Our approach
Your choices control AI modes and optional sharing. Account services, hosted integrations and uploads use cloud processing and storage as described below. We do not sell your health data.
What we collect
Data you provide or authorize can include account and profile details; health, activity, nutrition, workouts, mood and environment readings; uploaded reports; questions and context sent to Ani; and optional diagnostics.
- Account: name, email and profile details
- Health: wearable metrics, sleep, glucose, labs, meals, workouts, mood and connected environment readings
- Optional diagnostics: limited JavaScript error classifications, off by default
Where data is stored
Account and profile data are stored on Anivya servers. Hosted wearable integrations store connection credentials and imported health and sleep history there.
Device health imports and local chat history use device storage. Uploads, cloud-generated plans and derived summaries can also create server or provider records.
How Ani processes your data
Supported on-device AI requests process locally. Bring-your-own-key (BYOK) requests send the selected question and context directly to your configured AI provider. Managed Cloud Ani sends the question and admitted context through Anivya to frontier AI model providers for applicable features. We have HIPAA Business Associate Agreements (BAAs) in place with these providers.
Provider retention, logging and training practices depend on the service and account configuration. An on-device AI choice applies to that request; account, connected-service and upload features have separate data flows.
Reports and images
AI lab extraction uploads the entire PDF or image to Anivya and sends all report pages to a frontier AI model provider covered by a HIPAA BAA, including names and other personal details in the file. Turning document cloud sync off does not stop this analysis upload.
You can enter lab values manually instead.
Food-photo analysis also sends the selected image to cloud AI services.
How we use your data
We use data to compute scores and insights, provide Ani coaching, run features you select and support account and connected-service functionality. Some features retain derived summaries, plans, usage records or personal model parameters.
Sharing
We do not sell your health data. Care sharing is initiated by you and can be revoked. Cloud hosting, AI and connected-service providers receive data needed for the relevant features; their own retention policies also apply.
Connected services
Apple Health and Health Connect permissions control access to data on your device. Hosted wearable integrations send authorized data to Anivya servers. Home Assistant and other destinations receive the fields you select for sharing.
Disconnecting a source stops future access or sync through that connection; it does not delete previously imported history or copies already received by another service.
Google Health and Health Connect data you authorize may include sleep, activity, workouts, heart rate, HRV, recovery metrics, nutrition, glucose and other wellness data. We use Google user data to provide Anivya features, do not sell it or use it for advertising, and share it with third parties only as needed to provide the service with your consent.
Feedback board
Anivya Feedback is a separate, public product-feedback service hosted by Anivya. If you choose to use it, we process the display name, email address, posts, comments, and votes you submit so we can organize requests and communicate product updates. Its database is isolated from Anivya health data.
Do not post health readings, medical details, account information, or other sensitive data there. Contact support privately for account or health-data issues.
Your controls
Settings provides data exports, deletion controls, source disconnection and sharing choices. Exports cover the records included by each export feature.
Account deletion removes registered health records, clears profile and login credentials, and retires the account. Billing, trial, security and audit records may remain linkable to the account. Files, active jobs, provider copies, logs and backups can have separate retention and cleanup limits. Deletion is not a guarantee that every copy has been physically removed.
If you no longer have the app, request account deletion at /account-deletion or email privacy@anivya.health from your account email.
- Export supported records
- Delete registered health records or retire your account
- Disconnect sources and revoke future sharing
Security
Managed API and remote AI provider requests use HTTPS. Connections you configure to localhost or supported private-network destinations can use unencrypted HTTP; use HTTPS when the destination supports it.
Local storage protections, security controls and retention depend on the feature, provider and hosting configuration. A supported on-device AI request processes locally; other enabled cloud features remain separate.