Privacy policy (draft)

DRAFT, NOT YET LEGALLY REVIEWED. This draft explains how Qira works today, in plain language. It must be reviewed by a qualified lawyer (including for GDPR, UK GDPR, CCPA/CPRA and US state health-data laws such as Washington's My Health My Data Act) before the apps launch. Items in [brackets] need to be filled in.

The short version

Your heart scan video never leaves your phone. It is analysed on the device and only the resulting numbers are used.
Tongue and meal photos are sent securely to an AI provider to be read. Qira does not store them on its servers.
Your history (scores, readings, meals) is saved on your device.
We never sell your data and never use health information for advertising.
You can delete everything from the app's Settings at any time.

Who we are

Qira is operated by [LEGAL BUSINESS NAME], [ADDRESS] ("Qira", "we"). Contact: [SUPPORT EMAIL] or our contact form.

What we collect and why

Data	Why	Where it goes
Face or fingertip video during a heart scan	To estimate heart rate, HRV, breathing and stress	Processed on your device only. Never uploaded.
Tongue photos (top and underside)	To create your reading	Sent over an encrypted connection to our AI provider (Anthropic) for analysis. Not stored on Qira's servers.
Meal photos	To create your meal report	Same as tongue photos.
Your answers (age range, goals, sleep, digestion, how you feel) and scan numbers	To personalize your reading and plan	Sent with the photos for analysis; history saved on your device.
Coach messages and voice	To answer your questions	Sent to our AI provider to generate a reply. [Confirm whether voice is transcribed on device or by a provider.]
Waitlist email	To tell you when the apps launch	Stored by Qira [storage provider]. One launch email; unsubscribe anytime.
Contact form messages	To reply to you	Stored by Qira [storage provider].
Basic usage events (for example "scan started", "report viewed"), with no photos, names or health values	To understand which steps work and fix problems	[Analytics provider, for example Vercel Web Analytics.]
Purchase status (in the apps)	To unlock Premium	Apple, Google and [RevenueCat]. We never see your card details.

Health data

Readings about your body can be sensitive. We process them only to give you the features you ask for, with your consent, which you give in the app before your first scan and can withdraw in Settings. We do not use health data for advertising, do not sell it and do not share it with data brokers.

Service providers

We use a small number of providers who process data on our behalf under contract: Anthropic (AI analysis), Vercel (hosting), [storage provider], [analytics provider], and, in the apps, Apple, Google and [RevenueCat] for purchases. [Add data processing agreements and international transfer safeguards.]

How long we keep data

Photos: not kept on Qira's servers after analysis. [Confirm the AI provider's retention terms.]
History on your device: until you delete it or uninstall the app.
Waitlist emails: until launch plus [X] months, or until you unsubscribe.
Contact messages: [X] months.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Write to [SUPPORT EMAIL]. You can also complain to your local data protection authority.

Children

Qira is not intended for children under [16]. We do not knowingly collect data from children.

Security

Data in transit is encrypted (HTTPS). Our servers accept requests only from Qira's own apps and site, with rate limits.

Changes

We'll update this page and the date above if anything changes, and tell you in the app about important changes.