Privacy policy

Updated 2026-11-06. Operator: ФОП Іван Чернокніжніков (Ivan Chernoknizhnikov). Questions: [email protected].

What we store

We don't collect your name, email, phone or address.

How it is protected

Every record is encrypted with AES-256-GCM under a key that belongs to your account alone; the key itself is stored encrypted under the server's master key. The database holds only ciphertexts.

What stays readable: the day of an entry, its source (by hand, a service's name or a file) and when it changed. Values, kinds of entries and text are not in the database in the clear.

The tokens of services you connect are encrypted under your key too.

Who sees it

The assistant (Claude by Anthropic or ChatGPT by OpenAI) sees what the server returns to it in the conversation, under its own operator's rules.

Connected services (such as Oura, Withings, Strava) get only a read permission from us, and we copy their data over.

We don't sell data and don't show it to advertisers.

Where it runs and how long it is kept

The service runs on the operator's server behind Cloudflare, which sees service traffic but does not decrypt records: data keys live on the server, not at Cloudflare.

Database backups are kept for 14 days. After an account is deleted, the copies stay unreadable because the key is gone.

The service is for people aged 16 and over.

Your rights

To download everything, ask the assistant for an export. To delete everything, ask it to delete. Deleting removes the account and its key, so copies in backups can no longer be opened.

The basis for processing health data is your explicit consent (GDPR art. 9(2)(a)); delete your data to withdraw it.