Draft. This page is being reviewed before Ayme launches. Items in [brackets] are still being filled in.

Consumer Health Data Privacy Policy

Last updated: [DATE]

This policy covers “consumer health data” that Ayme, made by [LEGAL ENTITY NAME], collects, shares, and uses. It adds to our Privacy Policy.

Consumer health data we collect

Foods you log and their nutrition (calories, protein, carbs, fat, fiber)
Body measurements: weight, height, sex, birth year
Measurements you enter (waist, hips, etc.), progress photos, and period dates and sleep you log by hand. Photos, period dates, and logged sleep are never stored on our servers and never go to the coach
Goals and targets (for example, a weight-loss pace)
Activity, sleep, and body readings from Apple Health, read on your phone if you allow each one: steps, distance, flights, exercise and stand time, time in daylight, active and resting energy, workouts and the heart rate during them, sleep and its stages, heart rate, resting heart rate, heart rate variability, breathing rate, blood oxygen, wrist temperature, VO₂ max, walking heart rate, cardio recovery, breathing disturbances, menstrual cycle (only if you turn it on), blood pressure, ECG results as Apple classified them (never the recording), AFib History, and Apple’s heart and sleep notifications
Estimates we calculate from these, such as your weight trend and real daily burn
Workouts you log in Ayme (exercises, sets, reps, weights) and your training answers
What you tell the AI coach, and meals you describe in words, if you use them

Why we collect and use it

To provide the features you ask for: your diary and totals, targets, Reality check estimates, and coach replies. We don’t use it for advertising, and we don’t sell it.

Where it’s kept

On your iPhone. Our servers never hold your diary or the other data above. While iCloud Drive is on for Ayme, a compressed copy of your diary goes to Ayme’s own folder in your iCloud (Apple’s, in your own Apple Account), so deleting the app or a new iPhone loses nothing; it never includes progress photos, what you log by hand about periods and sleep, or Apple Health data. Turn it off in Profile › Your data. If you back up your iPhone, that backup includes Ayme’s data too, as it does your other apps’: iCloud Backup or a backup to a computer. We never receive either. Deleting the app deletes this data from your phone; the iCloud copy stays until you delete it in iPhone Settings › your name › iCloud › Manage storage › Ayme. Profile › More › Export gives you a copy at any time.

Where it comes from

From you (what you enter or log), from Apple Health on your iPhone (with your permission), and from calculations the app makes on your phone.

OpenAI, to write coach replies and to read meals you describe in words, only after you agree in the app (as our processor). For the coach this can include summaries of your activity and sleep from Apple Health (steps, active energy, workouts, and sleep hours; never the sleep you log by hand), which you can turn off in Profile › Coach. Our hosting provider (Supabase) passes these through our server without storing them (as our processor).
We don’t share consumer health data with anyone else, except where the law requires it.

We never send raw Apple Health data off your iPhone; only the coach’s summaries, as above.

Your rights

You can:

confirm whether we collect, share, or sell your consumer health data, and get a list of the third parties and affiliates we share it with;
get a copy of your data (Profile › More › Export gives you your diary right away);
withdraw consent (Profile › Coach);
delete your data (it’s on your iPhone, so deleting the app deletes it; Profile › Account › Delete account deletes your account and what our servers hold; neither reaches your iPhone’s own backup, which you manage in iOS).