Legal
Privacy policy
Last updated 9 August 2026
Heurika reads health information to show you your own position and to build your plan. That is the only reason it exists here. This policy sets out what is collected, why, and what you control.
What Heurika collects
- Account. Your email address and a password, so your readings survive a lost phone. Passwords are stored only as a hash and are never visible to anyone.
- What you tell it. Assessment answers, what you are trying to change, your timeline, daily readings and anything you write in the journal.
- Profile. Your name, an optional photo, height and weight.
- Connected services, only if you connect them. Set out below.
Heurika does not collect your contacts, your location, or any advertising identifier. There are no analytics or advertising libraries in the app, and nothing tracks you across other apps or sites.
Connected services
Connecting anything is optional and Heurika works without it. Nothing is read until you allow it, and you can disconnect at any time in Profile, then Connections.
- Apple Health. With your permission Heurika reads sleep, workouts and activity, nutrition figures, heart measurements, time in daylight and stand time. It uses these only to fill in your daily readings. Heurika never writes anything back to Apple Health, and never reads a category not listed here.
- Calendar. With your permission Heurika reads the times of your events so training can be planned around them. Event names stay on your device unless you specifically allow them to be used for insight.
- Screen time. Where available, the operating system reports only that you crossed a usage threshold on apps you selected yourself. Heurika never learns which apps those are and never receives detailed usage.
- Strava and similar services. If you sign in, Heurika reads the activity data needed to fill in your readings. Access tokens are held on the server, never inside the app, and disconnecting deletes them.
How it is used
To run the app, to build and adjust your plan, and to keep your readings available across your devices. Reminders are scheduled on your phone. Nothing is sold, and nothing is shared for advertising.
Who processes it
- Supabase stores your account and your readings.
- Anthropic generates your plan. Your assessment answers, what you are trying to change and recent readings are sent to be processed. They are not used to train models and not used for advertising. Data from a connected service is included only if you have switched that on for that specific service, which is off by default.
- Apple operates the App Store and handles every payment. Heurika never sees or stores your card details.
Subscriptions
Payment is handled entirely by Apple. Heurika receives confirmation that a subscription is active and nothing more. No card number, billing address or payment method ever reaches Heurika.
Storage and security
Your readings are held on your device and in the database, tied to your account, readable only by your account, and transferred over encrypted connections.
What you control
You can edit anything you have told Heurika at any time. You can disconnect any service, which stops all further reading from it and deletes any access token held for it. You can delete your account and everything in it from inside the app, under Profile, then Delete account. Deletion is permanent, includes anything read from a connected service, and cannot be undone.
Children
Heurika is not directed at children under 13 and does not knowingly collect their information.
Changes
If this policy changes materially, the date above changes with it.