Last Updated: June 2026
Privacy Policy
NeuroHeart AI ("NeuroHeart AI," "we," "our," or "us") is a wellness and mindfulness platform designed to help users improve stress awareness, recovery, emotional well-being, mindfulness practices, and personal wellness habits.
NeuroHeart AI is not a medical device and does not provide medical advice, diagnosis, treatment, or healthcare services. Information provided through the application is intended solely for wellness, mindfulness, self-reflection, educational, and informational purposes.
By using NeuroHeart AI, you agree to the practices described in this Privacy Policy.
1. Information We Collect
When you create an account, we may collect:
- •Name, email address, authentication information, account preferences, and subscription information.
- •Heart rate and beat-interval measurements obtained with your permission from Apple HealthKit and Apple Watch.
- •Heart rate variability (HRV) metrics calculated by NeuroHeart AI's backend from available heart-rate or beat-interval data.
- •Recovery and stress indicators, wellness assessments, mindfulness activity data, sleep-related wellness metrics, and HealthKit-authorized data.
- •Chat conversations, journal entries, reflections and notes, goals and wellness plans, and feedback and support requests.
- •Calendar events when you connect calendar services, used solely to provide wellness-related scheduling, reminders, and user-requested features.
- •Device type, operating system version, application version, diagnostic information, crash reports, and security logs.
2. How We Use Information
We use information to:
- •Provide wellness features.
- •Generate personalized wellness insights.
- •Analyze stress and recovery trends.
- •Deliver mindfulness recommendations.
- •Improve application performance.
- •Detect fraud, abuse, and security incidents.
- •Provide customer support.
- •Comply with legal obligations.
3. We Do Not Sell Your Data
We do not sell personal information.
We do not sell health information.
We do not sell wellness information.
4. AI Service Providers
NeuroHeart may use third-party AI service providers, including OpenAI, Anthropic (Claude), Google (Gemini), xAI (Grok), DeepSeek, and similar providers, to deliver AI-powered conversations, wellness insights, meditation generation, and personalization features.
When information is sent per chat turn to these providers through commercial APIs, following will happen:
- •Data is encrypted during transmission and storage using industry-standard security practices.
- •Data submitted through commercial API services is generally not used to train or improve provider AI models by default unless explicit consent or opt-in arrangements are provided.
- •Providers may temporarily retain API requests and responses for security monitoring, abuse prevention, fraud detection, legal compliance, service reliability, and operational purposes. Retention periods vary by provider but are typically limited and often around 30 days unless a longer period is required by law or contractual obligations.
- •As in any AI driven apps, NeuroHeart does not control the internal systems, infrastructure, retention policies, or operational practices of third-party AI providers, which may change over time.
- •NeuroHeart shares only the information reasonably necessary to provide requested AI-powered functionality and strives to minimize the transmission of sensitive personal information whenever possible.
To ensure your privacy, we never send personally identifiable information (such as your name, email, contact details, Apple User ID, or Device ID) to AI models. All information transmitted is de-identified.
During each chat interaction, the following de-identified context is shared with the AI to personalize your experience: your historical HRV data, current chat intent, a summary of past chat sessions, your calendar events history (if enabled), and NeuroHeart's proprietary research context.
NeuroHeart AI does not browse the public internet or retrieve external web information to generate its responses.
While no LLM-based service can guarantee absolute security, NeuroHeart selects providers that maintain industry-standard privacy, security, and compliance programs designed to protect customer data and support responsible AI operations.
5. HealthKit and Apple Watch Data
If authorized by the user, NeuroHeart AI may access information from Apple HealthKit and Apple Watch. HealthKit and Apple Watch data:
- •Are used only to provide wellness functionality requested by the user.
- •Are not sold to advertisers.
- •Are not used for advertising purposes.
- •Are not used for third-party marketing.
- •Are not shared with data brokers.
Health-related information is stored within NeuroHeart AI's secured infrastructure and protected through industry-standard administrative, technical, and organizational safeguards.
6. Data Sharing
We may share information only with trusted vendors who assist with cloud hosting and infrastructure (including model-hosting platforms such as Hugging Face, which host NeuroHeart AI's own voice-generation model on our behalf), authentication, payment processing, infrastructure operations, customer support, and security monitoring.
We may disclose information when required by applicable law, court order, legal process, government request, or for the protection of rights and safety.
Information may be transferred as part of a merger, acquisition, restructuring, or sale of assets.
We do not sell user health data.
We do not sell wellness data.
7. Security
NeuroHeart AI implements reasonable administrative, technical, and organizational safeguards to protect information against unauthorized access, disclosure, alteration, and destruction.
Access to personal information is restricted to authorized personnel and trusted service providers with legitimate operational responsibilities and confidentiality obligations.
No system can guarantee absolute security; however, we continuously work to maintain appropriate protections.
8. Account Deletion and Data Retention
Users may delete their account directly within the NeuroHeart AI application. Upon account deletion, the following are removed from active systems:
- •Account information
- •Chat history
- •Journal entries
- •HRV history
- •Heart rate history
- •Wellness records
- •Calendar integration data
- •Apple Watch and HealthKit-derived data
Residual encrypted backups may remain for up to thirty (30) days before automatic deletion through normal backup rotation procedures.
NeuroHeart AI may retain limited security, audit, fraud-prevention, abuse-investigation, and legal-compliance records for up to one hundred eighty (180) days after account deletion when reasonably necessary to maintain platform security, investigate abuse, prevent fraud, enforce agreements, comply with legal obligations, or defend legal claims.
Retained records are minimized and generally do not include deleted wellness content, health metrics, journal entries, or chat histories unless legally required.
9. Your Rights
Subject to applicable law, users may:
- •Access their information.
- •Correct inaccurate information.
- •Delete their account.
- •Request information about stored data.
- •Withdraw permissions previously granted.
- •Request export of available account information.
Requests may be submitted through the application or by contacting us.
10. Children's Privacy
NeuroHeart AI is not intended for children under the age required by applicable law.
We do not knowingly collect personal information from children without appropriate authorization.
11. International Users
Information may be processed and stored in countries different from your country of residence.
Where required, we implement appropriate safeguards for cross-border transfers.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
Material changes will be communicated through the application or other appropriate means.
Continued use of NeuroHeart AI following updates constitutes acceptance of the revised policy.
13. Contact Information
For privacy-related requests, please contact us at: