Privacy Policy

Caire connects the health data you already generate to how you actually feel. It reads the sources you choose to connect, shows you daily scores for your mental state, recovery, sleep, and energy, and surfaces patterns between them.

That means Caire holds data about your health, which is some of the most sensitive information there is. This policy explains what we collect, why, what never leaves your phone, and how to get it back or delete it.

Caire is not a licensed clinician and does not diagnose or treat any condition, and nothing it shows you is a medical finding. Where you use the chat, you are always told you are talking to an AI. Read this alongside our Terms of Service.

Caire is a product of Lemniscate Labs Ltd, a company registered in England and Wales, Company No. 17184093, and the data controller for the information described here, registered with the UK Information Commissioner’s Office under registration number ZC143406.

Under UK and EU GDPR we need a lawful basis for each thing we do with your data:

• Running your account and the core product rests on performance of our contract with you (Article 6(1)(b)).
• Health and biometric data, and anything you tell us about your mental health, rests on your explicit consent (Articles 6(1)(a) and 9(2)(a)). We ask separately, and you can withdraw at any time.
• Keeping the service secure and working rests on our legitimate interests in preventing abuse and fixing faults (Article 6(1)(f)).
• Training our own models on your content rests on your consent, and is off unless you turn it on.
• Meeting legal obligations, such as keeping consent records, rests on Article 6(1)(c).

We collect personal data about you from you, when you provide it directly, such as completing your profile, answering a questionnaire, or contacting support; automatically, when you use the Services; and from third parties, such as health and wearable sources you connect and the platform or app store you install from.

We may collect the following types of personal data:

Account data, such as email address, authentication identifiers, profile preferences, an optional profile photo, your age range, and the organisation you name at onboarding if you give one.

What you write and log, including but not limited to chat messages and optional voice recordings, mood check-ins, journal content you choose to sync, and answers to wellbeing questionnaires. Conversations held without an account are stored on our servers in the same way as account conversations.

Health and biometric data, from sources you connect, including but not limited to sleep duration, stages, and efficiency; heart rate and heart-rate variability; steps, activity, and active energy; recovery and strain scores where your provider calculates them; and where your device reports them, respiratory rate, blood oxygen, and skin temperature.

Minute-level heart-rate readings and detailed sleep-stage intervals are used on your device and are never sent to us.

Context you switch on, such as a measure of how busy your calendar was; approximate location, rounded to about one kilometre, used to look up your daylight hours and local air quality; and on Android, notification counts and screen time patterns.

Behaviour data, if you turn on behaviour sync. Values derived from your journal and nutrition logs.

Device and usage data, such as device type and model, operating system and app version, language settings, general location derived from IP address, performance and reliability data, screens viewed and time spent, and security and abuse-prevention signals.

Marketing and communications data, such as your contact preferences, which of our emails you open, and messages you send us for support or feedback.

Compliance records, such as timestamps for terms acceptance and every consent you grant or withdraw, and metadata-only records of crisis events.

On the web, we use cookies and similar technologies such as local storage to keep you signed in, remember your settings, and understand how the site is used. The mobile apps do not use cookies, though they do store data locally on your device as described elsewhere in this policy.

We ask for your consent before setting anything that is not strictly necessary. You can change your choices at any time from the cookie preferences link on the site.

• Essential. Needed for the site to work: signing you in, keeping your session, and remembering your privacy choices. These are always on, because without them the site cannot function.
• Analytics. Help us see which pages and features are used, and where things break. Off unless you accept them.
• Marketing. Measure whether our campaigns reach people. Off unless you accept them. We never use your health data or your conversations for marketing.

Declining analytics and marketing cookies does not limit your access to Caire. Most browsers also let you block or delete cookies in their own settings, though blocking essential cookies will stop the site working.

Some of what you log never reaches us. Cycle tracking and your journal entries are held in the app’s storage on your device. We never receive them. They are not in your data export, because we do not have them, and uninstalling the app deletes them.

Three things work partly differently, and all three are off until you turn them on.

• Behaviour sync. If you turn it on, we receive daily values derived from your journal and nutrition logs. The entries themselves, and everything else in those logs, stay on your device.
• Calendar. If you connect it, we receive a measure of how busy your day was. We never read the titles, attendees, notes, or locations of your events.
• Screen time. Your usage totals stay on your phone. We receive only limited technical information used to label usage by category, and we do not keep a record of which apps you have.

Your Mental, Recovery, Sleep, and Energy scores are calculated from your mood check-ins and the health data you have connected, which may include sleep, activity, and related signals.

Insights are descriptive correlations in your own data. They show you patterns; they do not interpret them.

We do not use your health data to infer a mental health condition, to estimate clinical risk, or to predict a diagnosis. Recommendations in the app are general wellbeing suggestions, not an interpretation of your state.

No decisions are made about you. Scores are information shown to you, and you decide what to do with them. We do not make automated decisions that produce legal effects or similarly significantly affect you, and nothing in Caire determines your access to care, employment, insurance, or any other service.

Health data is special-category data under UK GDPR Article 9. We only read it with your explicit, separate consent. Connecting a wearable or health source is always optional and never required to use Caire.

• Where it comes from: Apple Health or Health Connect on your phone, or a wearable account you connect, such as WHOOP, Oura, Garmin, Fitbit, or Polar
• How we use it: to calculate your scores and show you patterns between your data and your mood. Never to diagnose, infer, or treat any condition
• Control: you can disconnect a source at any time. Doing so stops all reading immediately and erases the data we hold from that source
• Retention: kept for a maximum of 12 months from the last reading, then deleted automatically

If you turn on stress detection, monitoring happens on your device. We do not receive a continuous heart-rate stream.

• Calculate your scores and show you your own patterns
• Provide, operate, secure, maintain, improve, develop, and personalise the Services, including testing, research, analysis, and product development
• Send the notifications and emails you have opted into
• Send you direct marketing about the Services, which you can opt out of at any time using the unsubscribe link
• Create and use aggregated or de-identified data, which no longer identifies you, to analyse how the Services are used, improve and add features, and train and improve our models
• Detect abuse, fraud, and safety threats
• Enforce our agreements, protect our rights and the safety of our users, and establish or defend legal claims
• Comply with legal obligations
• Produce aggregated, anonymised service evaluation reports, as described below

We do not sell your personal data, and we do not use your health data or conversations for advertising.

We run our own model, on our own servers. Your conversations are not sent to a third-party model provider, and no third party receives your messages in order to train a model.

Training on identifiable data is off by default. Your identifiable conversations and health data are not used to train or fine-tune any model, including ours, unless you turn that on in Settings, and you can turn it off again at any time. We may use aggregated or de-identified data, which no longer identifies you, to train our models and to develop and improve the Services.

How the chat remembers you. So that you do not have to repeat yourself, Caire retains context from your past sessions. Personal identifiers are stripped before content is stored for retrieval, and it is scoped to your account alone.

Guardrails. Every response passes through checks that block diagnostic language and harmful content before it reaches you. These checks help, and they are not perfect.

Voice. Speech-to-text and text-to-speech run on our own infrastructure. Voice recordings are processed to produce a transcript and are not sent to a third-party speech provider.

We record each consent separately, with the version of this policy it was given against. You can see and change these in Settings.

• Terms and privacy: accepting this policy and the Terms
• Health data: reading health and wearable data. Revocable
• Behaviour sync: syncing values derived from your journal and nutrition logs. Optional and revocable
• Conversation storage: storing your chats so you can return to them
• AI disclosure: acknowledging that the chat is an AI
• Model training: using your identifiable content to improve our models. Off by default

Withdrawing a consent stops that processing from then on. It does not make what we did beforehand unlawful. If you want the earlier data gone as well, delete your account or ask us.

We may publish or present aggregated, fully anonymised summaries of service outcomes: group-level changes in questionnaire scores from the instruments used in the product, such as PHQ-9, GAD-7, PSS-10, Mini-Z 2.0, WHO-5, and OLBI, along with engagement patterns and feature usage. This supports service evaluation, quality improvement, academic publication, and conference presentation.

Where this work is done with a partner organisation, for example an NHS Trust, we may share aggregated findings with that organisation.

All such reports are group-level only. No individual is identifiable, and free-text conversation content is never included in published output.

If you would rather your anonymised data was not included in future summaries, you can delete your account from Settings at any time. Deleted-account data is excluded from any analysis dataset generated after deletion.

We do not sell your personal data, and we do not share it with advertisers.

Your employer, university, or health service does not see your data. If you found Caire through an organisation, your account is still yours. They do not see your scores, your chats, your questionnaire answers, or your health data. Where we report to a partner organisation, we report group-level figures only, and only where the group is large enough that no individual can be identified.

Sharing you initiate. You can export a summary and send it to a GP or counsellor, and you can nominate a trusted contact, who must agree by email before anything is set up. Once you have shared something with someone, what they do with it is outside our control.

Legal requests. We may disclose data where the law requires or permits it, in response to a valid request from a court, regulator, or law enforcement, where we need to establish, exercise, or defend a legal claim, or where we consider it necessary to protect someone’s life or safety. Where we are permitted to notify you of such a request, we may do so.

If the business changes hands. If Caire is involved in or is negotiating a merger, acquisition, financing, reorganisation, insolvency, or sale of all or part of our assets, your data may be disclosed or transferred as part of that, including during due diligence.

Affiliates and professional advisors. We may share personal data with our affiliates, and with professional advisors such as lawyers, auditors, insurers, and bankers, where necessary in the course of the professional services they provide to us.

Other sites and services. The Services may link to or integrate with sites and services operated by third parties. Those links are not an endorsement, we do not control those services, and their own privacy notices govern what they do with your data.

Data from other companies. Where your data reaches us through Apple Health, Health Connect, or a wearable provider, that company’s own privacy policy governs what it does with your data on its side. We do not control their practices and cannot vouch for the accuracy of what they send us.

We use third-party service providers that provide services to us or on our behalf, in categories including database and authentication, application hosting and content delivery, vector search, wearable and health data integration, product analytics, push notification and email delivery, image hosting, and weather and air quality lookups. These categories may change as our infrastructure changes.

The language model, speech processing, and observability that power Caire run on our own infrastructure rather than a third party’s.

All providers are contractually required to protect personal data and to process it only for permitted purposes.

Customer data is primarily stored in the United Kingdom.

Some providers may process data in the US, UK, or EU. Where transfers occur across borders, we use contractual and legal safeguards appropriate for those transfers, including the UK International Data Transfer Agreement or Addendum and EU Standard Contractual Clauses where they apply.

• Account data: retained while your account is active
• Chats and journal summaries: retained while your account is active. Deleted chats are held up to 30 days before permanent deletion
• Health, wearable, and behaviour data: a maximum of 12 months from the last reading, and erased immediately when you disconnect the source
• Questionnaire scores: retained while your account is active, so you can see change over time
• Consent records: kept for as long as we need them to show what you agreed to and when, which may outlast the data itself
• Account deletion: a 24-hour cooling-off period applies, during which you can cancel, then core account data is deleted within 30 days
• Backups and operational logs: removed on a rolling schedule after deletion workflows complete

More generally, we retain personal data for as long as it is reasonably necessary for the purposes described in this policy, for as long as we have a business need to do so, or for as long as the law requires, whichever is longer. That includes keeping data where we need it to establish, exercise, or defend a legal claim, or to investigate abuse or a safety incident.

Fully anonymised data, which can no longer be linked to you or anyone else, is not personal data and may be kept indefinitely, for example in the aggregate figures described under Service Evaluation above.

Data is encrypted in transit and at rest. Access to production data is restricted to staff who need it, and database access rules scope records to the account that owns them. Personal identifiers are stripped from conversation content before it is indexed for retrieval.

No system is completely secure. We take the measures described here seriously, and we cannot guarantee that they will prevent every attack, fault, or unauthorised access. Transmitting data over the internet always carries some risk, and you send it at your own risk. If a breach affects your rights, we will tell you and the ICO as the law requires.

Keeping your account secure is partly on you. Use a strong, unique password, keep your device locked and up to date, and tell us at contact@caire.dev if you think someone else has access.

You have the right to access your data, correct it, delete it, restrict or object to how we use it, withdraw consent, and receive a portable copy.

You can do the main ones yourself, in the app. Settings, then Data Control, lets you download a machine-readable export of everything we hold and delete your account. Deletion has a 24-hour cooling-off period during which you can cancel.

For anything else, email contact@caire.dev. We respond within the period the law requires. We may need to verify your identity before acting on a request, and some rights are qualified rather than absolute, so a request may be refused in part where an exemption applies.

When you update or delete information, we may keep a copy of the unrevised information in our records, and we may retain aggregated or de-identified data derived from your personal data that does not identify you after you update or delete it.

You can opt out of marketing emails at any time using the unsubscribe link in them. Service messages, such as security and account notices, continue while you have an account.

You can also complain to a data protection authority. In the UK that is the Information Commissioner’s Office, at ico.org.uk.

Caire is for adults. You must be 18 or over to use it, and we do not knowingly collect data from anyone under 18.

If we learn that we hold data from someone under 18, we delete it and close the account. If you believe a minor has used Caire, email contact@caire.dev and we will act on it.

We update this policy when the product changes. Material changes are notified in-product, by email, or both.

Caire is a product of Lemniscate Labs Ltd, a company registered in England and Wales, Company No. 17184093, and registered as a data controller with the UK Information Commissioner’s Office, registration number ZC143406.

Questions about this policy go to contact@caire.dev.