Privacy Policy

1. Information We Collect

Some of the information we collect — including your health, genetic, and biometric data — is treated as a special category of data under the EU/UK GDPR and as sensitive data under US state privacy laws. Where required, we process this data on the basis of your explicit consent, which you give through an affirmative in-app consent step before we collect it (for example, the genetics consent screen), and which you can withdraw at any time (see Your Privacy Rights).

1.1 Information You Provide Directly

Account Information: Email address, password (stored encrypted), profile information (name, date of birth, biological sex, height, weight).

Health and Wellness Data:

• Nutrition data: meal logs, food descriptions, photos, nutritional information, fasting sessions
• Exercise data: workout logs, sets, reps, weights, duration, cardio metrics
• Body composition & DEXA scans: weight, body-fat percentage, lean and fat mass, and physical measurements. If you use Body Composition (a Pro/Elite feature), you may upload a DEXA scan report (PDF or image) or enter values manually. We extract and store metrics such as total and regional fat and lean mass, visceral fat, bone mineral density and T/Z-scores, and derived indices (for example lean-mass index, ALMI, FFMI, resting metabolic rate), along with the scan date, facility, and the age, sex, height, and weight you provide for percentile calculations.
• Bloodwork & Biomarker Data: laboratory test results, parsed biomarker values, biological age calculations, biomarker trends and correlations
• Genetic Data: if you choose to use Genetic Insights (a Pro/Elite feature), raw genotype data you import from a consumer-genetics service (for example 23andMe, AncestryDNA, or MyHeritage export files) or genetic findings extracted from a lab report you upload. We retain only a fixed, pre-defined set of allowlisted genetic markers (a SNP identifier and your genotype) relevant to wellness, nutrition, fitness, pharmacogenetics, and certain predisposition/carrier markers; all other genetic data in your file is discarded after parsing. See the dedicated Genetic Data section below.
• Continuous Glucose Monitoring (CGM) Data: blood glucose readings, glucose trend data, meal response events, time-in-range calculations, daily glucose aggregates (from the planned Dexcom integration, which is coming soon and not yet available, so this data is not currently collected)
• Wearable Biometric Data: heart rate, HRV, recovery scores, strain, sleep scores, sleep stages, resting heart rate, respiratory rate, skin temperature, step counts, collected via on-device SDKs (HealthKit/Health Connect) and cloud wearable APIs (Oura, WHOOP, Garmin, Fitbit)
• Peptide, Injection & GLP-1 Journey Data: peptide and injection administration routes, injection sites, reconstitution calculations, side effects, cycle tracking, and blend compositions. If you use the GLP-1 journey, we also collect your selected compound, dose and titration step, injection day/time and cadence, shot-day and morning check-ins (such as nausea, energy, and whether you logged your weight), a daily food-noise (appetite) rating, a muscle-preservation score derived from protein intake, resistance training, and lean-mass and weight-change trends, and related cardiometabolic biomarkers (for example ApoB, LDL, triglycerides, hs-CRP, eGFR, and creatinine). Journey context may be used by AI features (Noot and protocol generation) to personalize guidance.
• Circadian & Sleep Data: wake/sleep times, chronotype, circadian drift calculations
• Supplement and medication logs: supplements, dosages, timing, protocol adherence
• Daily check-ins: sleep quality, stress, energy, mood, wellness assessments
• Thermal therapy sessions: hot/cold exposure, duration, temperatures
• Health goals: focus areas, protocols, wellness objectives

Voice & Photo Data: Voice transcriptions for meal, workout, and assistant (Noot) commands. Speech is transcribed by your device's operating-system speech service (Apple or Google), which — depending on your device, language, and settings — may process the audio on the device or on the OS vendor's servers. Mallet itself receives only the resulting text: we never receive, store, or transmit raw audio recordings, and we do not create or use voiceprints or any voice-based biometric identifier to identify you. We also process meal photos for AI nutritional analysis.

Derived/Inferred Data: biological age scores, recovery readiness, HRV baselines, sleep debt, circadian drift, meal response scores, protocol recommendations, biomarker-based health trends, and estimated recovery readiness.

AI Interaction Data: Messages to our AI assistant (Noot), voice transcriptions, AI-generated recommendations.

Payment Information: Subscription status and billing history. Payment card details are processed directly by Apple App Store / Google Play Store (via RevenueCat) and are not stored on our servers.

1.2 Information Collected Automatically

Device type, operating system, app version, unique device identifiers, usage patterns, crash logs, and performance data. We do not collect precise location data.

1.3 Information from Third-Party Sources

With your explicit permission: Apple HealthKit or Google Health Connect data including sleep, steps, heart rate, HRV, and workout data. Additionally, cloud wearable platforms (Oura, WHOOP, Garmin, Fitbit) via OAuth authorization. Continuous glucose monitor (Dexcom) integration is coming soon and is not yet available.

2. How We Use Your Information

• Providing and improving the Service (tracking, protocols, recommendations)
• AI-powered features (meal analysis, voice commands, personalized insights)
• Communication (notifications, support, important updates)
• Analytics and improvement (usage patterns, bug fixes, new features)
• Legal and safety (compliance, enforcement, protection)

We do not sell, rent, or use your health data for advertising, marketing, or any purpose other than providing and improving the Service.

3. How We Share Your Information

We do not sell your personal information.

We share information only with service providers necessary to operate the Service:

AI processing note: Context sent to Anthropic's Claude API never includes your name, email, or account identifiers. To extract values from reports you upload, the document itself (a bloodwork, DEXA, or genetic report) may be sent for parsing. Your raw genotype export files are never sent to Anthropic, and sensitive genetic markers (such as predisposition or carrier status) are never included in AI context. Anthropic does not use data submitted through its API to train its AI models.

We may also share information when required by law, in business transfers (with notice), or with your consent.

3.1 Content You Choose to Share

Mallet lets you create shareable cards summarizing certain achievements (for example your HOS score, a biological-age change, or a workout or recovery summary). Sharing is always voluntary and initiated by you. Cards are generated as images on your device and are not stored on Mallet's servers; when you share one, it is sent through your device's native share options to recipients you choose.

These cards are designed to be privacy-first: they include only aggregate numbers, counts, and percentages. They never include peptide or supplement names or doses, never include genetic data, and sensitive details such as your exact biological age are redacted by default unless you turn them on. You can decline any sharing prompt and turn off future prompts for a given card; your opt-out preferences are saved to your account. Once you share a card outside Mallet, we cannot control how the recipient uses or stores it.

4. Data Storage and Security

Your data is stored on secure servers in the United States (Supabase). We implement:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with password hashing
• Strict access controls
• Row-level security (you can only access your own data)
• Encrypted OAuth token storage for wearable integrations
• Sensitive uploaded files (bloodwork, DEXA, and genetic reports) are kept in private, access-controlled storage and are reachable only through signed, expiring links scoped to your account
• Regular security audits

5. Data Retention

Where we are required to state a retention period for sensitive personal information, the periods above apply by data category. When you delete your account, your personal data is permanently deleted within 30 days.

6. Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format. You can export your data yourself at any time using Settings → Export My Data in the app, which delivers a full machine-readable export of your health data — including meals, workouts and planned sessions, bloodwork, DEXA body-composition results, GLP-1 journey data, genetic variants, supplements, check-ins, and your AI assistant (Noot) interaction history. You can also request an export by emailing privacy@mallet.so; we will deliver it within 30 days.
• Withdraw Consent: Withdraw consent at any time

California Residents (CCPA): You have additional rights including the right to know, delete, opt-out, and non-discrimination.

EU/UK Residents (GDPR): You have additional rights including the right to object, restrict processing, and lodge complaints with your local data protection authority.

Washington Residents: Under the My Health My Data Act, you have the right to consent to the collection of your consumer health data, to access and obtain a copy of it, to withdraw consent, and to request its deletion. Consumer health data includes your health, biometric, and genetic information, as well as information about your use of medications and inferences about your health conditions. We collect this data only with your consent, we do not sell it, and we would obtain your separate, valid authorization before any sale (which we do not engage in).

To exercise your rights: Use in-app Settings (e.g. Settings → Export My Data or Settings → Delete Account) or email privacy@mallet.so.

7. Health Data (HealthKit / Health Connect)

If you connect Apple HealthKit or Google Health Connect, we may read sleep, steps, heart rate, HRV, and workout data. This data is queried on-device and synced to our servers for use within the Service.

You can revoke access anytime in your device settings. Revoking access stops new syncing but doesn't delete existing data in Mallet. To delete synced data, use Settings → Delete Account or contact us.

8. Cloud Wearable and CGM Integrations

In addition to on-device health SDKs, Mallet integrates with cloud-based wearable platforms via OAuth authorization. Continuous glucose monitor (Dexcom) integration is coming soon and is not yet available; the Dexcom details below describe that planned integration and no glucose data is currently collected.

• Oura: sleep stages, readiness score, activity, heart rate, HRV, body temperature
• WHOOP: recovery, strain, sleep performance, heart rate, HRV, respiratory rate
• Garmin: activities, body battery, stress, sleep, heart rate, steps
• Fitbit: sleep, heart rate, activity, steps
• Dexcom (coming soon — not yet available): continuous glucose readings, glucose trends

How Cloud Sync Works

When you connect a wearable or CGM, you authorize access through the provider's own OAuth consent screen. We never see your provider password. Our server stores an encrypted OAuth token and periodically fetches your data on a scheduled basis. Data is stored in aggregated form (daily min/max/avg) rather than raw samples.

How to Disconnect

You can disconnect any cloud wearable in Mallet via Settings → Integrations. We also recommend revoking access in the provider's own app or website (e.g., Oura app → Connected Apps). Disconnecting stops new data syncing but does not automatically delete previously synced data.

9. On-Device vs. Cloud Processing

We believe in transparency about where your data is processed:

10. Genetic Data

Genetic Insights is an optional, Pro/Elite-only feature. Because genetic information is among the most sensitive data we handle, we treat it as a special category of data under the EU/UK GDPR (Article 9) and as protected genetic information under state genetic-privacy laws, including the California Genetic Information Privacy Act and Florida law.

Consent Before Collection

We never read or store genetic data without your explicit, informed consent. Before any file is parsed, you must complete an in-app consent step that confirms: (1) we extract only a fixed list of allowlisted markers and discard the rest; (2) your genetic data is never sold or shared and is never included in any shareable card or public content; (3) Mallet does not diagnose disease and genetic results are wellness context only; and (4) you can delete your genetic profile and the underlying file at any time. We record the version of the consent you agreed to. Consistent with the federal Genetic Information Nondiscrimination Act (GINA), we never provide your genetic data to employers, health insurers, or life or disability insurers, and we do not disclose it to law enforcement except in response to valid legal process we are legally required to honor.

Sensitive Markers Are Double-Gated

Markers relating to disease predisposition or carrier status (for example APOE or HFE) are never shown to you unprompted. They are hidden by default and require a separate, second confirmation before they are revealed. We record the time you chose to reveal them, you can re-hide them at any time, and that record is cleared if you delete the profile. These sensitive markers are never included in any AI feature.

How Genetic Data Is Processed

Raw genotype export files are parsed deterministically on our own servers and are never sent to any third party. If instead you upload a PDF genetic report, only that report document is sent to our AI provider (Anthropic) to extract genetic findings; your name, email, and account identifiers are not included. Your raw genotypes are never sent to Anthropic or any other third party.

Storage, Deletion, and Export

Uploaded genetic files are stored in a private, access-controlled storage area reachable only through signed, expiring links scoped to your account, and only while parsing is in progress — the raw file is always deleted after extraction, and report PDFs are not retained after values are extracted. Genetic profiles and variants are protected by row-level security so that only you can access them. When you delete a genetic profile, or delete your account, your genetic profile, variants, and any stored data derived from them are permanently removed. You may request a copy of your genetic data at any time (see Your Privacy Rights).

Withdrawing Consent

You can withdraw your consent to genetic processing at any time, as easily as you provided it (in the Genetics section of the app, or by emailing privacy@mallet.so). Withdrawing consent stops further processing of your genetic data and results in deletion of your genetic profile, variants, and any stored data derived from them.

Not a Diagnosis

Genetic results in Mallet are educational wellness context and are not a medical diagnosis, screening, or clinical-grade test. Genetic information is used only as supporting context and never overrides safety guidance or contraindication checks. Always consult a qualified healthcare or genetic professional about your genetic information.

11. Children's Privacy

Mallet is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us at privacy@mallet.so.

The data-upload features of the Service (including genetic, body-composition, and lab-report uploads) are intended only for your own data. You must not upload genetic, biometric, or health data about any other person, including a minor, unless you are that person's parent or legal guardian or are otherwise authorized to do so, and you are responsible for obtaining any required consent. If you believe data about a child has been uploaded without authorization, contact privacy@mallet.so and we will delete it.

12. International Data Transfers

Your data, including health, genetic, and biometric data, may be transferred to and processed in the United States, including by our service providers (such as Supabase and Anthropic). For users in the EU/UK, we rely on appropriate safeguards, including Standard Contractual Clauses, and, for special-category data such as genetic information, on your explicit consent to the transfer. You may withdraw that consent at any time.

13. Third-Party Services

The Service may contain links to third-party websites. We are not responsible for their privacy practices. When you connect third-party services, their privacy policies also apply.

13.1 UI Assets and Attributions

Mallet uses third-party UI assets, including Solar Icons by 480 Design. These assets are bundled into the app interface and do not collect, receive, or process personal information.

14. Changes to This Policy

We may update this policy from time to time. Material changes will be notified through the app or email. Continued use after changes constitutes acceptance.

15. Contact Us

For privacy questions or to exercise your rights:

Email: privacy@mallet.so

We aim to respond within 30 days.