Privacy Policy
About This Policy
This policy explains what information the App collects, how we use and share it, how long we keep it, and the choices and rights you have. We wrote it in plain language on purpose — we do not use vague or euphemistic wording to obscure our data practices.
Important: ShrineHealth Is a Wellness App, Not a Medical Service
ShrineHealth is a general wellness and lifestyle product. It is not a medical device, not a covered entity or business associate under HIPAA, and it does not provide medical advice, diagnosis, or treatment. Any telehealth Intake flow that connects you with a licensed provider for a prescription consultation is operated under that provider's own terms and privacy notice; when you enter such a flow we will tell you when you are leaving Syntropy's control. Nothing in the App is a substitute for professional medical care. If you may have a medical emergency, contact your physician or emergency services.
Who This Policy Covers
This policy covers users of the ShrineHealth mobile app in the United States. The App is intended for adults 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it. We do not currently offer the App in the EU/UK, and this policy is not written to satisfy the GDPR.
Information You Give Us
- Account information — your email address and authentication identifiers, handled through our identity provider (Clerk). We do not store your password; Clerk does.
- Chat and voice content — the messages you send in the App's chat, and voice notes you record. Voice notes may be transcribed to text.
- Health-related inputs you choose to enter — for example, information you provide in the Intake flow or notes you keep in the App. You control what you enter.
Information Collected Automatically
We do not use third-party advertising SDKs, and the App does not display ads.
- Device and technical data — app version, device/OS type, and network connectivity status, used to operate and troubleshoot the App.
- Usage data — basic in-app activity needed to provide features and keep the App reliable.
Cookies and Similar Technologies
We use a small number of first-party cookies. We do not use third-party advertising cookies, and we do not sell or share cookie data with advertisers.
- Strictly necessary cookies — set by our sign-in provider to keep you signed in and to protect your session. The App does not work without them.
- "shr_attr" (marketing attribution) — set when you arrive through one of our tracked links, so we can tell which campaign or channel brought you to us. It holds only the referring channel and standard campaign tags (source and utm_source, utm_medium, utm_campaign, utm_content, utm_term), plus which link type set it and when. It contains no name, email, account identifier, health information, or product or medication name. It expires after 30 days. The shr_attr cookie itself is not readable by scripts in your browser. Our site can read the name of the source that referred your visit (for example, an ad platform) to show and count where visits come from. It never exposes a personal identifier.
- shr_aid — a random identifier our site sets to count visits. It is not readable by scripts in your browser, expires after 30 days, and is not set if your browser sends a Global Privacy Control signal.
How the AI Chat Works
When you use the chat, your message is sent over an encrypted (TLS) connection to our chat service ("OpenClaw"). Your Syntropy account identifier travels with that request so the service can keep your conversation in context — but it stays on our servers. To generate a reply, OpenClaw forwards the content of your message to Anthropic, PBC (United States), our AI model provider, over its API. Your account identifier is not sent to Anthropic — only the message content is. Please avoid typing information you would not want processed by an AI service. We do not sell chat content, and we do not share it with advertisers. Syntropy does not use your conversations to train AI models, and Anthropic — our AI model provider — is contractually barred from training on your prompts under its data-processing terms.
How We Use Your Information
- To provide the service (necessary use): authenticate you, deliver chat and voice features, sync your data across sessions, send you app notifications, and keep the App secure and working. This is the baseline set of uses required to give you the App.
- Research and product improvement (opt-in only): with your separate, affirmative opt-in, we may use de-identified information to improve our models and build aggregate health insights. This is optional, is off by default, and you can withdraw it at any time.
- We do not use your identifiable health information for any purpose beyond providing the service unless you have opted in as described above.
How We Share Information
We share information only with service providers / sub-processors that operate the App on our behalf, under contract and only for that purpose; for legal and safety reasons — when required by law, to comply with legal process, or to protect the rights, safety, and security of users, the public, or Syntropy; and in business transfers — if Syntropy is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this policy. We do not sell your personal information, and we do not share health information with advertisers or data brokers. Your health-related information is encrypted in transit and used only to provide and maintain the quality of the service — it is processed solely by the contracted providers below under no-training terms, and is never given to any other party for that party's own purposes.
- Clerk — authentication and account management.
- Supabase — backend database and data sync.
- Fly.io — hosting for our chat gateway.
- Anthropic, PBC (United States) — the AI model that generates chat replies from your message content. Direct API; contractually barred from training on your prompts.
- Google Play — app distribution and, if you enable them, crash/diagnostics.
Text messages
Text messages. If you link your phone number in the app and text ShrineAI, we use your number and messages to provide the SMS assistant and reply to you. We do not share your mobile number or your text-message opt-in consent with third parties for their marketing purposes. Consent to receive texts is not a condition of any purchase. Message frequency varies; message and data rates may apply. Reply STOP to opt out or HELP for help at any time.
How Long We Keep Information
- Identifiable personal information (PII): deleted within 30 days of a valid deletion request or account closure, except where we must retain limited records to meet legal obligations.
- Chat transcripts: our chat backend keeps your conversation only for the life of your session — up to about one day — and then purges it.
- De-identified information: we may retain de-identified information for as long as it serves its de-identified research purpose. Once information is de-identified we do not attempt to re-identify it.
How We Protect Information
We encrypt information in transit using TLS/HTTPS. We restrict access to personal information to those who need it to operate the App, and we rely on reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we work to protect your information using reasonable, industry-standard safeguards.
Your Choices and Rights
You can, at any time:
- Access or correct your account information in the App.
- Delete your account and associated PII (subject to the retention periods above) — in the App, or by request at https://syntropyhealth.bio/legal/data-deletion or [email protected].
- Opt in or out of the research/improvement uses described above.
- Turn off notifications in your device settings.
Your Rights Under California Law (CCPA/CPRA)
California residents: you have the right to know what personal information we collect, to request its deletion, to correct it, and to opt out of "sale" or "sharing" — we do not sell or share your personal information as those terms are defined. We will not discriminate against you for exercising these rights. To exercise them, contact us at [email protected].
Washington "My Health My Data" Act (and Similar State Laws)
We collect and process consumer health data only to provide the features you request (necessary use). Any use beyond providing the service — such as the opt-in research use described above — occurs only with your separate opt-in consent, which you may withdraw. You may request access to, and deletion of, consumer health data by contacting us at [email protected].
Changes to This Policy
We may update this policy. If we make material changes, we will update the effective date above and, where appropriate, notify you in the App. Continued use of the App after an update means you accept the revised policy.
Contact Us
Syntropy Health, Inc. (a Delaware corporation), 131 Continental Dr, Suite 305, Newark, DE 19713 (Delaware registered office). Privacy questions: [email protected]