What we do with your data.

The short version

The standalone app requires no Sirocco Form account, and we do not upload your health data to our servers unless you choose to turn on an optional connected service that needs it. There are none today.

Your health data is local by default, and sharing happens only by your deliberate consent. It is never sold, never used for advertising or marketing, never given to data brokers, and never used to train machine-learning models.

You can export everything, or delete everything, from inside the app. Both happen immediately, on the device, with no request form and no support ticket.

Who we are

Sirocco Form is made by Ravenholme Studio Limited, a company registered in New Zealand, NZBN 9429053821423, based in Auckland.

Privacy contact: hello@siroccoform.com

For the purposes of the New Zealand Privacy Act 2020 we are the agency responsible for personal information handled as described here. Where the EU or UK GDPR applies to you, we act as data controller for that same limited set of information.

What the app reads

With your explicit permission, Sirocco Form reads health and activity data from Apple Health on iPhone and Health Connect on Android. Depending on what you grant and what your devices record, that can include heart rate and resting heart rate, heart-rate variability, sleep stages and duration, respiratory rate, blood-oxygen and temperature readings, steps and activity, workouts and their routes, body measurements, and, only if you turn the optional cycle tracker on, menstrual-cycle information.

• Read-only. Sirocco Form reads. It does not write data back into Apple Health or Health Connect, and it does not record workouts, audio or location itself.
• You choose the types. Permission is granted per data type by your operating system, and you can withdraw any of it at any time in iOS Settings or the Health Connect app. The app's Privacy and data screen lists exactly which types are being read.
• On-device analysis. Readiness, trends, baselines, anomalies and correlations are computed on your phone. Your readings are not sent anywhere to be analysed.

You can also enter things yourself, such as trackers, goals, notes or a wake target. Those are stored on the device with everything else.

Where your data is stored

On your device, in the app's own storage, protected by the operating system's app sandbox and by your device passcode or biometric lock.

The standalone app requires no Sirocco Form account and no login, and we keep no copy of your health data. A consequence worth stating plainly: if you delete the app or lose the device, that data is gone, and we cannot recover it for you, because we never had it.

If you use your device's own backup, such as iCloud Backup or Google's Android backup, your Sirocco Form data may be included in it. Those backups are operated by Apple and Google under their own privacy policies and their own encryption, not by us.

What we never do with health data

• We do not sell it, rent it, or share it with data brokers.
• We do not use it for advertising, marketing, remarketing or any use-based data mining. This is also a condition of Apple's App Review Guideline 5.1.3, which we comply with.
• We do not use it to train machine-learning or AI models.
• We do not share it with insurers, employers, or any third party for their own purposes. The only sharing that ever happens is sharing you initiate, to a recipient you choose.
• We do not build a profile of you on our servers for our own purposes.

The only ways data leave your device

This is the complete list. If something is not here, it does not happen.

1. Purchases

   Billing is handled by Apple's App Store and Google Play. They tell us in aggregate that a purchase happened. They do not give us your payment details, and we never see your card. Apple and Google handle that information under their own privacy policies.

2. Crash and error reports, opt-in and off by default

   If you turn this on, technical diagnostics such as a crash stack trace, app version, device model and operating-system version are sent to our error-reporting provider so we can fix faults. These reports contain no health values and no identifying account information. They are off unless you switch them on, and you can switch them off again at any time.

3. Exports you create

   When you export your data, the file is written into your own device's Files area. What happens to it after that is entirely your choice. We are not involved and receive no copy.

4. Your own cloud sync, if you use it

   Any sync feature uses your iCloud or Google Drive account, end-to-end encrypted with keys held on your devices. Your data passes through Apple's or Google's infrastructure, not ours, and we cannot read it.

5. Anything you send us

   If you email support, we hold that email and whatever you chose to put in it. Please do not send health data unless it is genuinely needed to solve your problem.

6. Sharing with a professional you choose, a future service

   We are working on an optional connected service that would let you share some of your health data with a fitness or wellness professional you have chosen, such as a coach or trainer, so they can help you look after your own health. It does not exist yet, and nothing in this item happens today. We describe it here so the promises above stay true when it arrives, rather than being quietly rewritten later.

   • It is opt-in and separate. Using Sirocco Form never requires it. If you never turn it on, nothing else on this page changes for you.
   • You decide the scope. Which data, with whom, and for how long, chosen per recipient rather than all or nothing.
   • You can stop it at any time, without asking us and without asking them. Withdrawing consent ends future access.
   • One honest limitation. Stopping future access cannot un-see what someone has already looked at, or undo what they have already written down, saved or exported. No sharing feature anywhere can promise that, and we will not pretend otherwise.
   • Shared data would be encrypted so that we cannot read its contents. We will only state that where it is literally true of the shipped system, including backups, notifications and our own support tooling.
   • Unlike the standalone app, it would involve accounts, for the professional certainly and for you if you take part, plus records of who has access to what and when. That is the honest cost of multi-party sharing.
   • It is a reading service, not a clinical one. It never prescribes treatment and never makes a medical judgement.

   It would be for adults only, and we will publish the specifics of what is shared, who processes it, and on what legal basis, before it becomes available rather than after.

Notifications

Your notifications are generated on your device from on-device analysis. Their content is not sent to us, and no remote push server is given your health information in order to deliver them.

Health Connect on Android

Where Sirocco Form reads data from Health Connect, that data is used only to provide the features described in this policy, meaning showing you your own readings, trends and insights on your own device. We do not use it for advertising or resale, and we do not share it with third parties for their own purposes.

Health Connect data is not transferred off your device except in the specific, optional, user-initiated cases listed above. None of those are on by default, and none are required to use the app.

You can review and revoke Sirocco Form's Health Connect permissions at any time in the Health Connect settings on your device. Revoking a permission stops further reading of that type immediately. Data already stored in Sirocco Form can be deleted from the app's Privacy and data screen.

Your controls

Inside the app, under Privacy and data:

• Export everything as JSON. Readings, sessions and your settings.
• Export readings as CSV. One row per reading, for a spreadsheet.
• Delete a date range. Removes readings and sessions between two dates.
• Delete everything. Every reading, every session, every setting on the device. Confirmed by typing the word, because there is no undo and we hold no backup to restore from.

At the operating-system level you can withdraw any health permission at any time, in iOS Settings or the Health Connect app.

Your rights

New Zealand, Privacy Act 2020

You have the right to ask what personal information we hold about you, to ask us to correct it, and to complain. In practice we hold very little, because your health data is on your device rather than with us. Where we do hold something, such as a support email or an opt-in crash report, write to hello@siroccoform.com. If you are unhappy with our response you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

EEA and UK, GDPR

You have rights of access, rectification, erasure, restriction, objection and data portability, and the right to complain to your local supervisory authority. Our lawful bases are your consent for health data, which is a special category of data, and for optional crash reporting, and legitimate interests for basic security and fault diagnosis. You can withdraw consent at any time by revoking the permission or turning the setting off.

California, CCPA and CPRA

We do not sell personal information and do not share it for cross-context behavioural advertising. We do not use or disclose sensitive personal information beyond what is necessary to provide the app.

Because the standalone app has no account, we usually cannot identify a specific user's data even if asked to. That is a privacy feature, but it does mean some requests are best satisfied by the export and delete controls in the app.

Retention

Health data stays on your device until you delete it or delete the app. We set no expiry and hold no copy. Support emails are kept only as long as needed to resolve the matter and for a reasonable record afterwards. Opt-in crash reports are kept for a limited diagnostic period and then discarded.

Children

Sirocco Form is not designed for or directed at children under 16, and we do not knowingly collect information from them.

This website

siroccoform.com uses Metricool's cookie-free audience measurement script. It records the page viewed and derives the visitor's approximate country from the IP address used for the request. Metricool states that the script stores nothing on the visitor's device, assigns no unique identifier, and does not retain the IP address. We receive anonymous, aggregate website measurements. Metricool acts as our data processor for this limited purpose.

This measurement concerns visits to the public website only. Neither the website nor Metricool receives health data or telemetry from the Sirocco Form app. The website sets no cookies, stores nothing in your browser, and has no sign-up form. When the official store listings open, the waitlist buttons take you to Apple's App Store or Google Play. Sirocco Form does not receive your health data through those links. Fonts are served from this site, so loading a page makes no request to a third-party font service.

The site is served by Cloudflare, which processes standard request logs including IP address, timestamp and user-agent in order to deliver pages and prevent abuse. We do not use those logs to profile visitors.

Not a medical device

Sirocco Form is a wellness app. It does not diagnose, predict, treat or replace professional medical advice, it is not a medical device, and its insights are associative rather than clinical. Talk to a qualified health professional about anything that concerns you.

Changes to this policy

If we change how data is handled we will update this page and, where the change is material, tell you in the app before it takes effect. The version and date are at the top.

Questions about any of this go to hello@siroccoform.com. A person reads it.