Privacy Policy

Effective: 6 March 2026

Circade ("we", "our", "us") is a circadian health protocol tracking app. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Data stored on your device only:

• Protocol completions — which protocols you complete and when, used to calculate your Circadian Score and streaks.
• Profile information — your name and wake time, used to personalise protocol timing.
• Goals and preferences — selected during onboarding, stored locally.
• Apple Health data — sleep duration, heart rate variability (HRV), and step count, read with your permission to enhance scoring and biometric insights. This data is processed on-device.

Location data:

• We request your approximate location solely to calculate local sunrise times for your morning protocol timing. Location data is processed on-device and is not transmitted to our servers.

2. AI-Powered Features and Data Sharing

Circade offers optional AI-powered features (Weekly Briefings and Daily Insights) that require sending data to a third-party AI service. These features are opt-in — no data is sent unless you explicitly grant permission.

What data is sent:

• An anonymised summary of your protocol completion times and scores
• Current streak count and weekly averages
• Sleep duration and HRV values (if Apple Health is connected)
• No personal identifiers are included — no name, email address, Apple ID, or device identifier is sent

Who receives the data:

• Data is sent to Circade's secure server (hosted on Vercel), which forwards the anonymised snapshot to OpenAI to generate your personalised analysis.
• See OpenAI's Privacy Policy.

How the data is handled:

• Data is transmitted over HTTPS encryption.
• Data is not stored on our servers or OpenAI's servers after your briefing is generated.
• OpenAI does not use API data to train AI models (per their API data usage policy).

Your consent and control:

• Before any data is sent, the app presents a clear disclosure explaining what data is shared and who it is shared with, and asks for your explicit permission.
• You can revoke consent at any time in Settings → AI & Privacy.
• When consent is revoked, no further data is sent. All other app features continue to work normally.

3. Data We Do Not Collect

• We do not collect analytics or usage telemetry.
• We do not use advertising SDKs or trackers.
• We do not sell, share, or monetise your personal data.
• We do not create user accounts or require login.

4. Third-Party Services

• OpenAI — powers the optional Weekly Briefing and Daily Insight features. An anonymised data snapshot (no personal identifiers) is sent via our secure proxy to generate your analysis, only with your explicit consent. See OpenAI's Privacy Policy.
• RevenueCat — manages in-app subscriptions. RevenueCat processes your purchase through Apple and may receive anonymised transaction data. See RevenueCat's Privacy Policy.
• Apple — handles all payment processing for subscriptions via the App Store.

5. Data Storage and Security

All personal data is stored locally on your device using Apple's SwiftData framework. We do not operate user databases or cloud storage for personal data. The AI briefing proxy endpoint uses HTTPS encryption in transit and does not persist any data.

6. Your Rights

• Control AI data sharing — enable or disable AI features at any time in Settings → AI & Privacy.
• Delete your data — use the "Reset All Data" option in Settings to permanently delete all locally stored data.
• Export your data — use the "Export Protocol History" option in Settings to download a CSV of your completion history.
• Since we don't store data on servers, there is no server-side data to request deletion of.

7. Children's Privacy

Circade is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Effective" date above and in an updated version within the app.

9. Contact

If you have questions about this privacy policy, contact us at support@circade.app.