Your data is yours.

This is not a policy written for lawyers. It's written for you. Last updated July 2, 2026.

What we collect

Data you log yourself — glucose, weight, mood, workouts, meals
Data from devices you connect — Apple Health, Oura, Whoop, Dexcom, Stelo, Lingo, Garmin
Account info — name, email, iPhone model, iOS version
App analytics — screens viewed, time in app (anonymous, aggregated)

What we never do

Sell your data to anyone. Ever.
Share your data with advertisers, insurers, or employers.
Use your data to train a model for a third party.
Keep your data if you delete your account. Full deletion within 30 days.

Where your data lives

Personal Health Information (PHI) is encrypted at rest on our servers (AES-256) and in transit (TLS 1.3). We run our infrastructure on Railway with HIPAA-adjacent controls. Sensitive data never touches our logs.

Doctor PDF

When you generate a Doctor PDF, we compile it on-device or on our server (your choice), and we delete the server copy within 24 hours. You control who sees it.

Your rights

Export everything as JSON or CSV, any time, from the app
Delete everything with one tap in Settings → Privacy
Request a copy of everything we hold about you by emailing privacy@habitcure.com

Contact

Privacy questions: privacy@habitcure.com