PRIVACY POLICY

Almanac is a private, single-user personal health record. It is used by one person — its owner — to collect their own medical documents and health data in one place. It is not a product offered to other users, and it does not have additional accounts.

What it stores. Medical documents the owner uploads, the values extracted from them, biological-age calculations, daily check-ins, and — if connected — daily summaries from the owner's Oura ring (sleep, readiness, HRV, resting heart rate, and related daily metrics).

Oura data. If the owner connects Oura, Almanac accesses their Oura data read-only through Oura's official API using OAuth. Access tokens are stored encrypted. Oura data is used solely to display the owner's own information inside Almanac. It is never sold, shared, or used for advertising.

Where it lives. Data is stored in the owner's own private database and file storage, accessible only to the owner behind authentication. Document text may be sent to the owner's configured AI providers solely to extract and index the owner's own documents.

Sharing. Almanac does not share personal data with third parties except the infrastructure providers required to run it (database, file storage, AI extraction, and Oura), each acting only as a processor for the owner.

Retention & deletion. The owner controls all data and can delete any document, disconnect Oura (which removes stored Oura tokens), or export everything at any time.

Contact. Questions about this policy: nancy.y.chen@gmail.com.