Privacy Policy

Care is an educational tool that answers a health question from several medical fields at once. This policy covers the Care mobile app and this website. It is short and specific because Care collects very little: there is no account and no sign up, and your chats and health profile stay on your phone.

Who we are

Care is operated by Theorics, which is the controller of the data described below. For any privacy question, write to care@fungi.studio.

What we collect

• The question you type. The free text you write, any answers you tapped to go with it, the earlier questions and summaries of the same chat, and how many fields you asked for. It is transmitted to our server, forwarded to a model provider to generate the answer, and returned to your device. After each answer the app also sends the question, the summary and a short list of what your profile already holds (the names of drugs and habits, whether they are current, and the patterns noted so far), so the model can update your profile rather than repeat it. We do not write any of it to a database and we do not associate it with you.
• A photo, when you add one. If you take or choose a photo to go with a question, it travels the same way as the question: to our server, on to the model provider, and back with the answer, again if you retry that question. The app shrinks it and removes its metadata (where and when it was taken, the camera) before it leaves your phone. Photos you choose come through Apple’s private picker, so the app never has access to your photo library, and photos you take are not saved to it.
• A monthly counter for your install. Each install of the app has a limit on how much it can spend on the models in a month. To hold it, the app creates a random install identifier, keeps it in your phone’s Keychain, and sends it with each request. Our server stores one number against it, what this month’s questions cost, and deletes it when the month ends. The identifier is not linked to you, your Apple ID or an advertising identifier, and nothing about your questions is stored with it.
• Operational logs. Our server writes short log lines: which route was called, whether it worked, how long it took and how many tokens the model used. They are kept by Cloudflare for up to 7 days and never contain the content of a question or an answer, your IP address, or the install identifier.
• Nothing else. No name, no email, no date of birth, no device identifier for advertising, no contacts, no location, no photos beyond the ones you add to a question, no health data from Apple Health, and no third-party analytics or advertising SDK.

Health information, specifically

What you type is likely to be about your health, so we treat it as sensitive by default. Three consequences follow, and they are the whole design of the app:

• There is no account, so there is nothing for the text to be attached to.
• Your chats and your profile are saved only on your phone, in files iOS encrypts and keeps unreadable while the phone is locked. They are left out of iPhone backups.
• If you turn on the optional iCloud backup, the app encrypts everything with a key kept in your iCloud Keychain before saving it to your private iCloud. Apple stores a file it cannot read, and so would we if we ever saw it, which we do not. Turning the backup off deletes it.
• We do not retain the text on our side after the answer is returned.

Care is not a covered entity or a business associate under HIPAA, and it does not create a medical record. Do not use it to transmit anything you would not be willing to type into a general-purpose AI assistant. In particular, there is no reason to include your name, the names of other people, or identifiers of any kind, and we ask you not to.

Who processes it

To generate an answer we rely on a small number of providers, who process data only on our behalf and under their own published terms:

• OpenAI. Picks the fields, notes the drugs, habits and patterns for your profile, and writes the answers, with GPT-6 Luna, or GPT-6 Astra when you turn on Max. Care asks OpenAI not to store any of it. Receives: Your question, the earlier exchanges of the same chat, the fields asked, and the names in your profile, as the model prompt. Privacy policy.
• Cloudflare. Runs the server that relays your request to the model provider, and keeps the monthly counter for your install. Receives: The request in transit; a random install identifier with what this month's questions cost, deleted when the month ends; and short operational logs, kept up to 7 days, that never contain your question, an answer, your IP address or the identifier. Privacy policy.

Model providers may process the prompt outside the EEA, including in the United States. Transfers rely on the providers’ standard contractual clauses. Under our accounts, prompts are not used to train their models, and every request asks the provider not to store the answer. Providers may still keep requests for a limited period to detect abuse, under their own published terms.

What we never do

We do not sell personal data, we do not share it for cross-context behavioural advertising, we do not profile you, and we do not build a record of your health over time. There is no advertising in Care and no tracking that would follow you into another app.

How long we keep things

On our side, the text of a question and any photo with it are kept only as long as it takes to generate and return the answer. Your install’s monthly counter is deleted when the month ends, and operational logs after at most 7 days. On your phone, chats and your profile stay until you delete them, one by one or all at once from Settings.

Your rights

If you are in the EEA or the UK, you have rights of access, rectification, erasure, restriction, objection, and portability. If you are in California, you have the rights to know, delete, correct, and to opt out of sale or sharing, which is moot here because we do neither.

In practice these rights are close to self-executing: Care holds no account and keeps no chat on its servers, only this month’s counter for an identifier we cannot tie to you, so there is normally nothing for us to look up or delete. Your chats live on your phone: Settings in the app exports all of them as a file, or deletes all of them, including the iCloud backup. If you believe we nonetheless hold something about you, write to care@fungi.studio and we will respond within 30 days. You may also complain to your local data protection authority.

Children

Care is intended for adults and is rated accordingly on the App Store. We do not knowingly collect anything from children. If you believe a child has used the app in a way that sent us information, contact us and we will delete whatever we can identify.

Security

All traffic between the app and our server, and between our server and the model providers, is encrypted in transit with TLS. On your phone, chats are protected by iOS file encryption, can be locked behind Face ID, and are hidden in the app switcher. Because we do not store chats, there is no database of health text on our side to breach. No system is perfectly secure, and we make no absolute guarantee.

Changes

If this policy changes materially, we will update the date at the top of this page and, where the change affects how your data is handled, note it in the app’s release notes.

One more thing

Privacy is not the main risk in an app like this. Accuracy is. Read the medical disclaimer before you act on anything Care tells you.