This is Nirvaana’s consumer health data privacy notice. It is separate from the Privacy policy on purpose: health data has its own rules, and its own switch. It takes effect on 28 September 2026 and is published by Nirvaana AI, Inc., a Delaware corporation, at 335 Russell Blvd, Davis, CA 95616.
Nirvaana is not a medical service. It does not diagnose, treat or advise, and a reminder built from your health data is a reminder, nothing more.
What we collect
Only what you turn on, and only in the iPhone app. Each kind of health data has its own switch, and nothing of that kind is read until you have turned it on: sleep, steps, activity, heart rate, mindfulness, nutrition, medication, cycle, and other. The app sends only what a reminder needs: a kind, a time, a number and its unit, and at most a short note. Never a raw stream, a workout route, a device id or anything beyond that shape. If you type something about your health into a conversation, that is part of your world and is covered by the Privacy policy; a memory Nirvaana keeps from it can be marked as health data so it is deleted with the rest.
Where it comes from
Apple Health on your own iPhone, read-only, with your permission given in the app for each kind. And anything you type yourself. Nirvaana never writes to Apple Health and never reads a kind you have not turned on.
What it is for
Your own reminders. That is the only purpose. Health data is never used to profile you, to advertise to you, to set a price, to train a model, or for anything else.
Who sees it
Nobody. It is never sold, never shared, never used for training. Two companies process it on our instructions and for us alone: Supabase stores it, in the United States; Anthropic sees a reminder’s words only in a turn where you ask Nirvaana about that reminder. Your agent does not read your health rows on its own, and your connected AI tools (Claude, Claude Code, Cursor, any MCP client) cannot read them at all. A notification about a health reminder carries counts only, never the words. Analytics, if you have them on, count health events and carry nothing else about them.
How long we keep it
Observations are deleted 90 days after they were recorded, on their own. A reminder you made from them stays until you delete it. Deleting your account deletes all of it.
Your choices and your rights
- Turn any kind off, in Settings or in the app. That kind’s observations and reminders are deleted at once, and nothing new of that kind arrives until you turn it on again.
- Delete it all, in Settings or in the app, at once. Deletion reaches our backups within seven days.
- See it: Download my world in Settings includes it, as health.json.
- Take back a yes at any time; a yes is never final.
- Ask, or appeal. Write to hello@nirvaana.ai with “Health data” in the subject from the address on your account. We confirm it is you by sending a code to that address, and we answer within 45 days. If we refuse, we say why; reply and we look again. Residents of Washington and Nevada may also complain to their state attorney general.
How consent works
A yes is given kind by kind, in the app, after this notice is shown, and is recorded with the version of this notice you saw. It is never bundled into the Terms, never assumed, and never asked in a way that makes no harder than yes. When this notice changes, the app shows it again before it asks anything.
No geofencing
Nirvaana does not use your location around health facilities, or anywhere else, for anything.
Changes
When this notice changes, the date at the top changes, the app shows it again before any new yes, and we email you at least 30 days before a change that matters to you takes effect.
Contact
hello@nirvaana.ai, subject “Health data”. Post: Nirvaana AI, Inc., 335 Russell Blvd, Davis, CA 95616.