Privacy Policy

We built HealthCubed to be private by design. Most of your health data is read and processed directly on your device and never reaches our servers. What we do receive, we use only to run the service you asked for: computing your score, generating your insights, and answering your questions.

We do not sell your personal information, we do not rent or trade it, and we do not receive payment in exchange for it. We do not use your health data for advertising, and we do not let anyone else use it for their own purposes.

HealthCubed is a product of Moreland Accord ("HealthCubed," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect information when you use the HealthCubed iOS app and this website (together, the "Service").

For any privacy question or request, contact us at privacy@healthcubed.app.

We collect only what the Service needs to work:

• Account information: the email address and name you provide to create and secure your account.
• Health and wellness data you choose to connect: through Apple Health (HealthKit), the biometrics, activity, sleep, and related measures you grant access to. Your raw HealthKit samples are read and summarized on your device; only derived daily values needed to compute your score are sent to our servers.
• Lab and clinical results (only if you opt in): if you turn on the optional setting to let lab results influence your score, your device compares each result to that lab's own reference range and sends only a derived, numeric score, never the raw result value. This feature is off until you affirmatively enable it, and you can turn it off and delete the data at any time.
• Content you create: journal entries, logs, goals, and your conversations with the in-app assistant.
• Usage and device information: basic diagnostics, app performance data, and device type, used to keep the app working and secure.

We use your information solely to provide and improve the Service:

• To compute your daily score and pillar breakdowns, and to generate your insights and recommendations.
• To power the in-app assistant when you ask it a question.
• To operate, secure, and maintain the Service, including preventing abuse and diagnosing problems.
• To understand, in aggregate, how the app is used so we can make it better.
• To communicate with you about your account and the Service.

We do not use your information for third-party advertising, and we do not use your health data to build advertising or marketing profiles.

Health data receives special care. Consistent with Apple's requirements and applicable health-privacy laws:

• We never sell health data, and we never use it for advertising.
• We never share health data with third parties for their own purposes.
• Data obtained through HealthKit is used only to provide health and wellness features within the Service.
• Clinical and lab data is processed on your device by default. It only leaves your device as a derived score, and only after you explicitly opt in. You can withdraw that consent at any time, which deletes the derived data from our servers.

When you use the assistant, your message and the relevant context needed to answer it are processed by trusted third-party AI providers acting on our behalf and under contract, solely to generate your response. These providers are not permitted to use your data to train their own models or for any purpose other than serving your request.

We take extra care with the most sensitive content: items such as journal entries and clinical results are redacted from stored conversation history after they are used and are excluded from any long-term memory or search indexing.

We share information only with vendors who process it on our behalf to run the Service, under contracts that limit them to that purpose. These include:

• Cloud infrastructure and storage providers that host the Service and store your account data.
• AI model providers that generate insights and power the assistant, as described above.

These providers act as our processors on our instructions. We do not sell your personal information to them or anyone else, we do not share it for their independent use, and no arrangement with any provider involves payment in exchange for your personal data.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer, in which case we will require any successor to honor this Policy.

• We do not sell, rent, or trade your personal information.
• We do not receive payment in exchange for your personal information.
• We do not share your data with third parties for their own marketing.
• We do not use HealthKit or health data for advertising.

We keep your information for as long as your account is active or as needed to provide the Service. Data processed transiently to generate a result (for example, the context sent to the assistant to answer a question) is held only briefly and then discarded.

When you delete something, we use soft deletion so it is removed from your experience and slated for permanent deletion; the derived lab data tied to consent is hard-deleted when you withdraw consent. You can request deletion of your account and associated data at any time (see Your rights).

We protect your information with encryption in transit and at rest (AES-256), access controls, and standard operational safeguards. No system is perfectly secure, but we work to protect your data and to limit who can access it to what is necessary to run the Service.

You can access, correct, export, or delete your information from within the app or by contacting us. Depending on where you live, you may have additional rights:

• If you are in the European Economic Area or the United Kingdom (GDPR): rights to access, rectify, erase, restrict, and port your data, to object to certain processing, and to withdraw consent at any time. Our legal bases are your consent (for optional features such as lab scoring), performance of our contract with you (to provide the Service), and our legitimate interests in operating and securing it.
• If you are a California resident (CCPA/CPRA): rights to know, access, correct, and delete your personal information, and to opt out of its sale or sharing. We do not sell or share your personal information as those terms are defined, and we do not use or disclose sensitive personal information beyond what is needed to provide the Service.
• If you are a Washington resident (My Health My Data Act) or in a state with a consumer health-data law: we collect consumer health data only with your consent, use it only to provide the Service, do not sell it, and honor your right to withdraw consent and to have it deleted.

To exercise any right, email privacy@healthcubed.app. We will not discriminate against you for exercising your rights.

We operate the Service from the United States, and your information is processed there. Where required, we rely on appropriate safeguards for international transfers. By using the Service, you understand your information will be processed in the United States.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

HealthCubed is a wellness and informational tool. Its scores, insights, and assistant responses are not medical advice, diagnosis, or treatment, and should not be relied on for medical decisions. Always consult a qualified healthcare professional about your health, and never disregard professional advice because of something in the app. In an emergency, call your local emergency number.

We may update this Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised Policy.

Questions, requests, or concerns about your privacy? Email privacy@healthcubed.app and we will respond as promptly as we can.

This Policy is governed by the laws of the State of Texas, United States, without regard to its conflict-of-laws rules, except where a mandatory local law that applies to you provides otherwise.