Legal
Privacy policy
Horavi reads a lot about you so it can answer about you. This page says exactly what stays on your iPhone, what reaches our servers and only if you switch it on, who helps us run the service, and how to take it all back.
The short version
- Your calendar, your location and your DNA file are processed on your iPhone and never uploaded.
- Raw readings from Apple Health and the devices you connect, such as heart rate by the minute and sleep stages, reach our server only if you agree. They are kept encrypted for 90 days so our server can work out your daily numbers without AI. Our AI provider never sees them.
- Our servers get only what you switch on, one option at a time: raw readings, one line a day about your body, lab values you confirmed, documents you keep, notes the assistant may remember. Every option is off until you turn it on, and turning it off deletes that data from our servers.
- We never sell your data, never use it for ads, and our AI provider does not train models on it.
- You can see, export and delete everything in the app, at any time.
- Horavi is not a medical device and does not give medical advice.
Who we are
Horavi is provided by Digital Flow Pte. Ltd. (UEN 202350828Z), 68 Circular Road, #02-01, Singapore 049422 (“we”, “us”). We decide how and why your personal data is used, so we are its controller. Questions about privacy: ab@digitalflow.agency.
What stays on your iPhone
These are read and processed by Horavi on your device. We never receive them.
- Apple Health, unless you switch on raw readings (below): heart rate and heart rate variability samples, sleep stages, wrist temperature, blood oxygen, cycle data if you turn it on, workouts, steps and time in daylight, from Apple Watch and anything that writes to Apple Health.
- Calendar: read for free and busy time. Horavi writes only to its own calendar, and only after you confirm the first event.
- Approximate location: for sunrise, sunset and time zone changes.
- Your DNA file: read on the phone. Findings about disease risk stay on the phone whatever you choose.
- Logs you keep: coffee, meals, check-ins and the original copy of anything you scan.
What reaches our servers
To run your account
| Data | Why | Kept |
|---|---|---|
| Account: email, or your Apple or Google account identifier; a user ID | to sign you in and keep your account | until you delete your account |
| Encrypted settings, sealed on your device so we cannot read them | to keep your setup across your devices | until you delete them or your account |
| Subscription status from Apple, via RevenueCat | to unlock Pro | while you have an account, then as tax law requires |
| Crash reports, without health data | to fix bugs | 90 days |
| Product analytics, only if you opt in, without health data | to learn which features help | 12 months |
| Messages you send to support | to help you | 24 months |
Only if you switch it on
Each of these is a separate choice in the app, off by default. The screen that asks you names what is sent, why, and who receives it.
| Option | What we receive | Why |
|---|---|---|
| Raw readings from Apple Health | the individual readings Horavi reads from Apple Health, such as heart rate and heart rate variability samples, sleep stages, blood oxygen, glucose, blood pressure, weight, steps and workouts. Each has what it is, the unit, when it was taken and its value. Kept 90 days from when it was taken, then deleted automatically | to work out your daily numbers on our server, without AI |
| Connected devices | the readings a device maker shares when you allow it on the maker’s own page, for example sleep (length, stages, efficiency), readiness or recovery, resting heart rate and heart rate variability, heart rate through the day, steps and active energy, weight, body composition, blood pressure and glucose. Each is kept 90 days from when it was taken, then deleted automatically. Never your password for that service, your location, contacts, photos or messages | to work out your daily numbers on our server, without AI, alongside or instead of Apple Health |
| Daily summaries | one line a day: sleep times and length, overnight HRV, resting heart rate, steps, VO2 max, workouts, and Horavi’s own estimates such as chronotype and sleep debt | to compare each day with your own normal and answer with your numbers |
| Lab values | for each marker you confirm: name, standard code, value, unit, the range your lab printed, the date. The report itself is read and deleted unless you also choose to keep documents | to show markers over time next to your sleep and heart |
| Documents | the files you choose to keep: lab reports, discharge notes, prescriptions. Each is sealed with a key of your own, JPEG and PNG photos lose their metadata such as location first, and every opening is logged | so your records live in one place you control |
| Assistant memory | short notes you approve: goals, constraints, preferences | so you never explain yourself twice |
| DNA traits | a trait and its category only, such as a caffeine metabolism type. Never a genotype, an allele or a disease finding | to fit coffee, sleep and training advice to you |
| Travel from mail | if you connect Gmail or Outlook: the type, status and times of trips and bookings. Never the message, its subject or addresses | to plan around flights and time zones |
| Other health topics | medications, symptoms, cycle and pregnancy, training, food, mental health, family history and similar, each under its own switch | so answers can take them into account |
When you use Pro we also keep your goals, experiments, plans and conversations with the assistant so you can see them on your phone and on the web. They stay until you delete them or your account.
Connected devices
Oura, WHOOP, Withings, Polar, Dexcom, Garmin and COROS connect directly to our server. You sign in on the maker’s own page, so Horavi never sees your password for that service. The maker gives Horavi an access key, which we store encrypted and use only to fetch your data, every few hours and when the maker tells us there is something new. Strava, Eight Sleep, Libre and other apps reach Horavi only through Apple Health; we do not connect to them directly.
Disconnect a device in the app under You, then Sources. We ask the maker to cancel the access key, then delete the key and every reading from that device. The daily numbers already worked out stay unless you choose to delete them too. Turning off Connected devices under You, then Privacy and consents, does this for every device at once. Horavi keeps working with no device connected.
How the assistant uses your data
The assistant runs on our servers with a model from Anthropic. For each answer we send only what that answer needs: the relevant summaries, values or notes and your question. We do not send your name, email or account identifiers. Anthropic does not use data sent through its commercial API to train models.
Anthropic never receives raw readings from Apple Health or from the devices you connect. Our server works out daily numbers from them without AI, such as overnight heart rate variability or hours of sleep. The assistant sees those daily numbers only if Daily summaries is on and you ask it.
Voice in the web cabinet. If you use the microphone in the web cabinet, your browser turns your speech into text with its own speech service (Google in Chrome and Edge, Apple in Safari), so the sound goes to that company under its terms. Horavi never receives the sound, only the text you see and choose to send.
Some things are decided by fixed rules before any model sees them. If a value is far outside your own normal or a lab value needs attention, Horavi tells you to contact a doctor and does not interpret it. Horavi makes no decisions about you with legal or similarly significant effects.
Who we share data with
We do not sell personal data or share it for advertising. Service providers process it for us under contract, only for the purposes below.
| Provider | What for | Where |
|---|---|---|
| DigitalOcean | servers, database (including raw readings) and document storage | Amsterdam, Netherlands |
| Anthropic | the AI model behind answers and reading lab reports | United States |
| Apple | App Store, payments, Sign in with Apple, Apple Health on your device | per Apple |
| Sign in with Google, and Gmail if you connect it | per Google | |
| Microsoft | Outlook, if you connect it | per Microsoft |
| RevenueCat | subscription status | United States |
| Resend | account emails such as password resets | United States |
| Sentry | crash reports | European Union |
| PostHog | product analytics, only if you opt in | European Union |
| Vercel, Cloudflare | hosting and DNS for this website | global network |
| Oura, WHOOP, Withings, Polar, Dexcom, Garmin, COROS | only if you connect them: they send us the readings you allow on their page. From us they receive only requests for that data, made with the access key they issued | Varies by company |
We may disclose data when the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy keeps applying to your data.
International transfers
We are based in Singapore; our main servers are in the Netherlands and some providers are in the United States. When data moves from the EU, the UK or other places with transfer rules, we rely on adequacy decisions where they apply, such as the EU-US Data Privacy Framework for certified providers, or on standard contractual clauses.
Legal bases
For people in the EU, the UK and places with similar laws:
- Health data (everything under the switches above): your explicit consent. You can withdraw it at any time; this does not affect what happened before.
- Account, sync and subscription: performing our contract with you.
- Security and crash reports: our legitimate interest in keeping Horavi working and safe.
- Analytics: your consent.
- Tax and accounting records: legal obligation.
How long we keep data
See the tables above. Raw readings from Apple Health and connected devices are kept 90 days from when each was taken, then deleted automatically. When you delete something, or your whole account, it leaves our live systems at once. Backups roll over within 30 days, and the key that seals your documents is destroyed with your account, so copies in backups cannot be opened. Subscription and tax records are kept as long as the law requires.
Security
Data is encrypted in transit and at rest. Documents are sealed with a key per person. Access to production data is limited to the people who run Horavi and is logged, and you can see in the app every time a document was opened and by whom. If a breach affects your personal data, we will tell you and the authorities as the law requires. More on the security page.
Your choices and rights
In the app, at any time: turn each option on or off (turning it off deletes that data from our servers); disconnect any device (its access key and readings are deleted); see, edit and delete what the assistant remembers; delete any lab value or document; export your data; delete your account and everything with it. Step by step: delete your data.
Your rights. Depending on where you live, you may have the right to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent. Write to ab@digitalflow.agency; we answer within the time the law sets and never treat you differently for using your rights.
- EU and UK: you may also complain to your data protection authority.
- Singapore: you may also contact the Personal Data Protection Commission.
- US states with consumer health data laws such as Washington, Nevada and Connecticut: you may ask what consumer health data we collect and share, withdraw consent and have it deleted, by the same address.
- California and other US states: we do not sell or share personal information for cross-context behavioural advertising.
Children
Horavi is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
Changes
If we change how health data is used, we will ask for your consent again in the app before the change applies to you. For other changes we update this page and the date above, and tell you in the app if the change matters.
Contact
Digital Flow Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422. ab@digitalflow.agency