Privacy Policy

With your authorisation, Correlate reads from:

• Apple HealthKit — the types you allow, including heart rate, HRV, sleep, activity, workouts, calories, blood pressure, blood oxygen, respiratory rate, wrist temperature, body weight, nutrition and caffeine, walking steadiness, time in daylight, menstrual flow, State of Mind (mood), and your date of birth and sex (for age-appropriate reference ranges). Correlate only reads; it never writes to Apple Health.
• Files you import (optional) — Oura and WHOOP CSV exports you pick in the Files app
• Your Oura account (optional, from version 2.7) — described below
• Your manual logs — daily yes/no answers such as “Did I train today?”

How it is processed:

• You authorise Correlate to read Apple Health, or pick a file to import.
• The app reads that data on your iPhone.
• Every correlation and score is computed on the device.
• Your health data and logs are not sent to our servers, to cloud storage, or to a third party, unless you export or share them yourself (CSV export, PDF report, share cards).
• Like any app's data, the app's local storage is included in iPhone backups you make to iCloud or a computer; those backups are under your control.

If you choose Connect Oura in Data Sources, you sign in on Oura's own page and allow Correlate to read your daily Oura data. Correlate downloads Oura's daily summaries and nightly sleep records and keeps only these values: readiness, sleep and activity scores, temperature deviation, nightly average HRV, and daily minutes of high stress and high recovery. It asks Oura only for the “daily” permission and only reads; it never changes anything in your Oura account and never writes Oura data to Apple Health.

Your Oura data comes from Oura's servers directly to your iPhone and is stored there, not on our servers. It is used only to show your Oura scores and to compute charts and correlations on your iPhone alongside your other data. It is never used for advertising and never included in usage statistics. It is included when you choose Export Everything (CSV); it is not included in PDF reports or share cards.

Signing in, and renewing the connection afterwards, needs a secret key that Oura issues to Correlate and that cannot be kept safely inside an app. Those two steps therefore go through a small sign-in service we run on Cloudflare. It sees your IP address and the sign-in code and access keys for your Oura connection, which are what let Correlate read your Oura data. No health data passes through it. It does not store the codes or keys, we have turned off request logging for it, and your IP address is used only to count requests over one minute, to limit abuse.

Garmin Connect support is in development and is not in the app today. We will update this policy, including where Garmin data is processed, before it ships.

If you allow location access, the Environment view sends your device's location to Apple's WeatherKit to fetch local weather and UV, so the app can compare them with your metrics. We never receive your location; Apple handles the request under its own privacy policy. Decline or revoke it in iOS Settings › Privacy & Security › Location Services and the rest of the app works as before.

To understand which features are used, the app sends usage signals through TelemetryDeck. If your iPhone's Region is in the EU/EEA, the UK, Switzerland, Gibraltar or the Crown Dependencies, or is not set, this is off until you turn it on. Elsewhere it is on until you turn it off. Each signal carries:

• a pseudonymous identifier: a one-way hash of your device's identifier for our apps, the same on every signal from that device;
• what happened: app launches, screens opened, features used, and a few in-app choices such as which goals you picked during onboarding, which wearable you imported from, and how many habits you track;
• device context: app version, device model, iOS version, language, region and time zone, display and accessibility settings, and session counts and lengths.

It never includes your name, email, health values, the answers you log, or your location. Turn it off in Dashboard › gear icon (Data Sources) › Privacy › Share usage statistics.

If you write to us, including through Contact / Report a Problem, we receive your email address and what you write. The in-app button also adds your app version, iOS version, device model, and locale. It adds no health data. We use this only to answer you.

• Your data already lives on your device — export it from Apple Health at any time.
• Dashboard › gear icon (Data Sources) › Delete All App Data removes everything Correlate stores on your iPhone, including Oura data and the Oura connection, returns the app to setup, and keeps only your appearance, notification and usage-statistics settings. It does not touch Apple Health.
• Oura connection — Data Sources › Oura › Disconnect Oura asks Oura to revoke Correlate's access, stops syncing and removes the connection's keys from this iPhone; you choose whether to keep the Oura data in Correlate or delete all of it, including any you imported from Oura CSV files. If Correlate cannot reach Oura, or its access key has expired, the access stays in your Oura account until you remove it there; uninstalling Correlate does not revoke it either. You can also revoke Correlate's access in your Oura account at any time; Correlate then stops syncing. We never receive your Oura data, so there is nothing of yours on our side to delete.
• Uninstalling the app deletes all of its local data. (iOS keeps an Oura connection's keys in the Keychain after uninstall, but a new install never uses them; connecting Oura again replaces them.)
• Revoke access in the Health app, or location in iOS Settings, and Correlate loses it immediately.

Dashboard › gear icon (Data Sources) › Privacy › Share usage statistics → off, and the app stops sending new signals.