Privacy Policy

With your permission, Rest Coach reads health and fitness data from Apple Health / HealthKit on iOS and Android Health Connect on Android to personalize your coaching and analytics. Depending on what your connected sources provide, this can include sleep (duration and stages), heart rate and resting heart rate, heart-rate variability (HRV), respiratory rate, blood oxygen (SpO₂), body temperature, blood pressure, steps, distance, active calories, exercise sessions, weight, and height.

How this data is handled:

• Raw health records are read on your device to compute your sleep score, stages, trends, and coaching context.
• We sync daily summary metrics derived from this data (for example: sleep duration and stages, HRV, resting heart rate, steps, and a computed stress/sleep score) to your account on our backend, so your history, trends, and reports persist beyond the platform's retention window and are available across your devices.
• You can revoke access at any time — in iOS Settings → Health, or in Android Settings → Health Connect. You can delete the synced data by deleting your account (see “Your choices & deletion”).

If you choose to connect a Whoop or Oura Ring account:

• The OAuth sign-in and token exchange are handled through our backend. Your wearable access tokens may be stored encrypted on our backend so we can retrieve your recovery, readiness, and sleep data. Provider credentials are never returned to the app or the operator console.
• Wearable-derived data is used as coaching context and may be included in the daily summary metrics synced to your account.
• You can disconnect a wearable at any time in the app's Settings, which removes the stored tokens.

Voice sessions are powered by Google's Gemini model:

• Your microphone audio is streamed through our backend voice proxy to Google Gemini for real-time processing. We do not store audio recordings.
• After a session, the transcript and resulting session summary are stored on your device and authenticated account for session history, personalized coaching, and support/debugging. Audio is not retained. Transcripts follow the session deletion and configured retention lifecycle and are never written to application logs.

To act like a coach that remembers you, Rest Coach builds a “coaching memory” from your sessions:

• Durable facts about your sleep habits and preferences, a profile (“dossier”) summarizing your goals, chronotype, and what's working, and commitments (steps you agree to) that the coach follows up on.
• This memory is stored on your device and on your account (our backend), and is generated and updated using Google Gemini. It exists only to personalize your coaching and is never sold or used for advertising. Deleting your account erases it everywhere.

When you create an account we store your email address, a bcrypt-hashed password, and your display name on our backend, and issue a signed (JWT) session token. We use this only to authenticate you and sync your data. We do not sell or share your account information.

Subscriptions are processed by the Apple App Store and Google Play. We do not receive or store your payment-card details; we receive only your subscription status to unlock premium features.

After you sign in, supported clients send a bounded operational heartbeat containing the platform, app version and version code, operating-system version, and device model. Selected failures may also send a structured component name and error class. These reports exclude exception messages, stack traces, request/response bodies, voice audio, transcripts, health values, advertising identifiers, and persistent device identifiers.

Authorized operators whose account email is on our server-side developer allowlist can use an authenticated console to view an account's profile, app version/diagnostics, coaching transcripts, synced daily sleep metrics, and non-secret wearable connection state for support, debugging, security, and service monitoring. Sensitive per-user access is recorded in an administrative audit trail. The console never exposes passwords, authentication or wearable tokens, purchase tokens, or raw exception messages. Diagnostics and related audit events are deleted with the account and may be removed earlier under configured retention periods.

Sensitive data on your device — your authentication / OAuth tokens and your local health and coaching database — is excluded from your platform's automatic cloud backup, so it is not copied to iCloud or Google Drive, or transferred device-to-device.

• Revoke health access: iOS Settings → Health, or Android Settings → Health Connect.
• Disconnect wearables: in-app Settings.
• Delete your account and all data: Settings → Account → Delete Account. This permanently deletes your account, transcripts and summaries, synced metrics, coaching memory (dossier + commitments), client diagnostics, associated administrative access-audit events, and stored wearable tokens from our backend, and wipes your local Rest Coach data on the device.
• Request deletion by email: if you can’t access the app, email privacy@restcoach.ai with the subject “Account Deletion Request” and the email on your account, and we’ll delete your data.
• Export your data: Settings → Export Session Data.

• Precise location, contacts, calendar, or browsing history
• Advertising identifiers or any data used for advertising
• Any data not described in this policy

Each third party processes data under its own privacy policy:

• Google Gemini API — AI voice coaching, session summaries, and coaching-memory generation
• Apple Health / HealthKit & Android Health Connect — health & fitness data access (with your permission)
• Whoop API / Oura API — wearable data access (optional, with your permission)
• Apple App Store & Google Play — subscription management
• Our hosting / backend (restcoach.ai)

Rest Coach is intended for adults and is not directed to anyone under 18 or the applicable age of majority. We do not knowingly allow children to use the service; if you believe a child has provided us data, contact us and we will delete it.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (export your data)

If you are a Florida resident, you may have additional rights under Florida law (including the Florida Digital Bill of Rights where applicable); contact us to exercise them.

To exercise any of these rights, contact us at privacy@restcoach.ai.

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date above. Continued use of the app after an update constitutes acceptance of the revised policy.

For privacy questions or requests, contact us at privacy@restcoach.ai.