SuprHealth

Privacy policy

Last updated November 4, 2026. Applies to SuprHealth on the web, iPhone, iPad and Android.

SuprHealth helps you log and understand your sleep, food, training, mood, cycle, medicines, lab results and other health records. Health data is personal, so this page says plainly what we keep, why, and what you can do about it. We don't sell your data and we never use your health data for advertising.

What we collect

  • Account: your name and email address (or none, if you use the app as a guest), and an account id.
  • What you log: entries such as meals, water, workouts, sleep, mood, symptoms, medicines, cycle and pregnancy details, lab results, notes, journal text and photos you add, plus your goals, targets and settings.
  • Health app data, if you connect it: with your permission the app reads steps, workouts, sleep, heart rate, heart rate variability, resting heart rate, weight, distance, energy, respiratory rate and oxygen saturation from Apple Health or Health Connect, and can save workouts, weight, water and mindful minutes back. You choose each type in the system prompt and can turn it off there at any time.
  • Location, only when you use a feature that needs it: the route of a run, ride or walk you record, and your approximate position to look up local weather, UV and air quality.
  • Camera and microphone, only while you use them: barcode scanning, food and skin photos and form coaching use the camera; voice logging, dictation and the optional sleep sound recorder use the microphone. Camera frames used for form coaching and barcodes are processed on your device and not stored. Sleep recordings stay on your device unless you choose to keep a clip.
  • Purchases: which plan you have and its status. Payment details are handled by Apple, Google or Polar and never reach us.
  • Website analytics: on our public web pages (not inside the app) we use Plausible, which counts visits without cookies or personal data, and the Meta Pixel, which helps us see whether our ads work.

How we use it

  • To run the app: show your dashboard, scores, trends, plans and reminders, and keep your data in sync between your devices.
  • For optional AI features you turn on: answering your questions in chat, composing your dashboard, and reading photos of meals, labels or lab reports. See “AI” below.
  • To provide your subscription and support.
  • To measure our ads (see “Advertising”). Health data is never part of this.

AI

AI is optional and the app works without it. When you use AI chat, the question and only the data the feature needs are sent through our servers to Anthropic (Claude) to write the answer. When you have the Cloud AI add-on, photos and text you choose to analyse are sent to Google (Gemini) through Firebase. Neither provider may use this data to train its models under our agreements. Categories you switch off in AI data permissions, entries you mark private, encrypted modules and on-device-only modules are never sent. On iPhones with Apple Intelligence some AI runs on the device and nothing leaves it.

Who processes your data

  • Google Firebase (Google Cloud): sign-in, database, cloud functions and hosting. Your data is stored there.
  • Anthropic and Google (Gemini): AI features you use, as above.
  • RevenueCat, Apple, Google Play and Polar: subscriptions and payments.
  • Open Food Facts receives the barcode you scan to look up the product. Open-Meteo receives approximate coordinates for weather and air quality. Map tiles come from OpenStreetMap or Apple Maps.
  • Plausible and Meta: website analytics and ad measurement, as described here.
  • If you connect ChatGPT, Claude or another AI app to your account, that app can read and log data on your behalf within the permissions you grant, until you disconnect it in settings.

Advertising

When someone signs up or starts a trial, we tell Meta that the event happened so we can see which ads work. We send a one-way hash of the account's email and id, the request's IP address and browser, Meta's own cookie values if present, and the plan price. Nothing about your health is ever included, and we don't use your data to show you ads inside SuprHealth (there are none).

Sharing you control

Care circle invitations, share links, exported files and PDF reports only go to the people and places you choose. You can revoke a share link or remove someone from your circle at any time.

Security

Data is encrypted in transit and at rest by Google Cloud. Access is limited to your own account by database rules. You can lock the app with Face ID, fingerprint or a PIN, mark entries private, and encrypt chosen modules with a key only your devices hold; we can't read encrypted modules.

Keeping and deleting

We keep your data while your account exists. You can export it from You › Privacy at any time. Deleting your account (You › Privacy › Delete everything, or the steps on our account deletion page) removes your profile, entries, collections and sign-in account straight away; backups that may still hold it expire within 30 days. Purchase records that Apple, Google or Polar keep are governed by their policies.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or US state laws) you can ask to access, correct, export or delete your data, object to or restrict its use, and withdraw consent. Most of this you can do in the app; for anything else write to support@suprhealth.app. You can also complain to your data protection authority.

Children

SuprHealth is for people aged 16 and over. We don't knowingly collect data from children; if you believe a child has an account, write to us and we'll delete it.

Medical line

SuprHealth logs, trends, reminds and informs. It doesn't diagnose, calculate doses or replace a clinician. In an emergency call your local emergency number.

Changes and contact

We'll update this page when our practices change and tell you in the app about anything significant. Questions: support@suprhealth.app.