1. Who we are
YHAP is operated by YHAP Inc., 251 Little Falls Drive, Wilmington, Delaware 19808, United States (“YHAP”, “we”). We are the controller of the personal data described in this policy.
Privacy questions and requests: privacy@yhap.ai. General questions: hi@yhap.ai.
This policy covers the YHAP iOS app and the website yhap.ai (together, the “Services”). Our Terms of Service apply alongside it.
2. The short version
- YHAP is a health and longevity app. To work, it processes health data — from Apple Health, from what you type, and from files you upload. This is sensitive data and we only process it with your explicit consent, which you can withdraw at any time.
- Several features are powered by AI. Your chats, meal photos, blood-test uploads and daily health summaries are processed by OpenAI to generate them.
- We may show ads in the app. Ads are never selected using your health data, and we never give health data to advertisers. Personalised ads only with your permission; YHAP Pro removes ads. We do not sell your data.
- If you join a crew, some of your activity and a few weekly body averages are visible to your crew mates. Chats, meals, blood values and weight are never shared with other users.
- You can delete your account, and with it your data, in the app at any time.
3. What we collect
3.1 Account
Email address, the sign-in method you chose (Sign in with Apple, Google, or email and password), your name as you entered it, language, time zone, unit system, and the app version you use. Sign-in is handled by Clerk (see §7); we never see or store your password.
3.2 Profile and body
Date of birth, sex, height, weight, body-fat percentage, maximum heart rate and heart-rate zones, your goal (“mission”) and any notes you add to it, dietary restrictions, your chosen coach persona, and an optional profile photo.
Health conditions. During onboarding you can optionally tell us about conditions such as diabetes, high blood pressure, thyroid disease or heart disease, in a list or in your own words. This is used only to tailor your insights. You can skip it.
3.3 Apple Health (HealthKit) and Health Connect
If you connect Apple Health (iOS) or Health Connect (Android), we read the types you approve: steps, walking/running distance, workouts including heart-rate samples, heart rate, resting heart rate, heart-rate variability (HRV), respiratory rate, sleep including sleep stages, VO2 max, active and basal energy, plus height, weight, body fat, date of birth and sex to pre-fill your profile.
Background sync. After you connect, iOS can wake YHAP in the background — including when the app is closed — to upload new health data to our servers so your scores are current when you open the app. You can stop this at any time in iOS Settings → Health → Data Access & Devices → YHAP.
3.4 Physical tests
Results you record in the app: push-ups, dead hang, reaction time, and similar tests we add.
3.5 Blood test results
Values you type in, and files you upload (photos or PDFs of lab reports). Uploaded files are stored (§7, Cloudflare) and read by an AI model to extract the values (§5). Both the file and the extracted values are kept until you delete them or your account.
3.6 Nutrition
Meals you log by text, photo or barcode, including the photos themselves, the estimated items and macros, your favourite meals, and the time you ate. Barcodes are looked up against the public Open Food Facts database; only the barcode number is sent there.
3.7 Chat and voice
Everything you write to the YHAP coach, images you attach, the coach’s replies, and the tools it used (for example “logged a meal”). If you use voice input, your speech is transcribed by Apple’s speech recognition, which may send audio to Apple; only the resulting text reaches us. Your feedback on coach messages, and error reports you file about a workout, are stored with the text you entered.
3.8 Morning check-in
Your daily self-rating and the resulting Vibe score, band and its breakdown.
3.9 What we derive
From the above we compute your Bio Age and its breakdown, your Vibe, daily insights, arc levels, Aura, workout tags extracted from what you tell the coach, and weekly snapshots of these. These are stored so you can look back at them.
3.10 Social
Crews you belong to or create, invite codes, reactions you give and receive, users you block or report (with the reason you give), and wellness clubs or trainers you pair with.
3.11 Device, usage and diagnostics
- Device model, OS version, app version, language, time zone.
- A push-notification subscription ID if you allow notifications (§14).
- Product analytics: which screens you open, which features you use (counts and flags — for example “voice input used”, not what you said), and app crashes and errors. We identify you in analytics by a pseudonymous user ID, never by your email or name. Analytics run on PostHog’s EU servers.
- Session recordings. To find usability problems we may record how the app is used on screen. In these recordings text you type and images are masked; recordings are kept for at most 30 days.
- Diagnostic logs limited to technical details (status codes, counts, error codes), never health values or message text.
Our hosting and security providers process your IP address for the time it takes to deliver the service and to detect abuse.
3.12 Subscription
Whether you have an active YHAP Pro subscription, the product and renewal state, delivered by Apple to RevenueCat under your pseudonymous user ID. We never receive your payment details — Apple handles the purchase.
3.13 What we do not collect
Your location, contacts or calendar. We do not read your device’s advertising identifier or track you across other apps unless you explicitly allow it for personalised ads (§8).
4. Why we process your data, and on what basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating and securing your account, running the app you asked for | Account, device data | Contract (Art. 6(1)(b)) |
| Computing Bio Age, Vibe, insights, arcs; coaching chat; nutrition and blood analysis | Health data of §3.2–3.9 | Your explicit consent (Art. 9(2)(a)), given in the app before you connect Apple Health or use AI features |
| Crews, clubs and other social features | Social data, the shared fields of §6 | Consent to join (Art. 6(1)(a)) and contract |
| Notifications you enabled | Push subscription, event data | Consent (you allow notifications in iOS) |
| Product analytics, diagnostics, preventing abuse | §3.11 | Legitimate interests (Art. 6(1)(f)): improving and securing the Services. You may object (§12). |
| Showing ads (§8) | Non-health data of §8 | Consent (Art. 6(1)(a)) for personalised ads and any tracking; legitimate interests (Art. 6(1)(f)) for non-personalised ads and counting impressions |
| Subscription entitlements | §3.12 | Contract |
| Legal obligations (tax records, lawful requests) | As required | Legal obligation (Art. 6(1)(c)) |
Withdrawing consent. You can disconnect Apple Health in iOS Settings, delete individual entries in the app, or withdraw all health-data consent by deleting your account (§12.2). Withdrawal does not affect processing that happened before.
5. AI processing
YHAP uses large language models from OpenAI, L.L.C. (USA) for: the coach chat, nutrition estimates from text and photos, reading blood-test uploads, your morning Vibe line, daily insights, workout tag extraction and arc suggestions.
What reaches OpenAI: the content of the chat you are in, meal photos you attach, blood-test files you upload, and a summary of your health context relevant to the feature — for example age, sex, height, weight, body fat, today’s sleep, HRV, resting heart rate, workouts and meals. Your name and email are not included.
Under OpenAI’s API terms, data we send is not used to train OpenAI’s models. OpenAI may keep it for up to 30 days for abuse monitoring, or not at all where zero-data-retention applies to our account. [Confirm the account’s current status and adjust this sentence.]
AI outputs are wellness information, not medical advice, and may be wrong. They do not produce legal or similarly significant effects about you; you decide what to do with them. If an output seems incorrect, tell us at hi@yhap.ai.
6. What other users can see
Nothing is visible to other users unless you join a crew, a club, or opt in to sharing.
Crews (including the Global Crew). When you join, we tell you exactly what becomes visible and you confirm it. Crew mates can see: your name and profile photo, your workouts from the last 7 days, weekly stats (steps, strength minutes, zone-2 minutes, active days), arc progress, Aura and rank, your Vibe headline (score and band, not its breakdown), your 7-day averages of HRV, resting heart rate and respiratory rate, and whether your Bio Age runs younger or older than your age — never the number. The Global Crew is open to everyone on YHAP, so this is visible to people you do not know.
Wellness clubs and trainers. If you join a club or pair with a trainer, club members and trainers can see the weekly activity stats above.
Explore (opt-in, off by default). If you turn it on, your first name, photo, meals (including photos) and workouts appear in a public feed.
Always private: chats, blood values, weight and body composition, health conditions, nutrition (unless you enable Explore), single-day biology values, your absolute Bio Age.
You can leave a crew or club at any time; your data disappears from it. You can block and report other users.
7. Who processes data for us
| Provider | What they do | Data | Location |
|---|---|---|---|
| Clerk, Inc. | Sign-in, email verification, password reset | Email, name, sign-in identity | USA |
| OpenAI, L.L.C. | AI features (§5) | Chat content, photos, uploads, health summaries | USA |
| Railway Corp. | Hosts our servers and database | All data in this policy | USA / [region — confirm] |
| Cloudflare, Inc. (R2) | Stores uploaded files | Meal photos, profile photos, blood-test files | Global (EU/US) |
| PostHog, Inc. | Analytics, error tracking, session recordings | §3.11, pseudonymous ID | EU (Frankfurt) |
| OneSignal, Inc. | Push notifications | Subscription ID, notification content (§14) | USA |
| RevenueCat, Inc. | Subscription status | Pseudonymous ID, entitlement | USA |
| Apple Inc. | Sign in with Apple, HealthKit, speech recognition, App Store purchases | Per Apple’s policies | Global |
| Open Food Facts | Barcode lookup | Barcode number only | France |
| [Ad network], once ads are live | Showing and measuring ads (§8) | Ad identifier (if allowed), IP, device metadata | USA |
All providers are bound by data-processing agreements. We do not sell personal data, and advertising partners never receive health data.
We may also disclose data if the law requires it, to protect our rights or users’ safety, or — with safeguards — in a merger, acquisition or financing.
8. Advertising
YHAP may show advertising in the app. When it does, these rules apply:
- Never based on your health data. We do not use Apple Health data, blood values, body metrics, health conditions, meals, chats, your scores or anything derived from them to select ads, and we never share any of it with advertising partners. Apple’s rules for HealthKit data forbid this, and so does this policy.
- What ads are based on: the screen you are on, your language and approximate country (from your IP address), device type, and — only if you allow it — your device’s advertising identifier and your interactions with ads.
- Personalised ads and tracking need your permission. Before an ad partner may use your advertising identifier (IDFA) or link your activity across apps, iOS asks you through App Tracking Transparency and, in the EEA, UK and Switzerland, we ask for your consent in the app first. If you say no, you see non-personalised ads. You can change your mind at any time in Settings → Ads and in iOS Settings → Privacy & Security → Tracking.
- What ad partners receive: the advertising identifier if you allowed it, IP address and approximate country, device and app metadata, and whether an ad was shown or tapped. Never your name, email or health data.
- Partners: [list the ad network(s), e.g. Google AdMob, with links to their privacy policies before ads go live].
- YHAP Pro removes ads. [confirm]
9. International transfers
Some providers are in the United States. For users in the EEA, UK and Switzerland, transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses plus additional measures. Copies are available on request.
10. How long we keep data
| Data | Kept |
|---|---|
| Account, profile, health data, blood values, meals, scores, chats | While your account exists. Deleted on account deletion (§12.2). |
| Uploaded files (photos, PDFs) | While your account exists, or until you delete the entry. Orphaned uploads that were never attached to an entry: 7 days. |
| Chats you deleted in the app | Removed from view immediately, erased within 30 days. |
| Raw AI conversation context | 90 days |
| Notification and error-report logs | 90 days |
| Analytics events | [24] months; session recordings 30 days |
| Advertising identifier and ad interactions | Per the ad partner’s policy; you can reset the identifier in iOS at any time |
| AI usage statistics (tokens, model, cost) | Kept without any link to you after deletion |
| Records we must keep by law (e.g. purchase records) | Statutory periods |
11. Security
Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to production data is restricted to the people who need it and logged. Uploaded files are reachable only through short-lived signed links. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as the law requires.
12. Your rights
12.1 Access, correction, export, objection
You can see and edit most of your data in the app. You can ask us for a copy of your data in a machine-readable format, ask us to correct or restrict it, or object to processing based on legitimate interests: email privacy@yhap.ai. We answer within 30 days and may ask you to verify your identity. You can also complain to a data-protection authority, for EEA users the one in your country of residence; in Germany that is the authority of your federal state.
12.2 Deleting your account and data
Settings → Account → Delete Account. This permanently deletes your account and your data from our database and file storage, and asks Clerk, RevenueCat, OneSignal and PostHog to delete what they hold for you. What remains: aggregate statistics with no link to you, and records we must keep by law. Deleting your YHAP account does not cancel an App Store subscription — manage that in your Apple ID settings.
If you cannot access the app, email privacy@yhap.ai from your account address.
13. Children
YHAP is for adults. You must be 18 or older to create an account, and the app enforces this. If you believe a minor has an account, contact privacy@yhap.ai and we will delete it.
14. Notifications and messages
If you allow notifications, we send reminders and updates such as your Vibe, workout detections, blood-upload results, arc level-ups and crew activity. Their text may contain health values (for example a score or a workout duration) and, for crew notifications, another member’s name — and it appears on your lock screen. You can switch each type off in Settings → Notifications or all of them in iOS Settings.
We send transactional emails only (sign-in codes, password resets, account and policy notices). We do not send marketing emails.
15. United States residents
We do not sell personal data. If you allow personalised ads, sharing your advertising identifier with ad partners may count as “sharing” for cross-context behavioural advertising under California law and as “targeted advertising” under other state laws; you can opt out at any time in Settings → Ads or by turning tracking off in iOS Settings → Privacy & Security → Tracking, and we honour that choice. Health data is never used or shared for advertising. Residents of California and other states with privacy laws have the rights in §12 (access, deletion, correction, portability); we do not discriminate for exercising them. Washington residents: health data we collect, why, and with whom it is shared is described in §3, §4, §6, §7 and §8; we collect and share it only with your consent or as necessary to provide what you asked for.
16. Changes
We will post changes here with a new date and, for material changes, tell you in the app or by email. Where a change needs new consent, we will ask for it.
17. Contact
YHAP Inc., 251 Little Falls Drive, Wilmington, Delaware 19808, United States privacy@yhap.ai · hi@yhap.ai [Data protection officer, if appointed: name, email]