Privacy policy
Effective date: 20 September 2026
Last updated: 20 September 2026
Quanta syncs your Apple Health data to a private account so your AI assistant can answer questions about it. This policy explains what we collect, why, who can see it and what control you have.
The short version
- We collect your account details and the Apple Health data you choose to sync.
- Only you and the private link you create can read your data. We don't read it.
- Your data is stored in Frankfurt, Germany.
- We don't sell your data, use it for advertising or use it to train AI models.
- You can delete your account and all your data in the app at any time.
- If you connect an AI assistant, that assistant can read your data through your private link and handles it under its own terms.
1. Who we are
The controller of your data is MaxQ Company ("we", "us"). You can reach us at privacy@maxq.company.
[If required: EU/UK representative or data protection officer details.]
2. What we collect
Account information
- Your email address.
- How you sign in (Apple, Google or email) and the identifier that provider gives us. If you use Sign in with Apple and choose to hide your email, we only receive Apple's private relay address.
- If you sign in with email, your password. Our authentication provider stores it in hashed form, so we can't read it.
Health data you sync
Quanta only reads the types of Apple Health data you allow on the Health permission screen. If you allow everything we ask for, we sync:
| Group | What |
|---|---|
| Heart | Heart rate, resting heart rate, walking heart rate average, heart rate variability, heart rate recovery, and high heart rate, low heart rate and irregular rhythm notifications |
| Breathing and fitness | Blood oxygen, respiratory rate, VO2 max |
| Activity | Steps, walking and running distance, flights climbed, active and resting energy, exercise minutes, stand time and stand hours, time in daylight |
| Workouts | Activity type, start and end time, duration, energy, distance, average and maximum heart rate |
| Body | Body weight, body temperature, sleeping wrist temperature, blood pressure |
| Sleep | Sleep stages (in bed, awake, core, deep, REM) |
| Mindfulness | Mindful sessions |
| Environment | Environmental audio exposure |
With each reading we also store its start and end time, the name of the app or device that recorded it (for example "[Name]'s Apple Watch"), the device model, and any extra details the recording app attached. These names can include your own name.
Quanta only reads from Apple Health. It never writes to it.
Information about syncing
When each data type last synced and how many readings we received. Your iPhone also keeps sync bookmarks and, if you create one, your private link, in the iOS Keychain. These stay on your device.
Private link
If you create a private link for an AI assistant, we store a one-way hash of it, not the link itself. The link is shown on your device only.
Technical information
Like most services, our hosting provider records standard server logs when the app contacts our servers. These include your IP address, time of the request and the type of request. We use them to keep the service running and secure. We keep them for 1 day.
What we don't collect
Your location, contacts, photos, microphone or camera.
3. How we use your data
We use your data only to:
- create and secure your account and sign you in;
- sync your Apple Health data to your account;
- make your data available to the AI assistants you connect, through your private link;
- show you your own data and sync status in the app;
- give you support when you ask;
- keep the service secure, prevent abuse and fix problems; and
- meet legal obligations.
We do not:
- sell your data or share it for advertising;
- use your health data for advertising, marketing or profiling;
- use your health data to train AI models;
- share your health data with data brokers, insurers or employers.
4. We don't read your data
We don't access the contents of your health data. The exceptions are narrow:
- you ask us for support and give us permission to look;
- it is necessary to protect the security of the service or investigate abuse; or
- the law requires it.
5. Why we're allowed to use your data (EU and UK)
| Purpose | Legal basis |
|---|---|
| Running your account and the sync service | Performing our contract with you (Terms of use) |
| Processing your health data | Your explicit consent. You give it when you allow Health access and create your account. You can withdraw it at any time (see section 9). |
| Sending it to an assistant you connect | Your explicit consent, given when you create and use a private link |
| Security, abuse prevention and logs | Our legitimate interest in keeping the service safe |
| Legal obligations | Compliance with the law |
Health data is "special category" data under European law. We only process it with your explicit consent.
6. Who we share data with
Service providers
They process data for us and under our instructions.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, server functions and hosting | Frankfurt, Germany, plus Supabase's infrastructure providers |
| Apple | Sign in with Apple, if you use it | Per Apple |
| Sign in with Google, if you use it | Per Google | |
| [EMAIL PROVIDER] | Sign-up confirmation and password reset emails | [LOCATION] |
AI assistants you connect
This is your choice. When you add your private link to an AI assistant, that assistant's provider can read your health data through the link, for as long as the link is active. Today, that means Claude, from Anthropic. We don't control what an assistant provider does with the data it reads. Their terms and privacy policy apply, and may allow processing outside your country. Read them before you connect.
Anyone else who gets hold of your link can read your data too, so treat it like a password. You can reset the link in the app at any time. The old link stops working immediately.
Legal and safety
We may disclose data if the law requires it, if a valid legal request obliges us, or to protect people's safety or rights. Where the law allows, we'll tell you first.
Business changes
If we merge with or are acquired by another company, your data may transfer to it. We'll tell you before your data becomes subject to a different privacy policy, and you can delete your account first.
7. Where your data is stored and transfers
Your data is stored in Frankfurt, Germany. [We are based in [COUNTRY]. Where data moves outside the EU/UK, for example to an AI assistant you connect, or to us in [COUNTRY], we rely on [Standard Contractual Clauses / an adequacy decision / your consent] to protect it.]
8. How long we keep it
- Account and health data: until you delete your account.
- Server logs: 1 day.
- Support messages: [SUPPORT RETENTION, e.g. 2 years] after we close the request.
- Backups: when you delete your account, it is removed from our live systems right away. Copies in our provider's backups are overwritten within [BACKUP WINDOW, e.g. 30] days.
- Inactive accounts: [OPTIONAL: We may delete accounts that have had no sync or sign-in for [24] months, after emailing you.]
Deleting the Quanta app from your iPhone or signing out doesn't delete your account. Use Delete account and data in Settings.
9. Your choices and rights
In the app
- Delete everything. Settings → Delete account and data. It permanently deletes your account, every synced record and your private link, and disconnects your assistant. Your Apple Health data on your iPhone isn't affected.
- Stop syncing. Turn off Quanta's access in Settings → Health → Data Access and Devices → Quanta. New data stops syncing. Data already synced stays until you delete your account.
- Cut off an assistant. Connect Claude (or your assistant) → Reset link.
- Choose what to share. You decide which Health types Quanta can read.
- Re-sync. Settings → Re-sync all history sends your Health data again. It doesn't create duplicates.
Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent. To use any of these, email privacy@maxq.company. We'll answer within one month. We may need to verify it's you. Health readings come from Apple Health, so to correct one, fix it in Apple Health and re-sync.
You can complain to your local data protection authority. In the EU, you can find yours at edpb.europa.eu. In the UK, it's the ICO.
10. United States residents
If you live in California, Colorado, Connecticut, Virginia, Washington, Nevada or another state with a privacy law:
- We collect the categories of data in section 2 for the purposes in section 3.
- We don't sell personal information or share it for cross-context behavioral advertising.
- We use health data only to provide the service you ask for.
- We disclose health data only to service providers (section 6) and, at your direction, to the AI assistants you connect.
- You can ask to access, delete, correct or get a copy of your data, and to appeal a decision we make about your request, by emailing privacy@maxq.company. We won't discriminate against you for using these rights.
[COUNSEL: decide whether Washington's My Health My Data Act requires this section to be a separate "Consumer Health Data Privacy Policy" linked from the homepage.]
11. Security
- Data is encrypted in transit between the app, our servers and your assistant.
- Each account can only access its own rows in the database. Access is enforced by the database itself, not just the app.
- We store only a hash of your private link, and your device keeps the link in the iOS Keychain.
- We limit who at our company can reach production systems.
No system is perfectly secure. If a breach affects your data, we'll tell you and the authorities as the law requires.
12. Children
Quanta isn't for anyone under 16. We don't knowingly collect data from children. If you think a child has created an account, email privacy@maxq.company and we'll delete it.
13. Not medical advice
Quanta shows you and your AI assistant health data. It doesn't provide medical advice, diagnosis or treatment. See the Terms of use.
14. Changes to this policy
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect. We'll always update the date above.
15. Contact
MaxQ Company
privacy@maxq.company