Privacy Policy

• Account information — email address, and authentication data if you sign in with Apple or Google.
• Health context — goals, conditions, medications, allergies and similar information you choose to provide, used to personalize research and run safety checks.
• Protocol and tracking data — protocols you build or save, daily adherence logs, marker check-ins (sleep, mood, energy, etc.) and research queries and results.
• Subscription status — whether you have an active subscription, via Apple, Google or Stripe, and basic billing metadata. We do not receive or store your card details — payment is handled entirely by the app store or our payment processor.
• Usage data — basic product analytics (pages viewed, features used) to keep the app working and improve it.

We use your data to:

• Generate personalized research, protocol suggestions and adherence insights.
• Run interaction and safety checks against your health context.
• Provide, maintain and improve the app.
• Communicate with you about your account, subscription or support requests.

We never sell your data, and we do not use your health context for advertising.

Research, protocol suggestions and insights are generated using Claude, an AI model provided by Anthropic. Relevant parts of your query and health context are sent to Anthropic to generate a response; Anthropic processes this data under its own privacy and data-handling terms as our subprocessor. See our AI & medical disclaimer for what this means for the content you see in the app.

We share data only with the service providers that make the app work, each acting as our data processor under their own security and privacy commitments:

• Supabase — database and authentication hosting.
• Anthropic — AI research and protocol generation.
• RevenueCat, and Apple / Google / Stripe — subscription and payment processing.
• Resend — transactional email (reminders, account notifications).

We do not sell your personal data, and we only disclose it beyond these providers if required by law.

You can permanently delete your account and all associated data at any time, from Profile → Delete account in the app. This immediately and irreversibly removes your profile, health context, protocols, tracker and marker logs, saved research, chat history and insights. The one exception: if you shared a protocol template with the community, the template itself stays available to others who use it, but is no longer attributed to your account.

Deleting your account does not cancel an active subscription with Apple, Google or Stripe — cancel that separately from the store you subscribed through.

Data is encrypted in transit and at rest, and access is restricted by row-level security so you can only read or modify your own data. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

The Health Framework is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect data from children under 16.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to certain processing. You can exercise most of these rights directly in the app (Profile), or by contacting us at the address below.

We may update this policy as the app evolves. Material changes will be reflected by updating the "Last updated" date above, and, where required, by additional notice in the app.

Questions about this policy or your data can be sent to support@thehealthframework.com.

Data controller: Altenburger Webworks, Aadorf, Switzerland. As a Swiss-domiciled controller, we process personal data in accordance with the Swiss Federal Act on Data Protection (FADP).