Effective: March 2, 2026
Privacy First: Your conversations are stored in your private iCloud account — we have no access to them. Your health data never leaves your device. We never sell your data to third parties.
This Privacy Policy describes our practices with respect to personal data we collect when you use Secure AI on iPhone, iPad, and Mac.
With your explicit permission through iOS Settings, the app may access health data from Apple HealthKit including activity, sleep, heart rate, nutrition, and body measurements.
Your health data never leaves your device. All HealthKit data remains on your device unless you enable iCloud sync, in which case it's stored in your private iCloud account. We never transmit health data to our servers or any third party.
Messages you send and responses you receive are stored locally on your device, optionally synced via Apple CloudKit to your other devices, and sent to our AI provider's servers to generate responses (encrypted in transit via HTTPS).
We automatically collect device type, OS version, app version, anonymized crash logs, and aggregated usage statistics for improving the app.
Payment processing is handled entirely by Apple. We do not collect or store payment card information — only subscription status and transaction receipts for verification.
| Purpose | Data Used |
|---|---|
| Provide AI responses | Conversation data (sent to AI provider) |
| Sync across devices | Conversation data (stored in your iCloud) |
| Process subscriptions | Apple ID, transaction receipts |
| Improve performance | Crash logs, anonymized usage stats |
| Prevent fraud | Device information, usage patterns |
| Legal compliance | As required by law |
Your conversation history and preferences are stored locally on your device using Apple's secure Core Data framework.
When you enable CloudKit sync, your conversation history is stored in your private iCloud account, encrypted in transit and at rest. Only you can access this data. We cannot access data stored in your iCloud.
To generate AI responses, your messages are sent to our AI provider's servers. We have configured our API usage so that our provider does not use your data to train their models. Messages are transmitted securely via HTTPS.
We share your personal data only in the following limited circumstances:
We do not sell your data. We do not share your data with advertisers. We do not use your data for cross-site tracking.
Depending on your location, you may also have rights to access, correct, port, or object to processing of your data. Contact us through the app to exercise these rights.
California residents have the right to know what personal information we collect, the right to delete it, and the right to opt-out of sale. We do not sell personal information and do not share it for cross-context behavioral advertising.
Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. Users between 13 and 18 must have parental permission.
Your data may be processed in the United States where our AI provider's servers are located. We ensure appropriate safeguards including encryption in transit and at rest.
Apple Services: The app uses Apple HealthKit, CloudKit, and Sign in with Apple. Apple's privacy practices are governed by their Privacy Policy.
AI provider: AI responses are generated via an AI API. Their data practices are described in their privacy policy.
We may update this Privacy Policy from time to time. We will notify you by posting the updated policy in the app and updating the effective date. Continued use of the Services constitutes acceptance.
If you have questions about this Privacy Policy or our data practices, please contact us through the support page or via the support section in the app.