Privacy Policy

What stays on your phone

Everything you record in Triggerwise is saved in the app's storage on your iPhone:

• Your conditions and the symptoms, triggers, medications and episode types you set up for each one.
• Your logs, episodes, medication doses and any notes you write.
• Reminder times, chart preferences, and saved AI analyses with their follow-up conversations.

The app has no account and no sign-in. It does not sync your records to us or to any cloud service of ours, and we cannot retrieve your local database. If you request AI analysis or send information to support, we and the relevant providers process what you send as described below. The app requests iOS Complete File Protection for its health database and temporary exports.

Reminders are scheduled on the phone itself. Their text does not include condition names or health details.

If you back up your iPhone to iCloud or a computer, the backup may include Triggerwise's data. Those backups are controlled by you and Apple, not by us.

Exports

You can export one condition's full history as a text file for an AI assistant or as CSV tables. Before sharing, the app shows what is included. Nothing is uploaded automatically: the file goes only to the app or location you pick in the iOS share sheet, and that destination's own privacy and retention policies then apply to its copy.

Log and episode notes are left out unless you switch them on. Condition names, item names, scale labels and medication descriptions are always included, so anything personal you typed into those will be in the file. No account, device or database identifiers are added.

AI analysis

In-app analysis is optional. It runs only after you turn on the consent switch on the Analyze screen, which names what will be sent and where. You can decline and keep using the tracking and export features available on your plan. Consent is not inferred from installing the app, subscribing or accepting these terms.

What is sent. For the one condition you are analyzing: its name, statistics computed on your phone and a daily table of values; the names and labels of your tracked items; saved log times and which symptom values were carried forward; medication doses and strengths; and episode details. Free-text notes are excluded unless you choose to include them. Follow-up questions send the same package again, together with the original analysis, your earlier questions and their answers, and the new question you typed. Questions are sent even when log notes are off. Names, labels and medication descriptions can also contain identifying information you entered; avoid unnecessary identifying details.

Where it goes. The request travels over an encrypted connection to our server, hosted by Cloudflare, which passes it to Anthropic's API and returns the result. Our analysis server processes this health data and the results in memory to fulfill the request and does not persist them or include them in application logs. Network providers necessarily process connection information, such as IP addresses and request timing, to deliver and secure the service.

What our server keeps. To prevent abuse and enforce usage limits, our server keeps App Attest verification material, installation-linked identifiers, replay-prevention records, usage counters, and opaque report and request identifiers with timestamps. Subscription allowances are associated with a RevenueCat customer identifier so restoring a purchase does not reset the allowance. These records do not include health payloads, notes or generated answers. Verification may run during app or purchase setup, even without an AI request. These records are not removed by Delete all data.

How long Anthropic keeps it. Anthropic normally deletes API inputs and outputs within 30 days. It may keep them longer for safety, legal or contractual reasons: content flagged for policy review can be kept for up to two years, and safety classification results for up to seven years. Some models or separately agreed terms may have additional retention requirements. This is not zero-retention processing. See Anthropic's retention policy.

You can stop future AI sharing by not submitting further analyses or follow-up questions. Closing an analysis ends that session; reopening a saved report to continue requires fresh consent. Cancelling a request stops the app waiting for an answer but cannot recall data already sent. Contact us to withdraw consent for processing we control or request deletion of information already submitted, subject to applicable retention requirements. Completed analyses and conversations are saved on your phone, including any notes you chose to include, and stay there until you delete the analysis or delete all data, even if you later edit or delete the logs they were based on.

Purchases

Subscriptions are bought through Apple's App Store. Apple handles payment; the purchase integration does not give us your card details or Apple Account email. We use RevenueCat to validate purchases, restore access, manage entitlements and understand subscription activity. RevenueCat processes purchase history, transaction identifiers, subscription status, an app user identifier, and technical information such as app/OS version, locale and currency. This can occur when the app initializes or checks purchase access, even if you do not request AI analysis.

The app user identifier is normally derived from the installation's App Attest key; RevenueCat may supply an anonymous identifier when that is unavailable. These are pseudonymous identifiers, not a promise of anonymity. Our analysis server checks subscription access with RevenueCat. We do not send health records, notes, questions or AI results to RevenueCat. See RevenueCat's Privacy Policy.

What we do not do

• We do not show advertising in the app.
• We do not sell your data or share it for anyone's marketing.
• We do not track you across other companies' apps or websites.
• We do not use advertising SDKs or analytics that track your health logging. RevenueCat provides purchase and subscription analytics as described above.
• We do not use your health data to train AI models.

Companies involved

• Apple distributes the app, processes purchases and provides App Attest device verification. Your optional device backups are also subject to Apple's settings and terms.
• RevenueCat processes purchase and app user information for subscription access, restoration and subscription analytics.
• Cloudflare hosts this website, the analysis relay and its security and usage records, and processes network requests.
• Anthropic provides the AI model that produces the analysis, and receives the data described above only when you agree to send it.

Service providers acting on our behalf must provide protection consistent with this policy and applicable data-protection requirements. Provider-specific retention and legally required processing are described above. These companies may process data in the United States and other countries.

Deleting your data

You can delete a single log, episode or saved analysis in the app at any time. Tracking setup also offers Delete all data, which erases every condition, record, saved analysis, draft, reminder and temporary export file on the phone. Deleting the app removes its local health database; offloading the app is different and can preserve data. Device backups, exported copies and purchase/security identifiers are not erased by this action.

Deleting in the app does not delete copies you exported, device backups, data already sent to Anthropic, purchase records held by Apple or RevenueCat, or server security and allowance records. It does not cancel a subscription. Manage billing in your Apple Account subscription settings. Local records stay until you delete them; saved analysis snapshots must be deleted separately from source logs.

Our current server does not automatically expire an inactive installation's verification record or its free/trial allowance record. Old monthly counters and excess report records are pruned during later usage, so inactivity alone does not erase them. We retain these records to prevent replay, enforce allowances and support purchase restoration. Contact us for access or deletion requests; we will assess any legal retention requirements and explain any refusal. Apple and RevenueCat maintain purchase records under their applicable policies and legal obligations. To ask us about retained information, write to webmaster@selectwv.com.

This website

This website does not use advertising or tracking cookies. Our hosting provider, Cloudflare, processes standard request information such as IP address and browser type to deliver the pages and keep them secure. If you email us, we keep your message and address for as long as needed to reply and keep a record of the exchange.

Children

Triggerwise is intended only for people aged 18 or older. People under 18 may not use its tracking or AI features. If you believe a person under 18 has provided personal information to us, contact webmaster@selectwv.com so we can investigate and take appropriate action, including deletion where required.

Your rights

Depending on where you live, you may have the right to ask for access to, correction of, or deletion of personal information we hold about you, to receive a portable copy, to withdraw consent, and to object to or restrict how it is used. These rights depend on applicable law and may have exceptions. Because your health records are stored on your own phone and not with us, you can access, edit, export and delete those local records directly in the app. This does not replace your rights concerning data we or our providers process outside the phone. For anything we do hold, contact webmaster@selectwv.com. You may also complain to your local data protection authority.