Privacy Policy
Sanomi is operated by Sanomi Health Pty Ltd, a company registered in Australia ("we", "our", or "us"). We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. Because Sanomi handles sensitive health data, we take these obligations seriously.
1. Information We Collect
We collect information you provide directly and information generated by your use of the app.
Account details
- Your email address and sign-in credentials — an account with a verified email is required to use Sanomi.
Profile data
- Name, age, biological sex, and optionally: ethnicity, location, health conditions, goals.
- Lab results and vital signs you enter manually (blood markers, weight, blood pressure, etc.).
- Health plans (food, supplements, medicines) and exercise logs.
Health device data (optional)
- Steps, weight, heart rate, resting heart rate, sleep, blood pressure, oxygen saturation, body temperature, respiratory rate and blood glucose, read from Apple Health (iOS) or Health Connect (Android) — only when you grant permission, and only the types your device actually records.
- Sanomi never writes data back to Apple Health or Health Connect.
Product & label scans
- When you scan a product barcode or a food/supplement label, the photo is sent to our AI service to read the details and then discarded — we do not store scan images on our servers.
Voice input (optional)
- When you use the microphone to dictate a note or log, your speech is converted to text by your phone's speech service (Apple on iOS, Google on Android). We receive only the text; we do not record or store audio.
Weather (optional)
- To show local weather and air quality, the app looks up an approximate location from your network address through a geolocation service and fetches conditions from a weather service. No health data is sent with these requests.
Usage and analytics
- Anonymised feature usage events through our analytics provider (you can opt out in Settings → Privacy).
- Crash reports to help us fix bugs (no health data included).
Billing
- Subscription and purchase data is handled entirely by the Apple App Store, Google Play, or our payment processor — we never see or store your payment card details.
2. How We Use Your Information
- To provide personalised health charts, AI insights, and health plans.
- To send health data to our AI provider when you request an AI analysis, report, or chat conversation.
- To sync your data across your devices via our secure cloud database provider.
- To maintain your usage quotas and subscription status.
- To improve the app through anonymised analytics.
- To respond to your support requests.
3. AI Processing
When an AI feature runs, the app sends the relevant parts of the health profile to Sanomi's own server, which passes them to Anthropic's Claude AI models over an encrypted connection to generate the response.
- Only the data needed for the specific request is sent, and never a name, email or account details — the model sees the health data, not the person. Content supplied directly (a scanned product label, or what is typed into a question or note) is sent as-is and may carry identifying details.
- The large language model processes the data only to generate the response, and it is never used to train AI models.
- We chose Anthropic deliberately: Claude is used under Anthropic's commercial terms, which prohibit training on customer data, and Anthropic publishes its safety and privacy commitments openly at anthropic.com.
- If Anthropic is unavailable, the same request is processed instead by Amazon Web Services (Amazon Bedrock) with the same Claude models, under equivalent no-training terms.
- Ask Sanomi, AI Insight reports and product scans run when you start them.
- Some everyday features also use AI without a separate tap — for example, estimating the nutrition of something you log.
- All AI transmissions use TLS encryption in transit.
- You choose this in the app the first time you use an AI feature — a consent page names Anthropic and Amazon Web Services and lists the data — and you can turn it off at any time in Settings › AI features. With it off, no data is sent to either provider; your record, journal, planner and trends keep working.
4. Data Storage and Security
- Your profile and health data is stored with our cloud database provider, with access controls so that only you can access your data.
- Data stored on your device is protected by your phone's built-in device encryption; your sign-in tokens are additionally encrypted with a key held in the device keychain.
- All data is transmitted over encrypted connections (HTTPS/TLS).
- Secure authentication ensures only you can access your account.
5. Data Sharing
We do not sell your personal data, and we never use it for advertising. We share data only with the following service providers, strictly to operate the app:
- AI provider — Anthropic (its Claude AI models), for health analysis (health data sent only when you request an AI feature); Amazon Web Services (Amazon Bedrock) as the fallback AI provider only when Anthropic is unavailable.
- Cloud database and authentication — Supabase, for secure data storage and sign-in.
- Payment processing — RevenueCat, together with the Apple App Store and Google Play, for subscription and purchase management (no health data shared).
- Analytics and crash reporting — Google Firebase (Analytics and Crashlytics), anonymised and with no health data; analytics opt-out available in Settings.
- Speech recognition — Apple (iOS) or Google (Android) speech services, only when you use voice input.
- Sign-in — Apple or Google, only if you choose to sign in with them.
A current list of the specific service providers we use is available on request — contact us at contact@sanomi.health.
We may disclose information if required by law or to protect the rights and safety of our users, but we will notify you where legally permitted to do so.
6. Data Retention
- Your data is retained for as long as your account is active.
- When you delete your account (Account → Danger Zone → Delete my account), all your data — profiles, health records, reports, and history — is permanently erased from our servers within 30 days.
- Anonymised analytics data may be retained longer as it cannot be linked back to you.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — delete your account and all associated data at any time in the app.
- Portability — request your data in a portable format.
- Objection — object to certain types of processing, including analytics.
To exercise any of these rights, contact us at contact@sanomi.health. We will respond within 30 days. EU and UK residents have additional rights under GDPR / UK GDPR.
8. Children & Profiles You Manage for Others
A Sanomi account holder must be 18 or older. You can add additional profiles to care for others — for example a family member, a dependent, or a child you are responsible for.
- By adding a profile for someone you care for, you confirm you have their consent, or the authority to act on their behalf, to record their health information.
- You are responsible for the data in the profiles you manage; you control its access, correction, and deletion through your account.
- We do not knowingly allow anyone under 18 to hold their own Sanomi account. Health data about a minor may only be recorded by a responsible adult through a profile they manage.
If you believe a child has created their own account, contact us at contact@sanomi.health and we will remove it.
9. International Data Transfers
Our service providers may process data in the United States or other countries. Where required, we rely on standard contractual clauses or equivalent mechanisms to ensure your data receives adequate protection.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top of this policy reflects the most recent revision. Continued use of Sanomi after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact contact@sanomi.health.