Health Data Policy
Eney consumer health data privacy policy
Welcome
Short summary: If you connect Apple Health to Eney, Eney works with your health data. This policy explains, in plain language, what health data that is, where it comes from, why we use it, who gets it, how long we keep it and how you can control it. You decide whether to connect Apple Health, and you can disconnect it at any time.
This is Eney’s Consumer Health Data Privacy Policy. Washington’s My Health My Data Act (Chapter 19.373 RCW) and Nevada’s consumer health data law (NRS 603A.400 to 603A.550) require us to publish it. It applies to consumer health data we collect and process through Eney for iPhone and Eney for Mac, including in your chats with Eney.
This policy adds to the Eney Privacy Notice. It does not replace it. The Eney Privacy Notice still explains everything else Eney does with your data. If the two documents say different things about consumer health data, this policy applies.
I. About us and applicability
The company responsible for your consumer health data is MacPaw Way Ltd. (“We/we”, “Us/us”, “Our/our” or “MacPaw”), registration number 428214, registered address: 25 Serifou, Allure Center 11, Office No. 11-12, 2nd Floor, 3046 Zakaki, Limassol, Cyprus.
By You we mean anyone who uses Eney and lives in Washington or Nevada, or whose consumer health data is collected in either of those states.
By consumer health data we mean personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. This includes information we infer or derive from other data, for example a conclusion Eney draws about your fitness or sleep from your Apple Health data.
II. What health data we collect
Short summary: Eney collects health data only if you connect Apple Health. Eney reads the Apple Health data types you allow, writes meals and workouts you ask it to log, and keeps your chats about it. Conclusions Eney draws from this data are health data too.
We collect the following categories of consumer health data:
Category | What it includes |
|---|---|
Apple Health data | The data types you allow in the Apple Health permission screen. They can come from these groups: Activity, Body Measurements, Heart, Health Details, Mobility, Nutrition, Respiratory and Sleep. Apple defines these groups and data types and may add or change them. Eney only uses the types described here. If we start using new types, we will update this policy and ask for your consent first. For example: steps, workouts, activity rings, heart rate, weight, meals and calories, sleep. |
Data you ask Eney to log | Meals and workouts you ask Eney to save to Apple Health, including calories. You may enter the calories yourself, or Eney may estimate them. Eney shows you what it will save before it saves it. |
Health chats | Your questions to Eney about your health data, and Eney’s answers, including chat titles. |
Inferences | Conclusions Eney draws from your data, for example “you slept less this week” or “this workout was intense”. |
You choose which Apple Health data types Eney can read and write. You can change this at any time in the iPhone Settings app or in the Health app.
What we do not collect. We do not collect your Apple Health data in bulk or copy it to our servers in the background. Eney reads only the data it needs to answer a request you make.
Health data you share in other chats. You may also mention health information in a chat without connecting Apple Health. Eney processes it to answer your request, as described in the Eney Privacy Notice. This policy applies to that information too.
III. Where the data comes from
Short summary: from you, from Apple Health on your iPhone, and from Eney itself when it draws conclusions.
We collect consumer health data from these sources:
- You. What you type, say or add to a chat with Eney, and the meals and workouts you ask Eney to log.
- Apple Health on your device. Eney reads the data types you allow through Apple HealthKit. This can include data that other apps and devices (for example, Apple Watch or fitness apps) saved to Apple Health.
- Eney and our AI providers. Answers, estimates (such as calories) and other conclusions that the AI model creates from your data.
IV. Why we collect it and how we use it
Short summary: we use your health data only to answer your requests and do what you ask Eney to do. We never sell it, use it for ads or use it to train AI models.
We collect and use consumer health data only with your consent, and only for these purposes:
Purpose | How we use the data |
|---|---|
Answer your questions | When you ask about your health data (for example, “How did I sleep this week?”), Eney reads the relevant data from Apple Health and sends it to our AI provider to prepare the answer. |
Log meals and workouts | When you ask Eney to log a meal or a workout, Eney prepares the entry, estimates calories if you don’t give them, and saves it to Apple Health after you confirm. |
Use health context in other tasks | When you ask Eney for help with something else, for example to plan your day, Eney may use your health data to make the answer more useful. |
Keep your chat history | Eney saves your chats, including health chats, so you can see them again and use them on your Mac and iPhone. |
Keep a record of your consent | We record when you gave or withdrew consent, and to which text, so we can prove it. This record does not include your health data. |
Security and legal compliance | To protect Eney from abuse and to comply with the law. |
What we never do with your health data:
- We do not sell it.
- We do not use it for advertising or share it with advertising partners.
- We do not use it to train AI models, ours or our providers’.
- We do not send the content of health chats to our analytics. Analytics only records that a chat took place, without its content.
- We do not build a health profile about you beyond what you see in your chats.
If we ever want to use your health data for a new purpose, we will update this policy and ask for your consent first.
V. Who we share it with
Short summary: we do not sell or share your health data with third parties for their own use. Only our service providers receive it, to run Eney for you, under contracts that let them use it only on our instructions.
Service providers (processors). These companies process consumer health data only on our behalf, under a binding contract, and only to provide Eney to you:
Category | Provider | What they do | What they receive |
|---|---|---|---|
AI model providers | Anthropic (Anthropic Ireland, Limited); OpenAI (OpenAI Inc.) | Understand your request and write Eney’s answer | Your request, the relevant Apple Health data, the chat |
Cloud hosting | Google Cloud | Stores your synced chats on servers in the United States (us-central region), encrypted | Health chats |
Customer support | Zendesk | Handles requests you send to our support team | Only what you include in your request |
Apple. When Eney saves a meal or workout, it saves it to Apple Health on your iPhone. Apple Health data is handled under Apple’s privacy policy.
Other cases. We may disclose consumer health data if the law requires it, or as part of a merger or acquisition, in which case the new owner must protect your data under this policy and the law. Also with our affiliated companies. See Section VII of the Eney Privacy Notice.
If we ever want to share your health data with a third party for any other reason, we will ask for your separate consent first.
For Nevada residents. Under Nevada law, giving data to a service provider counts as sharing. We share your health data with the service providers above only as far as needed to provide the Eney features you ask for.
No tracking across websites and apps. We do not allow third parties to collect your consumer health data over time and across different websites or online services through Eney.
VI. How long we keep it
Short summary: we keep your health chats until you delete them or your account. You can delete them yourself at any time. Apple Health data stays in Apple Health on your iPhone.
Data | How long we keep it |
|---|---|
Apple Health data | Stays in Apple Health on your iPhone. We do not keep a separate copy, except the parts that appear in your chats. |
Health chats | Until you delete the chat, disconnect Apple Health and choose to delete your health chats, or ask us to delete your account. When you delete a chat, its messages and title are deleted from our servers right away. Backup copies are deleted within 7 days. |
Inactive accounts | If you don’t use Eney for 24 months, we will warn you and then delete your account and chats. |
At our AI providers | Anthropic deletes requests and answers within 30 days. OpenAI keeps them for up to 30 days. They do not use them to train models. |
Consent records | As long as we need them to prove your consent. They do not contain your health data. |
After deletion, we keep a technical record that a chat existed (an ID, dates and status), so that your other devices know to delete it too. This record contains no health data.
VII. Your choices and rights
Short summary: you decide whether Eney gets your health data. You can withdraw your consent, see what we have, and have it deleted. We answer within 45 days. Using these rights is free and won’t affect how we treat you.
Your consent. Before Eney reads any Apple Health data, we show you a screen that explains what data Eney uses, why, who receives it and how to stop. Eney connects to Apple Health only if you agree. Accepting the Eney Terms of Service or this policy is not consent.
Withdraw your consent. You can stop Eney from using your health data at any time:turn off Apple Health in Eney Settings. When you disconnect Apple Health in Eney, we ask whether you also want to delete your chats that include health data. Eney stops reading new health data from that moment.
Your rights. You have the right to:
- Confirm and access. Ask whether we collect or share your consumer health data, get a copy of it, and get a list of all third parties and affiliates that received it, with a way to contact them.
- Delete. Ask us to delete your consumer health data. You can delete health chats yourself in Eney at any time. When you ask us to delete your data, we delete it from all our systems, including backups, and tell our service providers to delete it too.
- Withdraw consent. Stop us from collecting and sharing your health data in the future, as described above.
Correct your data. You can correct your Apple Health data at any time in the Health app. To correct other health data we hold, for example in a chat, delete the chat or contact us.
How to make a request. Email us at [email protected], [email protected] or use App Settings - Share Feedback in Eney. Please include the email or Setapp account you use with Eney. You don’t need to create a new account. We may ask for more information to confirm it’s really you.
When we answer. We answer within 45 days of receiving your request. If we need more time, we will tell you why within those 45 days and may take up to 45 more days. When you ask us to delete your data, we delete it within 30 days after we confirm it’s you. Requests are free up to twice a year.
If we say no. If we refuse your request, you can appeal by replying to our answer or emailing [email protected], [email protected] with “Appeal” in the subject line. We will answer your appeal in writing within 45 days and explain our decision. If we deny your appeal, you can contact the Washington State Attorney General . If you live in Nevada, you can contact the Nevada Attorney General’s Office .
VIII. Security
Short summary: we protect your health data with encryption and strict access controls.
Your synced chats are encrypted on our servers. They are not end-to-end encrypted, so a small group of authorised engineers can technically access them, and only when needed to run Eney, handle your request or investigate a security issue. MacPaw is ISO 27001 certified. Section IX of the Eney Privacy Notice describes our security measures in more detail.
IX. Changes to this policy
We will update this policy when we change how we handle consumer health data. The date at the top shows the latest version. Before a material change takes effect, we will post the updated policy on this page at least 7 days in advance and let you know in the Eney app or by email. If we want to collect new categories of health data or use it for new purposes, we will ask for your consent in the app first.
X. Contact us
Short summary: for any question about your health data, email us at [email protected] or use App Settings - Share Feedback in Eney.
MacPaw Way Ltd., 25 Serifou, Allure Center 11, Office No. 11-12, 2nd Floor, 3046 Zakaki, Limassol, Cyprus Email: [email protected], [email protected].