Privacy policy

Sanare is an app that collects your health and activity data from Garmin, Apple Health and other devices you connect, explains it with an AI coach, and lets you share it with your family or your company. It runs on iPhone and in a web browser. This policy explains what we collect, why, who sees it, and how to have it deleted.

Who we are

The data controller is Mykhailo Liakh, NIP 6751765918. For anything about your data, write to [email protected].

What we collect

Your account

You sign in with Google or with Apple. We store your name, email address and, from Google, your profile picture. If you sign in with Apple and choose to hide your email, we store the relay address Apple gives us. To keep you signed in, we keep a session record with your IP address and your device or browser type. For Sign in with Apple we also keep the token Apple issues, encrypted, so we can revoke it when you delete your account.

Health and activity data from Garmin

When you connect Garmin Connect, we import:

• daily summaries: steps, distance, calories, floors and active minutes;
• heart rate and resting heart rate, heart rate variability, sleep and sleep stages, stress, Body Battery, blood oxygen (SpO2), respiration and training readiness;
• weight and body composition from your Garmin scale;
• your height and birth year from your Garmin profile;
• your activities, with the name of the Garmin device that recorded them, and their heart rate, heart rate zones, laps, splits, respiration, strength exercise sets, effort and how you felt;
• the gear you used, such as shoes, with its total distance;
• the GPS route of an activity, when you open it;
• your watch alarms.

Routes are stored on our servers so the workout page can show a map. You see the route only on your own workouts, and by default the first and last 200 metres are cut off what you see; you can change that in Settings. Family members never see your routes. The start point of an activity is also used, rounded to about 1 km, to look up the weather at that time; the weather is saved with the activity, not the location.

Your watch alarms are used only for your own sleep plan and bedtime reminder (a copy is kept on your phone for that). They are never shown to family members or to your company, and they are deleted when you disconnect Garmin.

You sign in to Garmin inside the app. Your Garmin email and password go to our server once, are passed to Garmin to sign in, and are not stored. We keep only the access tokens Garmin issues, encrypted with AES-256-GCM, and use them to fetch new data. Accounts with Garmin two-step verification can’t connect yet.

If you enter your weight or height in Sanare, we also save it to your Garmin profile.

You can disconnect Garmin at any time in Settings. That deletes the tokens, and we stop importing. When you disconnect, you choose whether the data already imported stays in your account or is deleted.

Apple Health

On iPhone, with your permission, the app reads from Apple Health:

• steps, distance walked, run or cycled, floors climbed, and active and resting energy;
• heart rate, resting heart rate, heart rate variability, blood oxygen and respiratory rate;
• sleep, mindful minutes, time in daylight, and exercise and move time;
• weight, water, and workouts.

If you use these features, it also reads:

• the routes of your workouts;
• VO2 max, body fat percentage, height and waist;
• your date of birth, of which we keep only the year;
• your biological sex;
• walking heart rate, blood pressure and sleeping wrist temperature;
• caffeine and alcoholic drinks;
• menstrual flow, for the cycle calendar.

Apple Health asks you about each kind, and you can refuse any of them. The app writes only one thing to Apple Health: a height you enter in the app.

If you share steps with a company, today’s step count is sent to our servers so the company leaderboard stays live.

Xiaomi devices and Apple Home

• Bedroom clock. If you add a Xiaomi bedroom clock, the phone reads it over Bluetooth and sends us hourly temperature and humidity. No Xiaomi account is involved.
• Apple Home. If you set up the Apple Home bedroom air Shortcut, it reads your Home air sensor (temperature, humidity, and, where the sensor has them, carbon dioxide and PM2.5) when you run it. The phone keeps each reading and sends us the hourly lowest and highest of each value. If you use both the clock and Apple Home, for each value we keep the reading from the source that measures it best.
• Air purifier and Mi Fitness. If you connect a Xiaomi air purifier or Mi Fitness (Mi Band), your Xiaomi email and password, and any verification code, go to our server once and are passed to Xiaomi to sign in; they are not stored. We keep the session tokens Xiaomi issues, encrypted with AES-256-GCM, along with your Xiaomi region and user ID, the device’s name and model, and the connection’s status (last and next sync, and the kind of error if one failed). From the purifier we read PM2.5, mode, fan speed and filter life. From Mi Fitness we read steps, heart rate, sleep and sleep stages, blood oxygen, sleep heart rate variability and, where Xiaomi has it, stress. You can disconnect either one in Settings.

What you enter in the app

If you use these features, we store what you enter:

• medications, with their doses, schedules and the doses you mark as taken;
• body measurements, such as height, waist and hips;
• caffeine, water and alcohol you log;
• habits and the days you complete them;
• your activity status (sick, injured or on a break) and its dates;
• menstrual cycle days;
• your sex, weight goal, wake time and maximum heart rate;
• your Today page layout and app settings.

Location

If you allow it, the app reads your approximate location while you use it, never in the background, to show the weather and air quality where you are. Before it leaves your phone, the location is rounded: to about 1 km for weather, about 5 km for air quality, and about 10 km for rain alerts. Our server rounds it again to the same precision and asks Apple WeatherKit for the weather and OpenWeather for air quality. We don’t store your location. We save the day’s air quality reading (levels only, no location) so the coach can refer to it. The place name you see is looked up by your iPhone, not by us.

Your coach conversations

We store your chats with the coach, the summaries, workout briefs, weekly plans and reports it writes, and your coach settings (tone, time zone, language, schedule). The coach keeps short facts about you that it learns or that you tell it. You can see, edit, switch off and delete them in the app. We keep a log of those changes; when you delete a fact, its text is removed from the log. We also record how much of the coach you use.

AI assistants you connect

If you connect an AI assistant, such as ChatGPT, Claude or Grok, in Settings › AI assistants, it can use your Sanare data on your behalf. You connect it either by signing in to Sanare from the assistant and allowing access, or with a personal token you create in Sanare. We store a record of each connection: the assistant’s name, what you allowed, and when it was last used. A personal token is stored only as a one-way hash.

• It can read your own data: your daily figures, sleep, heart rate, workouts, weight, body, bedroom, habits, medications, intake, weather and air quality, and your coach’s notes. It never gets the GPS route of a workout, and habits and medications you mark private stay in the app.
• If you allow changes, it can log a weigh-in (which is also saved to Garmin, like one entered in the app), set your weight goal, wake time or a body measurement, tick a habit, log a drink and mark a dose as taken. Assistants are told to ask you first.
• It can ask your coach a question. Those conversations appear in your coach chats.

Only your own data is available, never your family’s or your company’s. What the assistant then does with it is governed by your agreement with that assistant’s provider, not by this policy. You can disconnect an assistant or delete a token at any time in Settings › AI assistants.

Family and company membership

If you join a family or a company, we store that membership, your role, and what you share. If you invite someone, we store their email address to send the invitation.

Notifications

If you allow notifications, we store your device’s push token. We send two kinds of notifications from our servers: family invitations, which show the inviter’s name, and the weekly report, which carries no health data. They are delivered through Expo’s push service and Apple Push Notification service. Your phone shows its other reminders on its own: medications, habits, bedtime, weather and air alerts, and insights after a sync.

Usage analytics

If you agree, the app records usage events and sends them to us with your account ID, so we can see which parts of the app are used and where it breaks. The app asks you before it sends any, and you can change your answer at any time in Settings › Share usage analytics. Events include:

• the app opening and the screens you view;
• connecting a source, syncing and using the coach;
• widgets and habits you add or change;
• settings you change;
• errors.

They contain no health values, no message text and no names. We keep them on our own servers for 13 months.

To keep the app working, our servers also log which version of each app feature your account was served each day, with your app version. We keep that log for 90 days.

Bug reports

If you send a bug report from the app, we store your text, any screenshots you attach, your email address, and details about your device and app: model, iOS version, app version, language, time zone, screen and text size, the screen you were on, and which sources you’ve connected.

Why we use it

• To show you your health data, trends and history in the app.
• To let the AI coach write your summaries, workout briefs and plans, and answer your questions.
• To show your data to the family and company members you choose, and to the AI assistants you connect, as described below.
• To show the weather and air quality where you are, and to send the notifications you turn on.
• To run your account, fix problems, understand how the app is used, and keep the service secure.

We don’t sell your data, we don’t use it for advertising, and we don’t use it to train AI models.

Legal basis

Health data is a special category of personal data. We process it only with your explicit consent (GDPR Article 9(2)(a)), which you give when you connect a source, enter health data in the app, connect an AI assistant, and choose to share. You can withdraw consent at any time by disconnecting a source or an assistant, deleting what you entered, stopping sharing, or deleting your account. We process your account details to provide the service you signed up for (Article 6(1)(b)). We use your location for weather and air quality, and send usage analytics, only with your permission (Article 6(1)(a)); you can withdraw it at any time. We process server logs and bug reports for our legitimate interest in keeping the app working and secure (Article 6(1)(f)).

Who can see your data

• You see all of your own data.
• Your family. If you join a family (up to five people), members can see each other’s daily health stats, workouts, summaries, bedroom climate and medications in the app, read-only. The family’s main account sees every member, and decides which members the others can see. A family member can ask the coach about the family, which sends the visible members’ figures to the AI model (see below). Your chats with the coach are never shared, and your workout routes are never shown to family members. You can leave the family at any time.
• Your company. If you join a company through Sanare for Teams, its admins see your name, email address and role, when you last synced and whether your Garmin is connected, plus only the metrics you choose to share: steps, sleep, stress or Body Battery. Nothing is shared by default. Shared metrics appear on the team leaderboard and in team averages. You can stop sharing or leave the company at any time and keep your account.
• AI assistants you connect see what is described above, until you disconnect them.

AI coach and model providers

To write summaries and answer questions, the coach sends the relevant parts of your health data, what you’ve entered in the app, and your message to an AI model. It never sends email addresses. A question about the family also sends the names and relationships the family uses for each visible member, beside their figures. Which model your account uses is set by us, and the coach moves to the next model on the list if one is unavailable:

• OpenAI’s GPT-6 Luna, through OpenRouter.
• Anthropic’s Claude Haiku 5.5, through OpenRouter or directly through Anthropic.

We ask OpenRouter to use only hosts that don’t store or train on the data. The data is processed only to return a response. The coach is not a doctor and does not give medical advice.

Service providers

• Google: sign-in.
• Apple: Sign in with Apple, Apple Health, push notifications, WeatherKit for weather, and Apple Maps to draw workout maps.
• Garmin, Xiaomi and Apple Health: the sources you connect.
• OpenAI and Anthropic, through OpenRouter or directly: the AI coach, as described above.
• OpenWeather: air quality for your approximate location.
• Resend: sends family and company invitation emails.
• Cloudflare: secures and delivers traffic to our servers.
• Expo: delivers app updates (your phone contacts Expo’s servers to check for them) and push notifications.

We don’t use third-party analytics or advertising trackers. The usage analytics described above stay on our own servers.

Where your data is stored

Your data is stored in a database on our own servers in the European Union. The database only lets each account read its own data and the data other people have shared with it. The app also keeps a copy of your own data on your phone so it works offline. Data that family members share with you is held only in your phone’s memory, never on its storage.

The web app uses a cookie to keep you signed in; it sets no other cookies.

Some providers above process data outside the European Economic Area, for example in the United States, including the AI model providers. Where the law requires it, these transfers rely on safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

We keep your data while your account exists, except:

• usage analytics, kept for 13 months;
• feature logs, kept for 90 days;
• weather lookups, kept only in memory, for up to two hours.

Disconnecting a source stops new imports. For Garmin you choose whether the data already imported is kept or deleted; for other sources it is kept. You can delete your account in the app under Settings › Delete account:

• What is deleted: your account, your health data, everything you entered, your coach history (including any of your figures in other family members’ coach chats), your connections, your AI assistant connections and your bug reports, right away.
• Revoked at Apple: if you signed in with Apple, we also ask Apple to revoke Sanare’s access.
• Family: if you are a family’s main account, the role passes to the oldest adult member.
• What we keep: an internal record of the account ID and when it was deleted, for 24 hours, so the deletion can finish.

Requests by email are handled within 30 days. See Delete your data.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Write to [email protected] from the email address on your account and we will answer within 30 days. You can also complain to your data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO).

Children

Sanare is not intended for anyone under 16, and we don’t knowingly collect their data.

Changes

If we change this policy in a way that affects you, we will tell you in the app or by email before the change takes effect.