Last updated: March 2026
HereForIt is designed from the ground up to protect your health data. This policy explains what we collect, what we don't, and how you stay in control.
Everything you log — meals, weight, injection history, symptoms, lab results, and conversations with Ember — is stored locally on your device using encrypted SQLite. We do not have access to your personal health data and we do not store it on our servers.
When you interact with Ember (chat, insights, photo scanning), your request is sent to our backend server over HTTPS to query the Claude AI model. This includes contextual health data you've logged (e.g., today's nutrition, cycle day). These requests are transient — we do not log or retain the content of your AI conversations beyond the immediate API call.
If you choose to opt in during onboarding or in Settings → Privacy & Data, HereForIt may collect anonymous, aggregated signals to help improve Ember's pattern recognition for everyone. This is entirely optional and off by default.
symptom_logged, dose_change_onset, protein_vs_floor, feature_usage)Open the app → More → Settings → Privacy & Data → toggle off Contribute Anonymous Data. Signal collection stops immediately. No data is removed from our servers retroactively because the signals are already stripped of any identifier that could link them back to you.
You can export your full health data at any time from Settings → Privacy & Data → Export My Data (PDF) or Backup Data (JSON). You can also permanently delete all your data by resetting the app from Settings → Danger Zone → Factory Reset.
We may create and use de‑identified or aggregate information derived from the data we collect. De‑identified and aggregate information does not identify, and is not reasonably capable of being associated with, you or your household. We maintain and use de‑identified information in de‑identified form and do not attempt to re‑identify it. We may use and disclose de‑identified or aggregate information for any lawful purpose, such as to analyze usage patterns, publish or share generalized health‑trend insights, improve our services, and support research and analytics, including by sharing such information with service providers, research collaborators, and other business partners.
Because we do not collect information that is reasonably capable of identifying you, our current data practices are intended to fall outside the definition of “personal information” or “personal data” under applicable comprehensive state privacy laws. If our practices change in the future so that we begin collecting personal information, we will update this privacy policy and will provide any additional disclosures and rights required by applicable law at that time.
We may disclose or transfer de‑identified or aggregate information we have collected in connection with a corporate transaction, such as a merger, acquisition, reorganization, financing, or sale of all or a portion of our business or assets, or in the event of insolvency, bankruptcy, or receivership. Any successor entity will be permitted to continue to use de‑identified or aggregate information as described in this Privacy Notice or as otherwise disclosed to you at the time of collection.
The only third-party service that processes data on your behalf is Anthropic (Claude API), which processes transient AI requests under their own privacy policy and does not retain your data for training.
All communication between the app and our backend uses HTTPS/TLS. Your device database is encrypted. We apply industry-standard security practices across our infrastructure.
HereForIt is not intended for users under 13. We do not knowingly collect data from children.
If we make material changes to this policy, we will update the "Last updated" date above and, for significant changes, notify you within the app.
Questions? Email us at [email protected].