Legal

Terms & Privacy

The terms of use and privacy practices that apply to Palmr Studio and its six apps — BB5, Lift Logic, Plainly, Earnt, Stamp, and Blockr. Written to be read, not just filed.

Last updated 24 October 2026 Provider Palmr Studio Governed by New Zealand law

The short version

BB5, Lift Logic, Plainly, Earnt, and Blockr are local-first. Almost everything you enter stays on your device, and you don't need an account to use any of the apps.
We don't sell your data, and there are no ad networks or cross-app tracking SDKs inside any of the apps. Lift Logic and Earnt keep an anonymous log of how the app itself is used, so we can see where people get stuck.
Sensitive data stays put. BB5 reads Health data read-only and never sends it off your device; Lift Logic keeps your training and photos on-device; Plainly keeps your finances on-device and only talks to your bank if you opt in to bank sync.
Earnt is the one app that sends your content by design. A meal photo is transmitted once to be analysed, and the result comes straight back to your phone — the photo isn't stored by us. Nothing else about your food, body, or Health data leaves the device.
Blockr keeps your plan on your device. Your blocks, projects and calendar details stay on your phone. Two things can leave it: anonymous usage analytics (which you can switch off), and, only if you choose to connect Claude, a copy of your upcoming blocks so Claude can plan with you. Blockr also measures which Meta ads lead to installs, and iOS asks your permission first.
Stamp is different: it is account-based café software. Café owners sign in, and member loyalty data (a first name, member code and stamp count) is stored in the cloud so Wallet cards can update. Customers only share a first name to join.
The full, binding terms are below. This summary is for convenience and doesn't replace them.

Who we are

These apps are made and operated by Palmr Studio ("Palmr", "we", "us", or "our") — an independent app studio based in New Zealand, run by an individual developer. Palmr builds and maintains six apps: BB5 (a habit game), Lift Logic (a training log), Plainly (a money tracker), Earnt (a food scanner that estimates what a meal costs in exercise), Stamp (café loyalty with Apple Wallet passes), and Blockr (a time-block planner) — together, the "Apps".

Palmr Studio is the party responsible for the Apps and for handling personal information under this policy. A postal address is available on request by emailing us (see Contact). These Terms of Use and this Privacy Policy apply to your use of the Apps and of this website. By downloading, installing, or using any of the Apps, you agree to the Terms of Use and acknowledge the Privacy Policy set out below. If you do not agree, please do not use the Apps.

Terms of Use

This section is the end-user licence agreement (EULA) and terms of service for the Apps.

Your licence to use the Apps

Subject to these terms, Palmr grants you a personal, non-exclusive, non-transferable, revocable licence to download and use the Apps on any device that you own or control, for your own personal use, or — in the case of Stamp — for operating loyalty at a café you own or manage. You may not copy, modify, distribute, sell, or lease any part of the Apps, and you may not reverse-engineer or attempt to extract the source code of the Apps except where that restriction is prohibited by law. You confirm that you are not located in a country subject to a government embargo that would make your use unlawful, and that you are not on any prohibited-parties list.

Apps downloaded from the Apple App Store

If you download an App from the Apple App Store, the following also applies. This licence is granted to you by Palmr, not by Apple, and your use must comply with the Apple Media Services Terms and Conditions. Apple's standard Licensed Application End User License Agreement applies to the Apps in full and prevails where these terms are silent; where it conflicts with these terms, the additional terms here are intended to add to — not reduce — your protections.

Apple is not responsible for the Apps. Apple has no obligation to provide any maintenance or support for the Apps.
Warranties and claims. Palmr, not Apple, is solely responsible for the Apps and their content. Any claim that an App fails to conform to a warranty, and any product-liability, legal, regulatory, or third-party intellectual-property claim relating to an App, is our responsibility, not Apple's.
Third-party beneficiary. Apple and its subsidiaries are third-party beneficiaries of these terms and may enforce them against you as a user.

Where you obtain an App through Google Play or another store, that store's terms also apply to your download and any purchases you make through it.

Subscriptions & purchases

Some features of the Apps are paid. Purchases and subscriptions are sold and billed through the app store you downloaded the App from (Apple App Store or Google Play), and subscription management is handled by RevenueCat on our behalf. The plans currently offered are:

BB5 — a premium subscription (monthly or annual), which may include an introductory free trial. BB5 has no free tier: a subscription (or an active trial) is required to use the app after onboarding, and that is made clear before you are asked to pay.
Lift Logic — a free tier plus a Premium upgrade available as a monthly or annual subscription.
Plainly — "Plainly Pro", a subscription that unlocks live bank-sync. Manual statement import, budgeting, and debt-payoff planning remain free.
Earnt — a monthly or annual subscription, which may include an introductory free trial. Earnt has no free tier: a subscription (or an active trial) is required to use the app after the introduction, and that is made clear before you are asked to pay.
Stamp — "Stamp Pro", a monthly café (B2B) subscription through the App Store, which may include an introductory free trial. A subscription (or an active trial) is required to issue cards and scan stamps after café setup, and that is made clear before you are asked to pay. The café pays; customers who add a Wallet card are never charged.

The exact plans, prices, and any free-trial terms are always shown to you in the app and on the store purchase screen before you buy, and prices may vary by region and change over time. The following applies to subscriptions:

Payment. Payment is charged to your Apple App Store or Google Play account when you confirm the purchase.
Auto-renewal. Subscriptions renew automatically at the end of each billing period unless you cancel at least 24 hours before the period ends. Your account is charged for renewal within 24 hours of the end of the current period.
Free trials. If a plan includes a free trial and you purchase a subscription, any unused portion of the trial is forfeited when the paid subscription begins.
Managing and cancelling. You can manage or cancel a subscription any time in your Apple App Store or Google Play account settings. Uninstalling an App does not cancel a subscription.
Refunds. Payments are processed by Apple or Google, so refunds are governed by their policies. We generally cannot issue store refunds directly, but you're welcome to contact us and we'll help where we can.

Acceptable use

You agree to use the Apps only for lawful purposes and not to: use them in any way that breaks the law; interfere with or disrupt the Apps or the servers they rely on; attempt to gain unauthorised access to any system; or use automated means to abuse leaderboards or other shared features. You are responsible for the data you enter and for keeping your own device secure.

Your data is yours

You retain ownership of the content and data you create in the Apps (your habits, workouts, finances, meals, photos, and so on). For BB5, Lift Logic, Plainly, and Earnt, data is local-first and primarily lives on your device. Stamp stores café and member loyalty data in the cloud — see the Privacy Policy below for the specifics per app.

Disclaimers & limitation of liability

Not health, fitness, or medical advice. BB5, Lift Logic, and Earnt are tools for tracking activity and food and are for general informational and motivational purposes only. They are not medical devices and do not provide medical, health, nutritional, dietetic, or professional fitness advice. Figures such as estimated one-rep-max, body-composition estimates, calorie targets, and habit goals are estimates, not clinical measurements. Always consult a qualified professional before starting or changing an exercise, nutrition, or health programme, and seek medical advice for any health concern.

Earnt's estimates in particular. Earnt identifies food from a photograph and estimates its calories, portion size and macronutrients, then converts that into an approximate exercise time using published metabolic (MET) values and a standard resting-metabolism formula. Every one of those figures is an estimate and can be materially wrong — a photograph cannot show what is inside a dish, and metabolic rate varies between individuals. Do not rely on Earnt for medical, clinical, or dietary decisions, for managing a medical condition, or where an accurate calorie or allergen figure matters. Earnt is intended for adults, is not designed for anyone with, or at risk of, a diagnosed eating disorder, and the exercise-cost framing is not suitable for everyone. If food, exercise or body image is a source of distress for you, please speak to a health professional rather than using this app.

Not financial advice. Plainly is a budgeting and debt-payoff planning tool for general informational purposes only. Its projections — including debt-free dates, interest saved, snowball/avalanche comparisons, budgets, and insights — are estimates based on the information you provide or import, and are not financial, investment, tax, accounting, or debt advice. Imported or parsed statement data may contain errors; always check the figures against your own records and, where appropriate, consult a licensed financial adviser.

Provided "as is". To the fullest extent permitted by law, the Apps are provided "as is" and "as available", without warranties of any kind, and we do not guarantee that they will be uninterrupted, error-free, or that any calculation is accurate for your circumstances. To the fullest extent permitted by law, Palmr will not be liable for any indirect, incidental, or consequential loss, or for any loss of data, arising from your use of the Apps.

Your consumer rights. Nothing in these terms excludes, restricts, or modifies any guarantee, right, or remedy you have under laws that cannot be lawfully excluded. For consumers in New Zealand, this includes the Consumer Guarantees Act 1993 and the Fair Trading Act 1986; for consumers in Australia, it includes the guarantees under the Australian Consumer Law. Where such rights apply, our liability is limited to the extent permitted by that law.

Changes & termination

We may update the Apps and these terms from time to time. If we make a material change to these terms, we'll update the "last updated" date above and, where appropriate, note it in the App. Continuing to use an App after a change means you accept the updated terms. You may stop using the Apps at any time by uninstalling them; we may suspend or end your licence if you materially breach these terms.

These terms are governed by the laws of New Zealand, and the New Zealand courts will have non-exclusive jurisdiction over any dispute.

Privacy Policy

Palmr is built privacy-first. The guiding rule for BB5, Lift Logic, Plainly, Earnt, Blockr and Labs is simple: your data stays on your device unless you choose otherwise. Stamp is café software with cloud accounts — see its section below.

This policy explains what each App does and doesn't collect, and how the small amount of data that does leave your device is handled. It applies to BB5, Lift Logic, Plainly, Earnt, Stamp, Blockr and Labs by Palmr.

What's true of every app

No account needed (except Stamp). You can use BB5, Lift Logic, Plainly, Earnt, Blockr and Labs without signing up. Stamp requires a café owner account, and customers who join a café provide the details needed for their Wallet pass.
Local-first storage (except Stamp). For BB5, Lift Logic, Plainly, Earnt, Blockr and Labs, the data you enter or generate is stored on your device. Other than the specific, limited data described in each app's section below (such as BB5's anonymous league entry, Earnt's one-off photo analysis and anonymous usage events, and, if you opt in, Plainly's bank sync), we don't receive it. Stamp stores café configuration and member loyalty records in Google Firebase so passes can update.
Your device's own backups. If you have iCloud Backup (iOS) or Google device backup (Android) switched on, your device's operating system may include an app's on-device data in your own cloud backup, under Apple's or Google's terms. That's your device setting, not something Palmr does — we don't upload that data ourselves. (Health data read through HealthKit is excluded from this and is never backed up.)
No advertising, no selling, no cross-app trackers. None of the Apps show ads or contain third-party ad networks, and we never sell or rent your personal information. The one exception to "no cross-app tracking" is Blockr's optional ad-measurement described in its section below, which iOS only allows with your permission. Lift Logic and Earnt each keep an anonymous product-usage event log, and Stamp records usage events against the café's account — all described in their sections below. Those logs are ours and are never shared or sold.
Purchases. When you buy a subscription or upgrade, the purchase itself is handled by Apple or Google, with RevenueCat managing your entitlement. RevenueCat receives a randomly-generated app user ID (for Stamp, the café account's user ID) plus purchase/receipt information so the App knows what you've bought — it does not receive your name, email, or the personal data you keep in the App.
Security. We keep the small amount of data that does leave your device to a minimum and protect it with appropriate technical measures — for example, the bank-connection token used by Plainly's optional sync is encrypted (AES-256-GCM) on our server.
Platform statistics. Apple and Google may provide us with aggregated, anonymised statistics about downloads and crashes through the App Store and Google Play. These are not linked to you.

Beyond that shared baseline, each App handles data a little differently — here are the specifics.

BB5 — habit game

Health data (read-only). With your explicit permission, BB5 reads your steps, sleep, and workouts from Apple Health (HealthKit) on iOS or Android Health Connect, so you don't have to log those habits by hand. This access is strictly read-only — BB5 requests no permission to write to Health and cannot change your Health data. Your Health data is used only on your device to score your daily habits. It is never transmitted off your device, never written to iCloud or any cloud backup, never sent to Palmr or any third party, and is never used for advertising, marketing, or any purpose other than the app features you see. You can grant or revoke this access at any time in your device's Health settings, and BB5 works with manual entry if you prefer not to connect Health at all.

The weekly league. BB5 places you in a weekly competitive bracket, which is powered by Google Firebase (Anonymous Authentication and Firestore). To do this, BB5 stores an anonymous, randomly-generated identifier, the display name you choose, and your XP total for that week on Firebase. No email address, real name, or Health data is ever sent to the leaderboard. Brackets are padded with computer-generated rivals, but the display name and weekly XP you submit may be visible to other real players in your league. You can have your league entry removed by contacting us, and resetting the app clears your local identity.

Notifications. BB5's habit reminders are scheduled locally on your device; no notification content is sent through our servers.

Age. BB5 is intended for adults and is not directed at children; its App Store and Google Play age ratings reflect this.

Lift Logic — training log

Works fully offline. Every core feature of Lift Logic works with no network connection. Everything you record — routines, logged sets, weight, nutrition and macros, body-composition figures, tasks, and settings — is stored on your device, and no user content is synced to a server by Palmr. The network is used only to verify your subscription (through Apple/Google and RevenueCat, as described above), to record the anonymous usage events described next, and for any optional feature we clearly label as requiring a connection.

Anonymous usage analytics. Lift Logic records how the app itself is used — when the upgrade screen was opened and what prompted it, which plan was selected, and whether a purchase or restore succeeded or failed — in Google Firebase Analytics, against a randomly-generated identifier. This is how a one-person studio learns where people get stuck. No training data and no personal information is sent: not your name, not your logged sets or routines, not your weight or body-composition figures, not your nutrition log, and never your progress photos. Uninstalling the app or resetting it clears that local identity, and you can ask us to delete the records tied to your identifier at any time.

Progress photos. Any progress photos you capture are saved into Lift Logic's own private, app-owned storage on your device. Palmr never uploads them and never receives them; they stay on your device (subject only to your own device backup settings noted above).

You're in control. Lift Logic lets you export your data as a single file and a full in-app reset permanently wipes it. Some capabilities (such as full data export) are part of the Premium tier — the availability of a given control may depend on your plan.

Plainly — money tracker

Your finances stay on your device. Your debts, budgets, transactions, savings goals, and any bank statements you import are stored on your device. When you import a PDF or CSV statement, it is read and parsed on your device — the statement's contents are not uploaded to Palmr.

Optional bank connection (Plainly Pro). Plainly can optionally connect to your New Zealand bank through Akahu, New Zealand's open-banking provider. This is entirely optional and only available on Plainly Pro. If you choose to connect:

You authorise the connection through Akahu's own secure sign-in flow. Palmr never sees or stores your bank login details — those are handled directly between you, your bank, and Akahu.
The connection is read-only. Plainly can display your account balances and transactions but cannot move money or make changes to your accounts.
To keep the connection working securely, an encrypted access token (AES-256-GCM) and a random session identifier are held on Palmr's backend server (hosted on Cloudflare's infrastructure). The app itself never holds the long-lived secret.
During a sync, Palmr's backend uses that stored token to request your read-only balances and transactions from Akahu and relays them to your device for display. Beyond the transient processing needed to complete a sync, we do not retain your bank transaction data on our server.
You can disconnect at any time from within the app, which revokes the connection and deletes the stored token both on your device and on our server.

Reminder. Plainly's figures and projections are informational estimates, not financial advice — see the disclaimers above.

Earnt — food scanner

Your photos. When you photograph a meal (or pick an existing photo from your library), that single image is sent over an encrypted connection to be analysed by Anthropic's Claude vision model, through a small relay server Palmr operates on Google Cloud Functions. The analysis comes back as text — a food name, an estimated portion, calories and macros — and that text is what Earnt saves, on your device. Palmr does not store your photo: it is passed through, not kept, and it is never used for advertising or to build a profile of you. The image stays in Earnt's own private storage on your phone unless you delete it. Anthropic processes the image to return the analysis under its own terms; we do not send your name, your body measurements, or any account identifier alongside it.

Your body and your food log. The profile you enter during setup — weight, height, age, sex, activity level and goal — and every meal you log, with its photo, calories and times, are stored only on your device. They are used to calculate your figures locally and are never uploaded to Palmr.

Health data (read-only). With your explicit permission, Earnt reads your steps and active energy from Apple Health (HealthKit), so the day's balance reflects what you've already burned. This access is strictly read-only — Earnt requests no permission to write to Health and cannot change your Health data. It is never transmitted off your device, never written to any cloud backup, never sent to Palmr or any third party, and is never used for advertising. You can grant or revoke it at any time in your device's Health settings, and Earnt works without it.

Anonymous usage analytics. Earnt records how the app itself is used — which setup step you reached, whether the paywall converted, when a scan succeeded — in Google Firebase (Anonymous Authentication and Firestore), against a randomly-generated identifier. This is how a one-person studio finds out where an app is confusing. No personal information is sent: not your name, not your photos, not your exact weight, not your Health data, and not the food you logged. Where a broad characteristic is needed to group the numbers, only a band is sent — an age band, a body-mass band, your goal and your activity level — never the underlying figure. You can ask us to delete the records tied to your anonymous identifier at any time, and resetting the app clears that local identity.

Camera and photo library. Earnt asks for camera access to photograph food and, optionally, photo-library access to pick a picture you've already taken. Both are used for that purpose alone, and you can decline or revoke either in your device settings.

Reminder. Earnt's calorie and exercise figures are estimates for general information and are not medical, nutritional or clinical advice — see the disclaimers above, which include an important note about who this app is and isn't for.

Stamp — café loyalty

Two kinds of people use Stamp. Café owners and their staff use the Stamp app to run a loyalty programme. The café's customers ("members") join on a web page and carry a loyalty card in Apple Wallet — they never need the Stamp app or an account. Stamp is the one Palmr app that keeps data in the cloud by design, because a Wallet card can only update if its stamp count lives on a server.

Café accounts. Signing up uses Google Firebase Authentication with an email address and password. We store your café's name, logo, brand colour, reward (for example "free coffee"), the number of stamps needed, and your join page's web address in Cloud Firestore; a logo you upload is stored in Firebase Cloud Storage. Your café's name, logo, colour and reward are public by design — they appear on your join page and on your customers' Wallet cards.

Members (your customers). A customer joins by scanning your join QR and typing a first name — we don't ask for an email address, phone number or date of birth. For each member we store that name, a member code, their stamp count and goal, and when they joined. Staff can also add a member by hand with a name and an optional note. Each stamp, redeemed reward or undone stamp is logged with the time and the member's name, so the café can see recent activity and fix mistakes. The join page remembers the member in that phone's browser storage, so reopening it brings back the same card.

Apple Wallet cards and updates. A member's Wallet card shows the café's name and logo, the member's first name and code, and their stamp count. When the card is added to Wallet, Apple's Wallet service registers that device with our server, giving us a device identifier and a push token for that card. We use them only to send the card an update through the Apple Push Notification service when its stamps or details change — no location, contacts or other device data is involved. Removing the card from Wallet unregisters the device, and we discard registrations Apple reports as no longer valid.

Camera and photos. The camera is used to read QR codes on Wallet cards; images are processed on the device and are never stored or sent to us. Photo-library access is used only to choose a café logo or to save your join QR poster.

Usage events. To understand how Stamp is used, the app records events such as signing up, finishing café setup, scanning a card, adding a stamp and viewing the subscription screen. They're stored in Firebase against your café account and don't include your customers' names. We also run an internal dashboard that shows us counts for each café — members, stamps, rewards and Wallet cards — so we can support cafés and keep the service healthy. It does not show customers' names or contact details.

Purchases. Stamp Pro is sold through the Apple App Store and managed with RevenueCat, as described above. For Stamp, RevenueCat is given your café account's user ID (never your name or email) so your subscription follows your account across devices.

Where it's stored. Stamp's database and server functions run on Google Cloud in Sydney, Australia.

Member data belongs to the café. The café decides to run a loyalty programme and who can join; Palmr stores and processes members' details on the café's behalf to provide Stamp. We never contact members, and never use, sell or share their details for marketing or anything else.

Deleting data. Café owners can delete their account at any time in the app (Settings → Delete account). That permanently removes the account, the café, its members and stamp history, its join page, uploaded logos, Wallet device registrations and the usage events tied to the account. A customer who wants their loyalty record removed can ask the café, or email us with the café's name and their member code (shown under the QR on their card).

Blockr — time-block planner

Your plan stays on your device. The blocks, projects, deadlines, modes, check-ins and statistics you create in Blockr are stored on your device. There is no Blockr account, and Palmr does not receive your block titles, project names or notes unless you connect Claude (see below). The first name you give during set-up is kept on your device only.

Calendar. With your permission, Blockr writes your blocks into a calendar called "Blockr" on your device, and reads your other calendars so it can show busy time and avoid clashes. That reading happens on your device and calendar details are not sent to Palmr. If your device calendars sync through iCloud, Google or another provider, that provider handles the synced copy under its own terms.

Notifications and modes. Block reminders are scheduled on your device. When a block starts, a mode can open Apple's Shortcuts app (to run a shortcut you made, for example to turn on grayscale) and open a Spotify playlist link you chose. Blockr does not read your Screen Time, your other apps or your music, and it does not use your location, contacts, camera or microphone.

Anonymous usage analytics. Blockr records how the app itself is used in Google Firebase Analytics, against a randomly-generated identifier: which screens are opened; that a block was created, started or checked in, with its length and which built-in mode it used; whether the upgrade screen was viewed or a purchase succeeded; and your answers to the set-up questions in broad categories (goal types, an estimate of daily phone hours, how much of your plans you usually finish). It never includes block titles, project names, notes, calendar details, the names of modes you create, or your name. You can switch this off at any time in Settings → Share anonymous usage, and you can ask us to delete the records tied to your identifier.

Ad measurement (Meta). Blockr includes the Meta SDK so we can tell which Meta ads lead to installs. It reports that the app was installed and opened, and a few standard events: finishing set-up, starting a free trial and making a purchase. It does not receive anything you create in Blockr. On iOS, Blockr asks for your permission (App Tracking Transparency) before the SDK may use your device's advertising identifier; if you say no, the identifier is not collected and everything in Blockr works the same.

Optional Claude connector (Blockr Pro). If you choose to connect Claude, Blockr uploads a copy of your recent and upcoming blocks (titles, times, project names, the mode each uses, check-in status), your mode names, your work hours and your time zone to Palmr's server, which runs on Google Cloud (Firebase) in Sydney, Australia. This is what lets Claude read your plan and add or move blocks. Changes Claude makes are held there until the app next opens and applies them. The connection uses a short pairing code shown in the app and access tokens that you can revoke. What Claude reads from Blockr then becomes part of your own conversation with Claude and is handled by Anthropic under your Claude account and its privacy policy, not by Palmr. In Blockr you choose what Claude may do (see, create and move, delete); deleting is off by default, and every change is listed in the app and can be undone. Disconnecting in the app (Claude tab) deletes the uploaded copy and revokes access. If you never connect Claude, nothing is uploaded.

Purchases. Blockr Pro is sold as a subscription or a one-time lifetime purchase through the Apple App Store and managed with RevenueCat, as described above. RevenueCat receives a randomly-generated app user ID and purchase information, not your name, email or anything you keep in Blockr.

Age. Blockr is intended for adults and is not directed at children.

Labs by Palmr — bloodwork & bio age

Your results stay on your device. The lab results you upload, the markers read from them, your bio age, meals, blood pressure readings, screen-time entries and settings are stored on your device. There is no Labs account. You can export everything as a file (Settings → Export my data) and erase it (Settings → Delete all my data).

Apple Health. With your permission, Labs reads sleep, heart rate, heart rate variability, resting heart rate, blood oxygen, breathing rate, wrist temperature, VO₂ max, steps, weight, height, blood pressure, workouts, and your date of birth and sex from Apple Health, and it saves blood pressure readings you enter. That reading happens on your device. Health data is never used for advertising, never sold, and is not sent to Palmr except as part of a request you make to Labs AI (below). You can change what Labs can read at any time in the Health app.

AI features. When you upload a lab report (a PDF or photo), log a meal by photo or description, or ask Labs AI a question, that content is sent to Palmr's server on Google Cloud (Firebase) in Sydney, Australia, which passes it to Anthropic's Claude API to produce the result. For questions, Labs also sends a short summary of the numbers needed to answer (for example your latest lab markers, recent sleep, vitals, workouts and meals). Nothing identifying is sent with it — no name, email or account. Palmr's server does not store the file, the photo, your question or the answer; the result is returned to your device and saved there. Anthropic does not use this data to train its models and handles it under its commercial terms.

Barcodes. When you scan a food barcode, only the barcode number is sent to Open Food Facts, a free public food database, to look up the product.

Anonymous usage analytics. Labs records how the app itself is used in Google Firebase Analytics, against a randomly-generated identifier: which screens are opened; your set-up answers in broad categories (goals, how often you train, whether you take creatine, whether you have recent bloodwork); that a lab result was uploaded and how many markers it had, that a meal or reading was logged; and paywall and purchase events. It never includes your lab values, health data, meals, questions or answers. You can switch it off at any time in Settings → Share anonymous usage data, and you can ask us to delete the records tied to your identifier.

Purchases. Labs is a subscription with a free trial, sold through the Apple App Store and managed with RevenueCat, as described above. RevenueCat receives a randomly-generated app user ID and purchase information, not your name, email or health data.

Not medical advice. Labs explains results and suggests lifestyle changes for general wellness. It does not diagnose, treat or prevent any condition, and it is not a substitute for a doctor. Labs is intended for adults and is not directed at children.

This website & cookies

This website (our marketing site) uses Google Analytics via Firebase to understand aggregate traffic — for example, how many people visit, which pages are viewed, and general device and country information. This is standard website analytics and is entirely separate from the Apps — the anonymous in-app usage logs kept by Lift Logic and Earnt, described above, are different systems and are not joined up with anything measured here. Analytics data is aggregated and is not used to identify you personally. Firebase Analytics may set cookies or use similar identifiers in your browser; you can block these through your browser settings, and you can opt out of Google Analytics using Google's opt-out browser add-on. We do not use the website for advertising and do not sell website-visitor data.

Data retention, deletion & your rights

On-device data stays on your device until you delete it. Each App has an in-app reset that permanently wipes its data, and uninstalling an App removes its local data from your device.
BB5 leaderboard entry. Your anonymous weekly-league record (anonymous ID, display name, weekly XP) lives in Firebase. We retain current and recent league data to run brackets; you can contact us to have your entry deleted at any time.
Plainly bank connection. Disconnecting your bank in Plainly revokes and deletes the encrypted token and session held on our server. We do not retain your bank transaction data on the server beyond completing a sync.
Lift Logic usage events. The anonymous events tied to your randomly-generated identifier are kept while they're useful for improving the app. Contact us with a deletion request and we'll remove the records for that identifier.
Earnt photos and usage events. A meal photo is passed through for analysis and is not retained by Palmr; the copy on your phone is deleted when you delete the entry or reset the app. The anonymous usage events tied to your randomly-generated identifier are kept while they're useful for improving the app — contact us with a deletion request and we'll remove the records for that identifier.
Stamp café and member records. Café configuration, member loyalty data, Wallet device registrations and usage events are kept while the café account is active. A café owner can delete all of it at any time in the app (Settings → Delete account), which removes it straight away. A member can ask the café, or email us, to remove their loyalty record.
Blockr. Your plan lives on your device until you delete it (Settings → Erase all Blockr data) or uninstall the app. The anonymous events tied to your randomly-generated identifier are kept while they're useful for improving the app, and you can switch them off in Settings or ask us to delete them. If you connect Claude, the uploaded copy and pending changes are kept until you disconnect (Claude tab → Disconnect) or ask us to remove them, and are then deleted.
Purchase data held by RevenueCat, Apple, and Google is retained under their respective policies.
Your rights. Under the New Zealand Privacy Act 2020 (and equivalent rights for Australian users), you have the right to ask what personal information we hold about you, to request access to it, and to request correction. Because we hold so little, most requests are straightforward — just get in touch. If you're not satisfied with how we handle a privacy matter, you can contact the New Zealand Office of the Privacy Commissioner.
Children. The Apps are not directed at children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.
International processing. The Apps are made in New Zealand and aimed primarily at New Zealand and Australian users. Where data is processed by our providers (Apple, Google/Firebase, RevenueCat, Anthropic, Akahu, and our Cloudflare-hosted backend), it may be processed on their infrastructure in other countries under their own privacy commitments. Stamp's database and server functions run in Google Cloud's Sydney (Australia) region.

Third-party services

The Apps and this website rely on a small, deliberately short list of third-party services. We only share the minimum data needed, and any provider that receives data on our behalf is required to protect it to a standard consistent with this policy and to use it only for the purposes described here. Each has its own privacy policy:

Apple App Store and Google Play — app distribution and payment processing. See Apple's Privacy Policy and Google's Privacy Policy.
RevenueCat — subscription and purchase management for the Apps. See the RevenueCat Privacy Policy.
Google Firebase — powers BB5's anonymous weekly leaderboard, Lift Logic's and Earnt's anonymous usage analytics, Earnt's photo-analysis relay, and Google Analytics for this website. It also runs Stamp: café accounts, the café and member database, logo storage, the server that issues and updates Wallet cards, and Stamp's usage events. For Blockr it provides anonymous usage analytics and, only if you connect Claude, the server that holds the copy of your plan. For Labs it provides anonymous usage analytics and runs the server in Sydney that relays your AI requests to Anthropic without storing them. See Firebase's privacy information.
Apple Wallet and the Apple Push Notification service — deliver Stamp's loyalty cards and their updates. See Apple's Privacy Policy.
Anthropic — analyses the meal photo you take in Earnt, and only that, with nothing identifying sent with it. In Labs, it reads the lab reports you upload, estimates meals you log by photo or description, and answers your questions to Labs AI, as described in Labs' section. If you connect Claude to Blockr, Anthropic also handles whatever Claude reads from your plan, as part of your own Claude conversation. See the Anthropic Privacy Policy.
Open Food Facts — Labs only: looks up a food by the barcode number you scan. See Open Food Facts' privacy policy.
Akahu — optional New Zealand open-banking connection in Plainly only. See Akahu's Privacy Policy.
Meta — Blockr only: the Meta SDK measures which Meta ads lead to installs, as described in Blockr's section. See Meta's Privacy Policy.
Cloudflare — hosts Palmr's small backend that stores Plainly's encrypted bank-connection token. See Cloudflare's Privacy Policy.

We do not show third-party ads in any App. Blockr uses Meta's SDK only to measure which Meta ads lead to installs, as described in its section above, and only with your permission where iOS requires it. Lift Logic and Earnt each record anonymous usage analytics through Google Firebase, and Stamp records usage events against café accounts, as described in their sections above; that data is used only to improve and support the app it came from, is never sold, and is never used to build an advertising profile of you.

Contact

Questions about these terms, a privacy or data request, or anything else about the Apps? We'd genuinely like to hear from you.

Email (privacy, data requests & support): PalmrStudios@gmail.com
For help with a subscription, a restore, or a bug, see our Support page.
A postal address is available on request.

Palmr Studio · New Zealand.

This combined Terms of Use and Privacy Policy was last updated on 24 October 2026. It applies to BB5, Lift Logic, Plainly, Earnt, Stamp, and Blockr. Earlier versions are superseded.