Privacy Policy

With your permission, Rest Coach reads health and fitness data from Apple Health / HealthKit on iOS and Android Health Connect on Android to personalize your coaching and analytics. Depending on what your connected sources provide, this can include sleep (duration and stages), heart rate and resting heart rate, heart-rate variability (HRV), respiratory rate, blood oxygen (SpO₂), body temperature, blood pressure, steps, distance, active calories, exercise sessions, weight, and height.

How this data is handled:

• Raw health records are read on your device to compute your sleep score, stages, trends, and coaching context.
• We sync daily summary metrics derived from this data (for example: sleep duration and stages, HRV, resting heart rate, steps, and a computed stress/sleep score) to your account on our backend, so your history, trends, and reports persist beyond the platform's retention window and are available across your devices.
• You can revoke access at any time in iOS Settings → Health, or in Android Settings → Health Connect. You can delete the synced data by deleting your account (see “Your choices & deletion”).

If you choose to connect a Whoop or Oura Ring account:

• The OAuth sign-in and token exchange are handled through our backend. Your wearable access tokens may be stored encrypted on our backend and/or on your device so we can retrieve your recovery, readiness, and sleep data.
• Wearable-derived data is used as coaching context and may be included in the daily summary metrics synced to your account.
• You can disconnect a wearable at any time in the app's Settings, which removes the stored tokens.

Voice sessions are powered by Google's Gemini model:

• Your microphone audio is streamed through our backend voice proxy to Google Gemini for real-time processing. We do not store audio recordings.
• After a session, the transcript is sent transiently to our backend to generate an AI summary and to extract coaching memory (below). The transcript is processed for that purpose and is not retained as a standalone record; the resulting session summary is stored on your device and on your account.

To act like a coach that remembers you, Rest Coach builds a “coaching memory” from your sessions:

• Durable facts about your sleep habits and preferences, a profile (“dossier”) summarizing your goals, chronotype, and what's working, and commitments (steps you agree to) that the coach follows up on.
• This memory is stored on your device and on your account (our backend), and is generated and updated using Google Gemini. It exists only to personalize your coaching and is never sold or used for advertising. Deleting your account erases it everywhere.

When you create an account we store your email address, a bcrypt-hashed password, and your display name on our backend, and issue a signed (JWT) session token. We use this only to authenticate you and sync your data. We do not sell or share your account information.

Subscriptions are processed by the Apple App Store and Google Play. We do not receive or store your payment-card details; we receive only your subscription status to unlock premium features.

Sensitive data on your device (your authentication / OAuth tokens and your local health and coaching database) is excluded from your platform's automatic cloud backup, so it is not copied to iCloud or Google Drive, or transferred device-to-device.

• Revoke health access: iOS Settings → Health, or Android Settings → Health Connect.
• Disconnect wearables: in-app Settings.
• Delete your account and all data: Settings → Account → Delete Account. This permanently deletes your account, sessions, synced metrics, coaching memory (dossier + commitments), and stored wearable tokens from our backend, and wipes your local Rest Coach data on the device.
• Request deletion by email: if you can’t access the app, email privacy@restcoach.ai with the subject “Account Deletion Request” and the email on your account, and we’ll delete your data.
• Export your data: Settings → Export Session Data.

• Precise location, contacts, calendar, or browsing history
• Advertising identifiers or any data used for advertising
• Any data not described in this policy

Each third party processes data under its own privacy policy:

• Google Gemini API: AI voice coaching, session summaries, and coaching-memory generation
• Apple Health / HealthKit & Android Health Connect: health & fitness data access (with your permission)
• Whoop API / Oura API: wearable data access (optional, with your permission)
• Apple App Store & Google Play: subscription management
• Our hosting / backend (restcoach.ai)

Rest Coach is intended for adults and is not directed to children under 13. We do not knowingly collect data from children under 13; if you believe a child has provided us data, contact us and we will delete it.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (export your data)

If you are a Florida resident, you may have additional rights under Florida law (including the Florida Digital Bill of Rights where applicable); contact us to exercise them.

To exercise any of these rights, contact us at privacy@restcoach.ai.

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date above. Continued use of the app after an update constitutes acceptance of the revised policy.

For privacy questions or requests, contact us at privacy@restcoach.ai.