Consumer Health Data Privacy Policy
[Legal entity name — TBD]
Effective: [TBD at publication]
This policy describes how Sundial, a family health app offered under the App Store listing "Sundial: Family Health," collects, uses, and shares consumer health data.
1. Categories of consumer health data we collect and why
Sundial collects the following categories of consumer health data:
- Health signals from services and devices you connect. When you connect a service or device (a "Source"), Sundial receives sleep, heart rate, heart-rate variability (HRV), activity, steps, body temperature expressed as a deviation from your usual, blood glucose, and cycle tracking when you enable it.
- Health-related content you create in the app. This includes journal entries, day ratings, tags, events, custom signals and check-ins you submit yourself (such as a meal check-in), and health-related messages you write in chat.
- Questionnaire answers. Answers to a five-question get-to-know-you questionnaire, which can include ongoing health conditions you choose to report.
- Alert rules you create. Rules you set about health signals, including the signal, condition, and threshold you choose.
We collect and use this data to provide the service you asked for: your personal dashboards, your morning briefs, the alerts you create, and, when you have turned on AI personalization, AI-written chat answers, briefs, and summaries. The numbers underlying briefs and answers are computed by Sundial; AI services only phrase them. We also use consumer health data to keep the service safe and secure and to comply with the law.
Sundial does not sell consumer health data, does not share it for cross-context behavioral advertising, does not use it for advertising, and does not train AI models on it.
2. Categories of sources
Sundial collects consumer health data from the following categories of sources:
- You. What you enter and create in the app, including journal entries, ratings, tags, events, check-ins, questionnaire answers, alert rules, and chat messages.
- Apple Health. Health data stored in Apple Health on your device, when you connect Apple Health as a Source.
- Other services and devices you connect. Other health and fitness services and devices you choose to connect, such as a connected ring, watch, or glucose service.
3. Categories of consumer health data we share
The categories of consumer health data Sundial shares are health signals and the summaries, trends, briefs, and alerts derived from them. Sundial shares consumer health data only as described in the next section.
4. Third parties and affiliates we share with
Sundial shares consumer health data with the following categories of third parties:
- People you choose to connect with in Sundial. When you connect with another person in Sundial, that person sees your shared health data as part of the service you requested. Any signal you mark Private is never shared with them.
- Artificial intelligence service providers. Anthropic and OpenAI. Under contract, these providers return answers only; they do not train models on Sundial data and do not sell it.
- Cloud database and backend hosting. Supabase, which stores and processes data only to provide the service.
- Push notification delivery. Expo, which delivers notifications on Sundial's behalf.
- Platform services from Apple. HealthKit on your device; Private Cloud Compute for some AI processing, which does not store the data; and App Store subscriptions.
- Platform services from Google. Sign-in only.
Service providers process consumer health data only under contract and only to provide the service.
Affiliates. Sundial has no affiliates with whom it shares consumer health data.
Sundial may also disclose consumer health data when required by law or court order.
5. Your rights and how to exercise them
Under the Act, you may exercise the following rights:
- Access. You may access your consumer health data, including, through the in-app Privacy & Legal Center, the list of third parties with whom it is shared.
- Deletion. You may request deletion of your data in the app's Privacy & Legal Center through account deletion, or by contacting Sundial. Deletion is immediate: when you confirm deletion, your account is deleted at once. There is no grace period and no cancellation. Deletion is permanent and includes destruction of the encryption keys for your data. Backup or snapshot residue is crypto-shredded and expires within 30 days.
- Withdrawal of consent. You may withdraw consent at any time. You can turn off AI personalization, which stops new AI use immediately; disconnect a Source in the native service, which stops data flowing from that Source; and mark signals Private, which stops them being shared with people you are connected to.
You can exercise these rights in the app or by emailing privacy@sundial.app [confirm].
Health readings are kept for the period you select in the Privacy & Legal Center — 90 days or 1 year, with a default of 90 days — and are then deleted on a rolling basis.