consumer health data privacy policy.
Consumer health data we collect
- From Apple Health, with your permission: heart rate variability (HRV), heart rate, resting heart rate, breathing rate, sleep, sleeping wrist temperature, blood oxygen, AFib history and irregular-rhythm notifications, mindful minutes, steps, workouts, heart-rate recovery, exercise minutes, active energy, VO₂ max and walking/running distance.
- Created by the app: your estimated cortisol (stress) score, its band, your usual (baseline), and trends.
- From you, during setup: age, sex, height, weight, sleep and exercise habits, symptoms you pick and your goals.
- From you, if you use Kai: your chat messages.
Why we collect it
To calculate and show your estimated score, your usual, your sleep and trend screens, your calm-day goals, and, if you switch Kai on, Kai's replies. We don't use consumer health data for advertising, and we don't sell it.
Where it comes from
Apple Health (fed by your phone and watch), plus what you type into the app.
Who we share it with
- OpenAI, through our API proxy AIProxy: only if you turn on Kai and agree on the consent screen. We send your message, up to your last 12 messages, and a one-line summary of today (estimated score, band, how it compares with your usual and which signal is adding the most), only to write Kai's reply. Your name and raw readings never leave your phone.
- Nobody else. Health readings, scores and setup answers stay on your devices. They are not sent to our analytics, crash-reporting, purchase or ad-measurement providers.
We don't sell consumer health data.
Your rights
You can:
- confirm whether we hold your consumer health data and get a copy of it, including the list of everyone we've shared it with;
- delete it;
- withdraw your consent to collecting or sharing it.
Most of it lives only on your device: turn off Health access in iPhone Settings → Health → Data Access & Devices → Cortisol IQ, and use Clear all data in the app. For anything else, email support@cortisoliq.com. We'll reply within 45 days. If we decline your request, you can appeal by replying to our answer with "Appeal" in the subject line; we'll respond within 45 days, and if you disagree with the result you can contact your state Attorney General.