Privacy Policy

Data We Collect

Aether reads health and fitness data only to provide you with your private daily view. Data can come from three sources, each only with your permission: Apple Health (HealthKit), which includes Apple Watch data and data from other apps and devices that write to Apple Health; the Oura API (for data from your Oura Ring); and the WHOOP API (for data from your WHOOP strap). Aether only reads from Apple Health; it never writes to it.

Health metrics we access include:

• Heart rate, resting heart rate, and walking heart rate average
• Heart rate variability (HRV)
• Sleep data — duration and stages (REM, deep, core/light), and wrist temperature during sleep
• Activity data — steps, walking and running distance, active energy burned, exercise minutes, stand time, workouts, and VO₂ max
• Respiratory rate and blood oxygen saturation (SpO₂)
• From Oura, if connected — readiness, sleep, HRV, workouts, SpO₂, stress, resilience, and VO₂ max
• From WHOOP, if connected — recovery, strain, sleep, HRV, SpO₂, skin temperature, and workout data
• Lab values, only if you add them — typed in, imported from clinical lab records you have already downloaded into Apple Health, or read on your iPhone from a PDF or photo you choose. Nothing is saved until you confirm it.

Device and app data we collect:

• App usage preferences and display settings (stored locally)
• Subscription status (managed via RevenueCat — see Section 4)
• Oura and WHOOP OAuth tokens (stored securely in the iOS Keychain to maintain your connections)
• Your location, only if you allow it — used while the app is open to show local air quality (see Section 4)
• Cloud Coach messages you write and the agreement version you accepted, only if you turn Cloud Coach on (see Section 4)

The Aether app does not collect your name, email address, browsing history, advertising identifiers, or any data unrelated to your health and wellness. The app does not access the contacts on your iPhone. Aether does not track you across other apps or websites.

If you join the waitlist on our website, we collect the email address you enter there. That is covered in Section 10 (Website and Waitlist).

How We Use Your Data

Your health data is used solely to provide and improve the Aether app experience:

• Generate your Aether Score — combining heart rate, HRV, sleep, and activity data into a single daily wellness metric, calculated on your iPhone.
• Display personalised insights — contextualising your trends over time (e.g., sleep quality compared to your 30-day baseline).
• Show widgets, notifications, and Live Activities — your score is shared with Aether's Home Screen widget on the same iPhone, and, if you turn it on in Settings, a local daily summary notification is shown. When you open Activity, and if Live Activities are allowed for Aether in iOS Settings, a workout Live Activity is shown on your device.
• Answer Cloud Coach questions — only if you turn Cloud Coach on (see Section 4).
• Export and share — only when you tap export or share, Aether prepares a text summary of your log (all days, or the last 7, 14, or 30) and saved lab values, or a score card, and hands it to the iOS copy or share sheet. Where it goes next is your choice.
• Provide subscription features — to check whether you have an active Aether Premium subscription or free trial, and whether the App Store offers you a trial or a win-back or promotional offer.

We do not:

• Use your health data for advertising or marketing
• Sell your data to any third party or data broker
• Share your health data with any party not described in this policy
• Use your data to build profiles for purposes unrelated to your personal health insights
• Combine your HealthKit data with third-party data for advertising purposes

Storage & Security

Aether is designed with a privacy-first, on-device architecture:

• On-device processing: Health data is fetched from HealthKit and the Oura and WHOOP APIs and processed directly on your iPhone. Scores, trends, the daily finding, and reading of scanned lab reports all happen on your iPhone. Raw health data is not transmitted to Aether's servers.
• File protection: Your health log and lab values are stored in files on your iPhone using iOS complete file protection, so they are encrypted and unreadable while your iPhone is locked.
• iOS Keychain: Sensitive credentials — including your Oura and WHOOP OAuth tokens — are stored in the iOS Keychain, which uses hardware-level encryption.
• No iCloud sync and no backups: Aether does not sync your health data through iCloud or any other cloud service. Aether's health log and lab values are excluded from iCloud and device backups, so they stay on the iPhone they were collected on.
• Keep your own copy: Because your Aether data is not backed up, it is lost if you delete the app or replace or reset your iPhone, unless you export it first (Settings in the app lets you copy or share your log and lab values).
• No Aether servers: We do not operate servers that store your raw health data. We do not have a database of your personal health records.

In the event we introduce any server-side processing in the future, this policy will be updated with full details of the data involved, the safeguards applied, and your options, before any such change takes effect.

Third-Party Services

Aether integrates with a small number of third-party services, each for a specific and limited purpose:

Oura (Oura Health Oy)
If you connect your Oura Ring, Aether accesses your ring data via the Oura v2 API using OAuth 2.0. Your Oura credentials are never seen by Aether — authentication is handled directly between you and Oura. The data returned by the Oura API is processed on-device and is never sent to Cloud Coach or any other AI model. Oura's own privacy practices are governed by their Privacy Policy.

WHOOP
If you connect your WHOOP account, Aether accesses your WHOOP data via the WHOOP developer API using OAuth 2.0. Your WHOOP credentials are never seen by Aether — sign-in happens directly between you and WHOOP. The data returned is processed on-device. WHOOP's own privacy practices are governed by its privacy policy.

OpenRouter (Cloud Coach) — optional
Cloud Coach is off unless you turn it on and accept the in-app Cloud Coach agreement; it is part of Aether Premium, including the free trial. When you ask a question, Aether sends your new message, up to the last 6 messages of that chat (your own messages and earlier Cloud Coach replies), and a short summary of your last 14 logged days and confirmed lab values to OpenRouter. OpenRouter is the router: it passes the request to the AI model provider that writes the reply. The primary model provider is Anthropic (Claude), and OpenAI (GPT) is the fallback if the primary is unavailable. OpenRouter may run these models on the model maker's own servers or on its cloud hosts (Google Cloud, Amazon Bedrock, Microsoft Azure). Requests are routed only to zero-data-retention providers: Aether sends them with OpenRouter's setting that allows only providers that do not store or train on your data (data_collection: deny), and if that setting cannot be applied, Aether does not send the request. Cloud Coach data is not used for advertising or to train AI models. Aether does not send lab PDFs, photos, or raw sensor samples, and it never sends Oura data: Oura scores and anything else from Oura stay on your iPhone, Apple Health values written by the Oura app are left out too, and the Aether Score and Recharge in that summary are worked out without Oura. If Cloud Coach is on, the one-sentence focus line in the daily summary notification is written the same way from that day's numbers, again without Oura data. You can turn Cloud Coach off at any time in the app. OpenRouter's, Anthropic's, and OpenAI's practices are described in their own privacy policies.

World Air Quality Index (WAQI) — optional
If you allow location access, Aether sends your approximate coordinates (rounded to two decimal places, about 1 km) to the WAQI air-quality service while the app is open to show your local air quality. If you do not allow location, the air-quality lookup is based on your network (IP) location instead. No health data is sent.

RevenueCat
We use RevenueCat to manage in-app subscription status and entitlements. RevenueCat receives an anonymous app user ID and your App Store receipt data to verify your subscription. RevenueCat does not receive your health data. Their data practices are described in the RevenueCat Privacy Policy.

Apple (App Store & HealthKit)
Purchases and subscriptions are processed through Apple's App Store, subject to Apple's Privacy Policy. HealthKit access is governed by Apple's HealthKit framework guidelines.

There are no advertising networks, analytics SDKs, or social media trackers embedded in Aether.

HealthKit Data

Aether accesses Apple HealthKit data in strict compliance with Apple's guidelines and the following commitments:

Managing HealthKit permissions: You can view and revoke Aether's access to specific HealthKit data types at any time:

1. Open the Settings app on your iPhone.
2. Tap Privacy & Security → Health.
3. Select Aether and toggle individual data categories on or off.

Revoking HealthKit permissions will limit the data Aether can display but will not delete the health log already stored in the app. You can erase Aether's health log and lab values with Erase Aether data on this iPhone (Settings → Labs in the app), or remove everything by deleting the app.

Your Rights (GDPR & Global Privacy)

Regardless of where you live, Aether respects your right to control your personal data. If you are in the European Economic Area (EEA), United Kingdom, or a jurisdiction with equivalent data protection laws, the following rights apply to you:

• Right to Access: You may request a copy of the personal data Aether holds about you.
• Right to Deletion ("Right to be Forgotten"): You may request that we delete your personal data. For on-device data, you can accomplish this immediately by deleting the Aether app. To remove your waitlist email address, email privacy@aetherhealth.app and we will process your request within 30 days.
• Right to Data Portability: You may request your data in a structured, machine-readable format. You can also export your log (all days, or the last 7, 14, or 30) and lab values yourself at any time from the app.
• Right to Rectification: You may request correction of any inaccurate personal data we hold.
• Right to Withdraw Consent: You may withdraw consent for any data processing at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal. To withdraw consent, revoke permissions in iOS Settings (for HealthKit and location), disconnect your Oura or WHOOP account within the app, turn off Cloud Coach, or ask us to remove your waitlist email address.
• Right to Object / Restrict Processing: You may object to or request restriction of specific processing activities.

Data breach notification: In the event of a personal data breach affecting your data, we will notify you and the relevant supervisory authority within 72 hours of becoming aware, where required by applicable law.

Data Controller: For the purposes of GDPR, the data controller is Aether Health, operated by its developer ("Aether," "we," or "us"). You can contact us at privacy@aetherhealth.app; full contact details are in Section 11.

To exercise any of your rights, email us at privacy@aetherhealth.app. We will respond within 30 days.

Children's Privacy

Aether is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information through Aether, please contact us at privacy@aetherhealth.app and we will promptly delete that information.

Users under 18 should use Aether only with the involvement of a parent or guardian.

Data Retention

Because Aether operates on-device, your health data persists as long as the app is installed on your device. There is no separate server-side retention period for raw health data.

• On-device data: Retained until you delete the app or use Erase Aether data on this iPhone in the app.
• Oura and WHOOP OAuth tokens: Retained in the iOS Keychain until you disconnect the account in the app or uninstall Aether.
• Cloud Coach requests: Aether keeps no copy on any server. Requests are only sent to model providers that do not store or train on them (Section 4); OpenRouter's own handling is governed by its privacy policy.
• Waitlist email address: Kept until Aether launches, or until you ask us to remove it, whichever comes first (Section 10).
• Subscription data (RevenueCat): Retained as required for subscription management and legal/financial record-keeping. Governed by RevenueCat's data retention policies.

When you delete the Aether app, all locally stored data is removed from your device by iOS. Because Aether data is excluded from backups, it cannot be restored afterwards unless you exported it first.

Policy Updates

We may update this Privacy Policy from time to time. When we make material changes — such as adding new data collection, new third-party integrations, or significant changes to how we use your data — we will:

• Update the "Last updated" date at the top of this policy.
• Post a notice within the Aether app for significant changes.
• For changes that require your re-consent (e.g., new data uses), prompt you in-app before the change takes effect.

Continued use of Aether after a non-material policy update constitutes acceptance of the revised policy. For material changes, we will seek fresh consent where required by law.

We encourage you to review this policy periodically. The current version is always available at aetherhealth.app/privacy.

Website and Waitlist

This section covers our website, aetherhealth.app, and its waitlist form. It is separate from the app: nothing you enter on the website is connected to your health data.

• What we collect: Your email address, only if you enter it in the waitlist form. Nothing else is asked for.
• Why: To send you launch updates about Aether, such as a TestFlight or App Store note when a build is ready. We do not use it for anything else, and we do not sell or share it for advertising.
• Who processes it: Netlify, Inc. hosts the website and receives waitlist form submissions as our hosting and forms provider. Like any web host, Netlify also processes your IP address and basic browser information to deliver the pages. Netlify's practices are described in its Privacy Policy.
• Fonts: The website loads its typefaces from Google Fonts, so your browser sends your IP address to Google when a page loads. The website sets no cookies; it only remembers your theme choice (Classic or Emerald) in your browser's local storage.
• How long we keep it: Until Aether launches, or until you ask to be removed, whichever comes first.
• Removing your email: Email privacy@aetherhealth.app and we will delete it.

The legal basis for the waitlist is your consent, which you give by submitting the form and can withdraw at any time.

Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please get in touch.