Privacy Policy

Overview

Ankora is a health tracking app that helps you understand your wellness data. We prioritize your privacy and process health data anonymously.

Key Principle: Your health data stays on your device in Apple HealthKit. When you use LLM-powered features, only anonymized data is used - never any data that can identify you.

1. What We Use

Health Data (Apple HealthKit)

With your permission, we read health metrics and workouts from Apple HealthKit. For detailed analysis this data is used anonymously, and it is never stored on our servers. We only request HealthKit permissions to metrics that make sense for the app.

Activity & Fitness

• Energy: Active energy burned, basal energy burned, exercise time, stand time
• Movement: Step count, distance (walking, running, cycling, swimming), flights climbed, swimming strokes
• Workouts: All workout types and workout routes

Heart & Cardiovascular

• Heart Rate: Current, resting, walking average, and heart rate variability (HRV)
• Blood Pressure: Systolic and diastolic readings
• Advanced: VO2 Max, peripheral perfusion index, atrial fibrillation burden
• Events: High/low heart rate events, irregular rhythm events

Sleep

• Sleep Analysis: Time in bed, asleep, awake, plus sleep stages (Core, Deep, REM)
• Related: Sleeping wrist temperature, time in daylight

Body Measurements

• Height, weight, BMI, body fat percentage, lean body mass, waist circumference

Respiratory

• Respiratory rate, blood oxygen saturation, lung capacity metrics

Mobility

• Walking speed, step length, walking asymmetry, double support percentage
• Stair ascent/descent speed, walking steadiness, six-minute walk test distance

Mindfulness & Nutrition

• Mindful sessions, dietary energy consumed

Characteristics (Read-Only)

• Biological sex, blood type, date of birth, skin type, wheelchair use, activity move mode

Important: Ankora does not write any data to HealthKit data. You can manage which specific data types to share in iOS Settings > Privacy > Health > Ankora.

Account Info

When you sign in with Apple, we receive a unique identifier and optionally your email for authentication only.

LLM Processing

When generating journals or insights, we send anonymized data (e.g., "8,000 steps") to our LLM providers. Unfiltered HealthKit data is never transmitted.

Location (Optional)

Used only for weather-based suggestions. Used locally on-device.

Analytics

We gather anonymised data to understand app usage and report crashes. We do not collect any personally identifiable information.

2. How We Use Your Data

• Display your health metrics and trends.
• Generate personalized LLM-powered journals and insights.
• Sync saved journals to your iCloud account.
• Improve app features based on usage patterns.
• Authenticate your account and manage subscriptions.

3. Data Storage & Security

• Health Data: Stored in Apple HealthKit on your device.
• Journals: Stored in your personal iCloud via CloudKit, or the app's local storage if iCloud storage is not accessible.

4. Third-Party Services

We use trusted third-party services to operate Ankora. These providers only receive the minimum data necessary for their function and are contractually bound to protect your information:

xAI (LLM Provider)

Powers our LLM-based journals and insights. Receives only anonymized health summaries (e.g., "8,000 steps", "7 hours sleep") - never raw HealthKit data or personally identifiable information.

Supabase (Backend Infrastructure)

Handles user authentication and account management. Stores your account identifier and authentication tokens. Does not store health data.

RevenueCat (Subscription Management)

Manages subscription status and purchase validation. Receives your anonymous user ID and subscription purchase information from the App Store. Does not have access to health data.

Amplitude (Analytics)

Helps us understand how the app is used to improve features. Collects anonymized usage events (screens viewed, features used). Does not collect health values, personal content, or identifiable information.

OneSignal (Push Notifications)

Delivers push notifications when you opt in. Receives a device token and anonymous user ID. Does not have access to health data or personal information.

Important: We do not sell your data to any third party. All third-party providers are GDPR and CCPA compliant. Health data from HealthKit is never shared with any third party in identifiable form.

5. Your Rights & Controls

• Manage HealthKit access in iOS Settings > Privacy > Health
• Manage Location in iOS Settings > Ankora > Location
• Opt out of analytics via iOS Settings > Privacy > Analytics
• Delete journals from iCloud storage. If you do not use iCloud simply delete the app.
• Delete account by Settings -> Delete Account

GDPR (EU) & CCPA (California): You have the right to access, rectify, erase, and export your data. We do not sell personal information.

6. Data Retention

• Health Data: Never stored on our servers
• Journals: In your iCloud until you delete them
• Account Data: Until you delete your account

7. Additional Information

Children's Privacy

Ankora is not intended for children under 13. Users 13-18 should use with parental consent.

International

Our servers are in the US. Health data remains on your device regardless of location.

Updates

Material changes will be notified through the app. Continued use constitutes acceptance.