July 23, 2026
Privacy: habits on device, PHI in the vault
Rituals and check-ins stay local. Lab PDFs and account data live behind your login with short-lived access to files.
Not everything needs to leave your phone. Daily rituals and mood/energy check-ins are stored on-device so they work offline and feed Trends when you’re signed in. That keeps lightweight habits snappy without shipping every tap to the cloud.
What we treat carefully
Lab PDFs and visit packets are PHI-class. They go to encrypted object storage; the app uses short-lived signed URLs. Database rows are scoped to your user. Guests can browse Discover content but must sign in before Ask, Scan, Health sync, or premium surfaces.
Your controls
You can delete your account from the app. Privacy Policy and Terms spell out what we collect and why. We keep the wellness disclaimer separate from those legal docs — one is “not medical advice,” the other is the contract.
Our purpose
Build a companion that explains your data with receipts, respects the boundary with medicine, and doesn’t harvest a waitlist of emails we never intended to send.