Your step and distance history stays on your device. The one exception is below: if you sign in, the daily step total for each day is included in your daily summary (section 4). The distance figure and the per-hour detail never leave the phone.
You can revoke Health access at any time in the Health app under Sharing, or in iOS Settings. The app keeps working; it just stops earning miles automatically.
4. Optional account and daily summaries
trunnk works fully without an account. Signing in with Apple is needed only for photo verification and, in a later version, friends and accountability groups.
What we receive when you sign in
- From Apple: a stable user identifier for trunnk, and your name and email address if you choose to share them. If you use Apple's "Hide My Email", we receive a relay address instead.
- From you: a display name, and later a handle, that friends can see.
Daily summaries
While signed in, the app uploads one summary per ledger day for today and yesterday. A summary is six values: the date, your end-of-day balance, miles earned, miles spent, number of treats, and your step total. Treat names, workout types, photos and distance are never uploaded. Summaries are visible to you and, once the friends feature ships, to friends whose requests you have accepted. Nobody else can read them.
Where it lives
Account and summary data is stored in a Postgres database hosted by Neon (neon.tech) in the AWS us-east-1 region in the United States. Access is enforced by row-level security tied to your signed-in identity.
Deleting your account
Settings → Account → Delete account removes your account, profile, friendships and all summaries from our servers immediately. Your local ledger stays on your phone.
5. Photo verification (Pro)
Pro users who are signed in can attach a photo to a workout. When you do, a resized copy (at most 2 MB) is sent over HTTPS to our verification service, which forwards it to Anthropic's Claude model with the name of the workout you picked and asks whether the photo shows that workout.
- Our service does not store the photo. It logs only the request status, latency, size and a hashed form of your user ID.
- Anthropic processes the image to return a result under its commercial API terms; we do not permit it to be used to train models, and we do not receive anything other than the structured verdict.
- The original photo remains on your phone in the app's own storage. Verification labels the workout; it never changes the miles.
- There is a limit of 10 verifications per user per day.
6. Purchases
trunnk Pro is a one-time in-app purchase handled by Apple. Apple processes the payment and gives the app only a receipt that confirms the entitlement. We never see your card or payment details.
7. What we don't do
- No advertising, no ad identifiers, no tracking across apps or websites.
- No third-party analytics or crash-reporting SDKs. The app's privacy manifest declares no tracking.
- No selling or renting of personal data, ever.
8. Data we hold, at a glance
| Data | Where | Why | Shared with |
|---|---|---|---|
| Treats, workouts, settings | Your device | The ledger | Nobody |
| Health steps and distance | Your device | Earning miles | Nobody (step total in summaries if signed in) |
| Workout photos | Your device; transient copy to verifier | Verification (Pro) | Anthropic, for processing only |
| Apple user ID, name, email | Our servers (Neon, US) | Your account | Nobody |
| Daily summaries | Our servers (Neon, US) | Verification quota; friends | Friends you accept |
| Purchase receipt | Apple; your device | Pro entitlement | Apple |
9. Children
trunnk is not directed at children under 13 and we do not knowingly collect personal data from them. If you believe a child has created an account, email us and we will delete it.
10. Your rights
Because the ledger lives on your device, you already hold and control it. For server-side data you can view it in the app, delete it in the app, or email us to ask what we hold, correct it, or erase it. We answer within 30 days. If you are in the EU, UK or a US state with a privacy law, these are the mechanisms for exercising your statutory rights.
11. Changes
If this policy changes in a way that matters, we will update the date at the top and, for signed-in users, say so in the app before the change takes effect.
12. Contact
Kinpo LLC · andrew@kinpollc.com