Consumer Health Data Privacy Policy

Who we are

Ceresis Core is operated by Brian Cruz, an individual running it as a sole proprietor (“we”, “us”). Questions go to support@ceresiscore.com. This policy sits alongside our Privacy Policy; where they overlap, this one governs health information.

What counts as health data here

Three things you can log, trackers you make that measure your body, and one field on older journal entries:

Food

What you ate, and calories, fat, carbohydrate and protein — whether you typed those numbers or a photo was read to estimate them.

Sleep

Hours slept, how you rated the night, the times you went to bed and got up, naps, and any corrections you make.

Exercise

That you trained, for how long, and what kind of session.

Your own body trackers

A tracker you make whose name or unit is about your body — a run, steps, yoga, sleep, water, coffee or alcohol, weight, mood, symptoms or medication. We read the name and unit you give it, and when in doubt we treat it as health data.

Mood

The mood attached to a journal entry written before the journal became part of Notes. Nothing asks for a mood any more, and moving those entries into Notes leaves the mood behind and deletes it.

Study hours, tasks, goals and trackers like pages read or sales calls are not treated as health data — they say nothing about your body. A note can hold anything you choose to write, and we don’t read those to decide what they are, so treat anything you write there as yours to control: you can delete any of it at any time.

Where it comes from

Only from you. Every number is one you typed or a photo you chose to send. We don’t import from a phone’s health app, a watch, a fitness platform or any other service, and we never buy or receive health data about you from anyone.

Why we collect it

• To show it back to you — today’s totals, the week, the trend.
• To measure the commitment you chose against the target you set.
• On Pro, to generate estimates, answers and briefs for you, at your request.

We never use it to advertise to you, we never sell it, and we never share it with anyone for their own purposes. We don’t use it to train AI models. The only people who ever see any of it are people you choose yourself, in a group — below.

Who else sees it

Only the services that run the app, and only for that:

Our database provider

Stores it, isolated to your account. This is where it lives.

Our hosting provider

Serves the app, so the data passes through on its way to your screen.

Our AI provider

On Pro only, only once you’ve consented, and only what a request needs — the text or photo you sent. Under their commercial terms it isn’t used to train their models. Free accounts never reach it, and without consent what you type is filed without it.

People you choose, in a group

Only if you join or start a group and tick a health tracker for that group’s scorecard. Then the people in that group see that tracker’s number for the week against your target (for sleep, your average night), whether it’s met, and — if it’s your main commitment — your pace and whether you met it in each of the last four weeks. Never your entries, times, notes, meals or anything you typed. Nothing health-related is on your card until you tick it, and each group is a separate choice.

Nobody else. Payments, email, weather and the calendar never touch health data. We have never sold health data, and if that ever changed the law would require your separate written authorisation first — we would ask.

Your consent

We ask before collecting any of it, separately from the Terms. Without a yes we collect none of it: a food, sleep, exercise or body-tracker log is refused rather than saved — the words as well as the numbers — a photo isn’t read, and anything you type is filed without being sent to our AI provider, because until it’s filed we can’t know whether it describes your body. Study, tasks, goals, notes, search, export and trackers that aren’t about your body all run on a “no”.

You can withdraw at any time from Settings → Data & privacy. Withdrawing stops any new health data being collected from that moment, and existing health entries can then be deleted but not changed. It doesn’t delete what’s already there — deleting is a separate choice, below, so that withdrawing consent can never quietly destroy your history.

AI generation is paused without current health-data consent, including after withdrawal. Saved notes, labels and log text may contain health information, and we cannot reliably separate it from other text. We check the latest decision before reserving a request and again before sending it to our AI provider. Manual tracking, computed readings, search, export and saved history remain available.

Sharing with a group is its own consent. Agreeing to health data being kept doesn’t share it with anyone. Ticking a health tracker on a group’s scorecard is a separate yes, for that group only, and the box says so beside it. Untick it, leave the group, or withdraw consent, and it comes off your card — if you withdraw, every health tracker is unticked in every group, and allowing health data again later doesn’t re-share any of them until you tick them again.

Deleting it

• One entry: delete it in the app and it’s gone, with its numbers.
• From a group: untick the tracker or leave the group, and your card there is rebuilt without it or removed.
• All of it: Settings → Data & privacy → Delete account removes every row immediately, health data included. Encrypted backups roll over within 30 days.
• Ask us: write to support@ceresiscore.com and we’ll delete your health data and tell our providers to do the same. We answer within 30 days.

You can also take it with you first — Settings → Data & privacy exports everything as JSON or CSV, on any plan.

How long we keep it

Until you delete it or close your account. We don’t expire your entries, and we don’t keep a copy after you delete them beyond encrypted backups rolling over within 30 days.

Washington residents

Washington’s My Health My Data Act gives you the right to know what consumer health data we collect and who we share it with, to withdraw consent, and to have it deleted — including by our service providers. The controls above are how you exercise all three, and support@ceresiscore.com reaches a person if you would rather ask. You can also complain to the Washington State Attorney General.

Changes

If we change this policy in a way that affects how your health data is used, we’ll ask for your consent again before the change applies to you.