Our five promises

These are the lines we will not cross. They are also part of our terms, so they bind us legally, not just as marketing.

1. We never sell or rent your data. We never share it with advertisers or data brokers either.
2. We never show ads. Not in the app, not in our emails. Plus pays for CalibrateYou.
3. We never use your data to train AI models. No model is trained on it, ours or anyone else’s.
4. We never make your data public. There are no profiles, followers or leaderboards. Other members cannot see you.
5. We never ask for your real name. You get a nickname. Email is optional if you sign in with a passkey.

How we keep them

• No real name, ever. We ask only for what scoring needs, and all of it is optional: birth year (never your birth date), sex for comparisons (or “prefer not to say”), and country (never an address).
• Your own encryption key. Every account has its own data key. Your email, your money answers, your questionnaire answers and any tracker tokens are encrypted with it. Your health numbers sit under a random ID that is not linked to your name, because we never have your name.
• A journal only you can read. Journal notes are encrypted in your browser with a passphrase we never see. If you lose the passphrase, the notes cannot be recovered. We say that plainly because it is the point.
• Read-only connections. CalibrateYou never writes to your Oura account, Health Connect, Apple Health or anywhere else.
• No raw files kept. An Apple Health export is read once into daily totals and the file is deleted at once.
• Comparisons use published statistics only. Member-to-member comparisons only appear once at least 100 people share your group, and nobody can ever look up another member.
• No AI on your data. Scores and tips come from fixed formulas you can read on the methodology page.

See also: our long-term commitment and the privacy policy.