Privacy and your data

Three controls sit in the app itself. A Face ID or passcode lock on the app. An export of everything you have ever logged, as a file you own. And account deletion that takes your data with it. Behind those sits the privacy policy, which sets out what is collected, who processes it and how long it is kept.

The controls, step by step

1. Lock the app. Turn on Face ID or a passcode so the log stays closed even when someone else is holding your phone.
2. Export. Download everything you have logged as a file. It is yours to keep, move or share with a clinician.
3. Delete. In the app, open the Profile tab, tap Edit Profile, scroll to the bottom and tap Delete Account. Or email [email protected] from your account address with the subject line "Account Deletion Request".

What deletion removes

Deletion is processed within 30 days of the request. Deleting the account does not cancel a subscription bought through the App Store or Google Play; that is cancelled in the store's own settings.

Export first if you think you might want the record later. Once deletion is processed it cannot be undone, and the export is the only copy you will have.

What the policy commits to

• Encryption. Data is encrypted in transit using TLS 1.2 or later and sensitive data at rest using AES-256.
• No sale. The company does not sell personal information.
• Apple Health data. HealthKit data is not sold, not used for advertising, and not shared with third parties without your explicit consent. You can revoke access at any time in the Health app's settings.
• The AI coach. Remi is powered by Anthropic's Claude API. Your messages and relevant protocol and body details may be sent for processing; email, credentials and payment details are not. The policy states the API is used under zero-retention terms that prevent your data being used to train Anthropic's models. Not using Remi means none of that is sent.
• Your rights. Access, correction, deletion and data portability requests go to [email protected], with response times set out in the policy.

The policy also lists what is collected automatically, such as device information and usage analytics, and the categories of service providers that process data on the company's behalf, such as cloud hosting and analytics. It is worth reading in full at /privacy.

Why this matters more than people assume

Many people assume health data in an app is covered by HIPAA. Usually it is not. The Federal Trade Commission's guidance for health app developers explains that the HIPAA rules apply to health plans, most healthcare providers, clearinghouses and their business associates, and that they "likely wouldn't apply to consumer health information maintained in an app" that is not run by one of those. Other laws, including the FTC Act and state privacy laws, can still apply. The practical upshot is that for a consumer app, the privacy policy and the controls in front of you are what protect your data. That is why the lock, the export and the delete button are features, not settings.

Who it is for

• Anyone logging compounds, labs or body data who wants to know exactly where it goes.
• People who want to bring their full record to a clinician as a file.
• Anyone who wants to leave and take their data with them.

How it connects to the rest of the app

Everything recorded by the dose log, protocol planner, vial tracker, site map, nutrition, supplements, training, bloodwork, wearables, body scanner and Remi is covered by the export and by deletion. The community sees that you logged and nothing else.

Turn on the app lock today, and run one export so you know what the file looks like. The app is on the download page.