Last updated: 1 September 2026
Deltion is a personal medical-records app for iPhone, iPad and Mac. It is private by default: there is no account to create, no sign-in, and no server of ours — not because your data is protected on it, but because it does not exist. Your documents and everything read out of them are stored on your device.
We never collect, receive or store your medical data. There is no analytics, no tracking, no advertising, and no data sold or shared with anyone. Three things can leave your device, all of them optional and all of them started by you: cloud AI analysis if you add your own provider key, iCloud sync if you turn it on, and a bug report if you send one. Each is described below. If you use none of them, nothing your device holds ever leaves it.
NSFileProtectionComplete) so they are inaccessible
while the device is locked.By default, analysis runs on your device using Apple's built-in on-device model, on hardware that supports it. Nothing is uploaded, nothing is sent to us or to anyone else, and there is nothing to pay. This is what happens unless you deliberately change it.
You may instead supply your own API key for a cloud provider (Anthropic Claude, OpenAI GPT-4 or Google Gemini). If you do, the extracted text of a document you choose to analyse is sent directly from your device to that provider, under your own account with them and their privacy policy. It is not routed through any server of ours, because there isn't one. Your API key is held in the device Keychain and is never transmitted anywhere except to the provider it belongs to.
If you turn on iCloud sync, your library is synchronised through your own iCloud account so it appears on your other devices. It is stored in a CloudKit private database, which is part of your Apple Account: only your devices, signed in as you, can read it. We have no access to it whatsoever — a private database is not visible to the app's developer, and there is no administrative view of it for us to look at. Apple handles that storage under Apple's privacy policy. No third party other than Apple is involved, and sync is off unless you switch it on.
Two different protections apply, and it is worth being precise about which is which. The document files themselves are sealed on your device before they sync, with the same AES-256-GCM key described above; that key travels between your devices in a CloudKit end-to-end encrypted field, so Apple stores the files as ciphertext it cannot read. The details Deltion reads out of those documents — titles, summaries, measurement values, dates — sync as ordinary records in your private database. Those are protected by your Apple Account and by Apple's encryption in transit and at rest, but they are not sealed with the app's own key, so we describe them as private to your account rather than end-to-end encrypted.
If you enable Apple Health sync, Deltion reads and writes health samples through Apple's HealthKit on your device, with your explicit permission per data type. This data stays within Apple Health on your device and is not transmitted to us.
If you use the in-app "Report a Bug or Request a Feature" form, the information you type (an optional name, the type of request, and your description) plus the app version is submitted to our public issue tracker on GitHub so we can act on it.
Because issues are public, please do not include sensitive personal or medical information in a bug report or feature request.
We do not sell, rent or share your data, and we have no mechanism by which we could: nothing about your library reaches us. The only outbound transfers are the three you control — optional cloud AI analysis (to the provider whose key you supplied), optional iCloud sync (to your own Apple Account), and feedback you choose to submit. Analysis on the device, which is the default, transfers nothing at all.
Deltion is not directed at children and does not knowingly collect information from children.
We may update this statement as the app evolves. Material changes will be reflected here with a new "last updated" date.
Questions or privacy concerns can be sent to bursts.mansard-0v@icloud.com, or raised on our public issue tracker. See the support page for more ways to get help, and the Terms of Service for the terms you use Deltion under.
Deltion does not provide medical advice and does not replace your doctor. Always consult a qualified healthcare professional for medical decisions.