Your health data stays yours.

Last updated 18 October 2026. This policy covers the PIRA iPhone app and this website.

Health data from Apple Health is stored in our database. We store it so PIRA can compare your heart rate and HRV with your own baseline around conversations and calendar events. We do not sell health data. We do not use it for advertising, marketing, or data mining. We do not share it with advertisers, data brokers, or employers.

Who we are

PIRA is a personal wellness app. It shows associations in your own physiology. It does not diagnose a medical condition and it does not claim that another person causes stress.

The account and the data described below are stored for you in a database hosted in the European Union (Ireland). To reach us about this policy, use the contact on the support page.

Account

You can sign in with Apple or with an email and password.

Sign in with Apple gives us an Apple user identifier. If you choose to share them, we also receive your name and email. Hiding your email is Apple’s option, and we receive only what Apple sends.
Email sign-in stores the email address and a password credential with our authentication provider. We send a confirmation message when you create that account.
We store a profile row for the account: a display name when we have one, and settings such as whether Health or Calendar is connected.

Apple Health

If you allow Apple Health, PIRA reads:

Heart rate
Heart-rate variability (HRV SDNN)
Resting heart rate
Sleep
Active energy and workouts, so exercise can be kept out of a conversation or event score
Body temperature, basal body temperature, and sleeping wrist temperature

Those readings, and the scores derived from them, are stored in our database and tied to your account. PIRA does not write health records back to Apple Health. You can turn Health access off in iOS Settings. We do not use Health data to advertise, to build an advertising profile, or to sell a data product.

Calendar

If you connect Calendar, PIRA reads event timing and a small amount of metadata from the calendars on your iPhone: start and end, duration, calendar name, whether the event repeats, how many attendees are listed, whether a location is set, status, and a category such as meeting or personal.

Event titles stay on your device. They are not stored in our database.
Event notes are never read.
We do not store attendee names, email addresses, or the location text. We store a count of attendees and a yes-or-no for whether a location was present.

You can disconnect Calendar in the app and you can revoke Calendar access in iOS Settings.

Contacts

PIRA may ask for Contacts so a phone number or email from a conversation you are logging can be matched to a person you choose. Contacts stay on your device. We do not upload your address book, we do not build a shared contact database, and we do not sell contact data.

If a phone number or email is saved as a label for a person, we store a one-way hash of that handle, not a copy of your contacts.

Conversations, people, and check-ins

Conversations are ones you log. We store the time, duration, type (call, conversation, or message as a label you choose), direction, the person you attach, and optional tags. We do not record call audio. We do not read iMessage, SMS, WhatsApp, or any other message content. There is no content column for what was said.

People are names you enter, plus an optional relationship label. A check-in is a rating and a short label you pick, such as calm, neutral, activated, stressed, or excited, so excitement is not treated as distress by default.

Notes you type on a conversation stay on the device. They are not part of the cloud copy of your account.

What we do not collect

Photos, screenshots, or camera-roll access. PIRA does not upload images and does not send images to an AI.
Call audio, call recordings, or the contents of messages.
Calendar event notes, or calendar titles in our database.
An advertising identifier, a tracking profile, or data from an advertising SDK. This website does not use analytics cookies.
Precise location. A calendar event only records whether some location text existed.

How we use it

We use the data to run the app you asked for: to sign you in, to score conversations and events against your baseline, to show Home, Events, People, and Insights, and to keep the account until you delete it. We do not use it to advertise to you or to anyone else. We do not sell it. We do not train a public AI model on it.

The legal bases, where European data-protection law applies, are: providing the service you signed up for; your consent for Apple Health, Calendar, and Contacts, which you can withdraw in iOS Settings; and the limited interest in keeping the account secure.

Who else handles it

We do not sell personal information and we do not share health data with third parties for their own advertising or marketing.

Supabase hosts the database and authentication, in the EU (Ireland). Database rows are protected so an account can read only its own data. Authentication tokens for the account are stored there.
Apple processes Sign in with Apple, Apple Health on your device, and distribution through the App Store, under Apple’s own privacy policy.

No other company receives your health data, contacts, calendar metadata, or conversation logs for advertising or resale.

How long we keep it

We keep account data, health readings, conversation logs, people, and calendar metadata for as long as the account exists. The app includes a retention setting that defaults to 365 days and, when you change it, drops older interactions, health readings, and calendar rows from the app. Deleting the account is the full stop: it deletes the login and the rows stored for that account, and it clears the app’s on-device copy, including notes and calendar titles kept only on the phone.

Your choices

Delete the account in Profile. That removes the login and the data we store for you.
Ask for a copy of the data we store by emailing the address on the support page. We will send the account, people, conversation metadata, calendar metadata, health readings, and check-ins we hold. Calendar titles and on-device notes are not in that cloud copy, because we do not store them there.
Correct something by editing a person or a log in the app, or by emailing us.
Turn off access to Health, Calendar, or Contacts in iOS Settings at any time. The app keeps working for logs you enter yourself. Scores that need Health or Calendar will be empty without those permissions.

Children

PIRA is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, email us and we will delete it.

Security

The app talks to the database over HTTPS. Each account is limited to its own rows. Passwords are handled by the authentication provider, not stored in the app. No method of storage is perfect. If we learn of a breach that affects your account, we will tell you as required by law.

This website

This website is a set of static pages. It does not ask you to create an account, it does not set analytics cookies, and it does not collect health data. If you email us, we use that message to answer you.

Changes

If this policy changes in a way that matters, we will update the date at the top and, where the change affects health data already stored, we will tell you in the app or by email before relying on the new terms.

Contact

Questions, export requests, and deletion requests: support@piraapp.com. The same address is on the support page.