Syncky Health — Consumer Health Data Privacy Policy (United States)

Last updated: 23 October 2026

This notice is for people in the United States, and it meets the consumer health data laws of Washington (My Health My Data Act), Nevada (SB 370) and Connecticut. It adds to our Privacy Policy, which describes everything we process; where the two overlap, both are true.

Who we are

Syncky Health is made by Smirnovs Sergejs ("we"). Contact for this notice: privacy@syncky.app.

What consumer health data we collect, and why

Syncky Health moves Apple Health data from your iPhone to places you choose. We collect consumer health data only in one form:

Sealed health data in transit. When you pair an AI agent you run, the app encrypts each batch of health data on your iPhone for that agent and hands the sealed message to our Relay service. Relay stores it until your agent collects it, for at most 7 days, and cannot open it: we hold no key. We collect it for one purpose, to deliver it to the agent you chose.
Connection data about those messages. The identifiers of your iPhone and your agent in Relay, the names you gave them, the public keys, the size and time of each sealed message, your IP address while a request is handled (for rate limiting), and your iPhone's push token so Relay can wake it. Purpose: to route the messages, keep Relay secure and available, and send you the notices described in the Privacy Policy. None of this reveals your health values or which data types you share.

We do not collect health data when you send to your own servers (the request goes from your iPhone straight to your server) or export a file. The optional usage statistics (off until you turn them on) carry no health data.

Sources

Your iPhone, under the Apple Health permission you give in iOS, and only for the data types and connections you set up. Entries written into Health come from the servers, agents and files you connected.

Cloudflare, Inc., our processor, hosts Relay; it holds the sealed messages and the connection data for us under a data processing agreement.
Apple Inc. carries Relay's push notices to your iPhone; a notice carries no health data.
The agent and servers you chose receive your health data because you set them up; they are yours or run by an operator you chose, not by us.

We share consumer health data with no one else. We do not sell it, do not share it for advertising, do not use it to build profiles, and do not use geofencing of any kind.

You direct every transfer: you choose the data types in the Health permission sheet, you set up each connection, and before any health data travels through Relay you confirm the pairing after reading what Relay can and cannot see. That confirmation is your consent to the collection described above. Nothing is collected or shared beyond what is needed to provide the transfer you asked for. You withdraw consent by unpairing the agent or by tapping Delete Relay data in Settings › Relay & new iPhone; collection stops at once.

Your rights

You have the right to confirm whether we collect consumer health data about you, to access it, to have it deleted, to withdraw consent, and to receive a list of the third parties with whom we shared it (the list above).

Delete. Settings › Relay & new iPhone › Delete Relay data removes your iPhone from Relay at once: the encrypted health data it sent and every message waiting for it are deleted. The app tells your agent that you are leaving. The agent still has the Health data it received; whoever runs it decides what happens to it and can delete it with syncky-agent forget <member_id> --yes --commands. Its local log keeps the event with your member identifier, never health values. Connection data of a former member stays only as long as the hub exists, as the Privacy Policy explains. We notify our processor of the deletion through the deletion itself; Cloudflare keeps a recovery copy for 30 days and no longer.
Access and anything else. Write to privacy@syncky.app. We hold no name or email, so we need your hub identifier, which is in the report that Settings › Send diagnostics prepares. We answer within 45 days.
Appeal. If we refuse a request, reply to our answer within 30 days and say so; a reply is an appeal. We decide the appeal within 45 days and explain the decision in writing. If we still refuse, you can contact the Attorney General of your state (Washington: atg.wa.gov; Nevada: ag.nv.gov; Connecticut: portal.ct.gov/ag).

Changes

We post changes on this page with a new date. A material change applies no earlier than 14 days after we post it.

Contact: privacy@syncky.app · Smirnovs Sergejs · https://syncky.app/impressum