consumer health data privacy policy.
"Consumer health data" means personal information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health. For Cortisol IQ, almost all of it stays on your own iPhone and Apple Watch. We don't sell it, and we never give it to advertisers.
1. The consumer health data we collect, and why
| Category | Examples | What we use it for |
|---|---|---|
| Readings from Apple Health, with your permission | Heart rate variability (HRV), heart rate, resting heart rate, breathing rate, sleep, sleeping wrist temperature, blood oxygen, AFib history and irregular-rhythm notifications, mindful sessions, steps, workouts, heart-rate recovery, workout effort, exercise minutes, active energy, VO₂ max, walking and running distance | Work out your estimated cortisol score and the optional readiness number; know when a reading can't be trusted (AFib records pause the score); show your sleep, workout and fitness screens |
| Information the app works out | Your estimated cortisol score and band, your usual for each signal, trends, alerts, the optional readiness number, sleep score | Show you the score, explain each point, send the alerts you allow, track your goals |
| Information you enter | Age or birthday, sex, height, weight, sleep and exercise habits, how stress tends to show up for you, your goals, your morning "How ready do you feel?" answers | Personalise your plan, and compare you with typical values for people of a similar age and sex until the app learns your usual |
| Apple Ads attribution | The Apple Ads campaign, ad group and search keyword that led to your install (a keyword can reveal a health interest, such as a search for a cortisol test) | Measure our own Apple Ads. Kept on our growth server; never sent to analytics or ad networks |
| Kai chat, if you switch it on | What you type to Kai; today's estimate (score, band, how it compares with your usual, the signal adding the most) only if you switch that on | Write Kai's replies |
We don't use consumer health data for advertising, and we don't use it to build ad audiences or to place "geofences" around health care locations.
2. Where it comes from
- Apple Health, which collects readings from your iPhone, your watch and any other apps you let write to it.
- You, in the app's setup, Settings, check-ins and Kai chat.
- The app itself, which calculates your score and trends on your devices.
3. The consumer health data we share, and with whom
| Recipient | What's shared | Why | When |
|---|---|---|---|
| OpenAI, through AIProxy (a relay service), both acting for us | Your Kai messages (the current one plus up to 5 earlier ones), and today's estimate only if you allow it. Never your name or Health readings | To write Kai's replies | Only after you turn on Kai on its consent screen |
That's the only sharing. Your Health readings, scores, readiness and setup answers stay on your devices. They aren't sent to us, or to our subscription, analytics, crash-reporting or ad-measurement providers. If you choose to sign in, your account record holds your name and email only, with no health data.
We may also disclose information if the law requires it (for example, a court order), and we'd tell you where we're allowed to.
Affiliates: we have none that receive consumer health data.
Sale: we don't sell consumer health data. We'd never do so without your signed, separate authorisation, as Washington law requires.
4. App events we share with Meta
To measure our ads, the app sends Meta events such as "installed", "opened", "finished setup" and "bought or renewed a plan" (with price), together with device details, an install ID and your IP address, and your ad identifier only if you allow tracking. So Meta learns that you use Cortisol IQ, a stress-score app. The events carry no readings, scores, answers or chats, and we don't treat them as consumer health data. Purchase records go to Apple, Superwall and our own growth server, and session-level screen IDs go to PostHog, also without health information. The details, and how to limit them, are in how we measure ads (privacy policy).
5. Your rights
You have the right to:
- Confirm and access: find out whether we collect, share or sell your consumer health data, get a copy, and get a list of every third party and affiliate we've shared it with, with an email or other way to contact them.
- Withdraw consent: stop us collecting or sharing it.
- Delete it: we'll delete it from our records and tell everyone we shared it with to delete it too.
- Appeal if we turn down a request.
How to use them:
- Most of your consumer health data is only on your devices, so you control it directly:
- stop new readings: iPhone Settings › Privacy & Security › Health › Cortisol IQ;
- stop Kai sharing: You › Kai chat › turn it off (or leave "Also send today's estimate" off);
- delete: You › More settings › Account and subscription › Delete account and data, and delete the app (if your subscription has ended and you can't reach that screen, email us).
- For anything else, email support@cortisoliq.com with "Access", "Delete" or "Withdraw consent" in the subject. If you signed in, write from that email. We'll confirm receipt, verify the request in a way that fits the data, and answer within 45 days. If we need more time, up to another 45 days, we'll tell you why within the first 45. Kai requests carry no account or user ID, so OpenAI and AIProxy can't match them to you; we'll still pass your deletion request to them within the same time, and OpenAI deletes requests after at most 30 days.
- To appeal a decision, reply to our answer with "Appeal" in the subject within 45 days. We'll respond in writing within 45 days of receiving it, and explain why. If we deny the appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint (or your own state's Attorney General).
Using these rights is free (up to twice a year) and won't change how we treat you.
6. Changes to this policy
If we change this policy, we'll update the date above and, before a significant change takes effect, let you know inside the app. We'll ask for your consent before collecting or sharing consumer health data in a new way.
7. How we protect it
Scoring runs on your devices, so your readings never reach our servers. Data sent to Kai is encrypted in transit. Only the people who need it can access our vendor accounts, and our processors may use the data only to provide their service to us.
8. Contact
All American Atlas LLC · 1500 N Grant St, Ste R, Denver, CO 80203, USA · support@cortisoliq.com