Privacy policy

Sanare is an app that collects your health and activity data from Garmin and Apple Health, explains it with an AI coach, and lets you share it with your family or your company. This policy explains what we collect, why, who sees it, and how to have it deleted.

Who we are

The data controller is Mykhailo Liakh, NIP 6751765918. For anything about your data, write to privacy@sanare.fit.

What we collect

Your account

You sign in with Google. We store your name, email address and profile picture from Google, plus a session record with your IP address and device type so you stay signed in.

Health and activity data from Garmin

When you connect Garmin Connect, we import your daily summaries (steps, distance, calories, floors, active minutes), heart rate and resting heart rate, heart rate variability, sleep and sleep stages, stress, body battery, blood oxygen (SpO2), respiration, training readiness, weight, and your activities with their heart rate, respiration and lap details. We don’t collect GPS locations.

You sign in to Garmin once, inside the app. We don’t store your Garmin password. We keep only the access token Garmin issues, encrypted with AES-256-GCM, and use it to fetch new data. You can disconnect Garmin at any time in Settings, which deletes the token.

Apple Health

On iPhone, with your permission, the app reads steps, heart rate, resting heart rate, active energy, sleep, blood oxygen and respiration from Apple Health. It never writes to Apple Health. If you share steps with a company, today’s step count is sent to our servers so the company leaderboard stays live.

Your coach conversations

We store your chats with the coach, the summaries and workout briefs it writes, your coach settings (tone, time zone, language), facts you confirm to the coach, and how much of the coach you use.

Family and company membership

If you join a family or a company, we store that membership, your role, and which metrics you share. If you invite someone, we store their email address to send the invitation.

Why we use it

• To show you your health data, trends and history in the app.
• To let the AI coach write your daily summaries and workout briefs and answer your questions.
• To show your data to the family and company members you choose, as described below.
• To run your account and subscription, and to keep the service secure.

We don’t sell your data, we don’t use it for advertising, and we don’t use it to train AI models.

Legal basis

Health data is a special category of personal data. We process it only with your explicit consent (GDPR Article 9(2)(a)), which you give when you connect Garmin or Apple Health and when you choose to share. You can withdraw consent at any time by disconnecting a source, stopping sharing, or deleting your account. We process your account details to provide the service you signed up for (Article 6(1)(b)).

Who can see your data

• You see all of your own data.
• Your family. If you join a family (up to five people), members see each other’s daily health stats and summaries in the Family tab, read-only. Your chats with the coach are never shared. You can leave the family at any time.
• Your company. If you join a company through Sanare for Teams, its admins see your name and email, plus only the metrics you choose to share (steps, sleep, stress or body battery). Nothing is shared by default. Shared metrics appear on the team leaderboard and in team averages. You can stop sharing or leave the company at any time and keep your account.

AI coach and model providers

To write summaries and answer questions, the coach sends the relevant parts of your health data and your message to the AI model your account uses: OpenAI’s GPT-6 Luna or Anthropic’s Claude Haiku 5.5. Requests to OpenAI go through the OpenCode and OpenRouter services. Requests to Anthropic go through OpenRouter or straight to Anthropic. We ask OpenRouter to use only hosts that don’t store or train on the data. The data is processed only to return a response. The coach is not a doctor and does not give medical advice.

Service providers

• Google: sign-in.
• Garmin and Apple Health: the sources you connect.
• OpenAI and Anthropic, through OpenCode, OpenRouter or directly: the AI coach, as described above.
• Resend: sends family and company invitation emails.
• Cloudflare: secures and delivers traffic to our servers.
• Expo: delivers app updates. Your phone contacts Expo’s servers to check for updates.

We don’t use analytics or advertising trackers in the app.

Where your data is stored

Your data is stored in a database on our own servers in Poland. The database only lets each account read its own data and the data other people have shared with it. The app also keeps a copy of your own data on your phone so it works offline.

Some providers above, including the AI model provider, may process data outside the European Economic Area, for example in the United States. Where the law requires it, these transfers rely on safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

We keep your data while your account exists. If your subscription ends, your data stays so you can come back. You can delete your account in the app under Settings › Delete account, which deletes your account and health data right away. Requests by email are handled within 30 days. After deletion we keep only an internal record of the account ID and when it was deleted. See Delete your data.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Write to privacy@sanare.fit from the email address on your account and we will answer within 30 days. You can also complain to your data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO).

Children

Sanare is not intended for anyone under 16, and we don’t knowingly collect their data.

Changes

If we change this policy in a way that affects you, we will tell you in the app or by email before the change takes effect.