Effective date: August 3, 2026
Applies to: the NoBand app for iPhone and Apple Watch, its widgets and complications, and the NoBand coach service.
NoBand turns health data already on your iPhone into daily Recovery, Strain, Sleep, and Stress scores. We built it around one principle: your health data belongs to you, and as much as possible it stays on your device. This policy explains exactly what is processed where, what (little) leaves your phone, and the choices you have.
The short version
- All scoring happens on your device. Your raw Apple Health data is never uploaded in bulk, never sold, and never used for advertising or marketing.
- Nothing leaves your device until you say yes. Cloud AI is off by default. On first launch — before any other screen in the app — NoBand shows a full-screen notice naming exactly what would be sent, who receives it, and what it is used for, and asks you to choose. If you decline, the coach still answers — from your own numbers, computed on your device — and no network request is made. You can change your mind at any time in Settings.
- If you allow it, the AI coach sends your recent chat messages, your first name, and a compact summary of your Apple Health-derived scores and metrics to our server, which forwards them to our AI provider (GMI Cloud, running an Anthropic Claude model) to write the reply. You can switch this off at any time in Settings → “AI coach & cloud features”.
- Diagnostic snapshots and external AI-agent access require both Sign in with Apple and that same explicit consent. Without consent, they never run.
- We never sell or rent your data, never share it with data brokers, and never use it for advertising or to train AI models.
- We show no ads, embed no third-party analytics or tracking SDKs, and do not track you across other apps or websites.
- You can use the entire app — including an offline coach — without ever creating an account.
1. Data processed only on your device
With your permission, NoBand reads the following from Apple Health (HealthKit): heart-rate variability, resting and daytime heart rate, breathing rate, wrist temperature, blood oxygen, cardio fitness (VO2max), cycle tracking, sleep (including sleep stages and breathing disturbances), workouts, heart-rate recovery, steps, active energy, time in daylight, and State of Mind entries; plus your date of birth, biological sex, weight, height, and waist circumference to pre-fill your profile and estimate your Fitness Age.
This data is used on your iPhone to compute your scores, trends, correlations, and coach suggestions. It is stored in the app's private container (and a private App Group shared only with NoBand's own widgets and watch app) so screens load instantly.
If you enter your height, waist, or weight in NoBand, the app can write those values back to Apple Health so your profile stays in sync. NoBand never writes anything else to Apple Health.
Your journal entries, coach chat history, settings, streaks, and profile (including the name you choose for the coach to use) are also stored locally on your device.
We never use Apple Health data for advertising, marketing, data brokering, or any purpose other than providing the app's features. We never store your Apple Health data in iCloud.
2. Data that leaves your device
Everything in this section happens only after you have given explicit, informed consent in the app. NoBand ships with cloud sharing disabled. The consent notice appears on first launch, before any other part of the app, and lists what is sent, who receives it, and why; it cannot be dismissed without making a choice, and choosing to keep everything on your device leaves the app fully functional. The same disclosure stays available from the banner at the top of the Coach tab and from Settings. Consent can be withdrawn at any time in Settings → “AI coach & cloud features”, which stops all uploads immediately.
2.1 AI coach conversations
When you have allowed cloud AI and you send a message to the AI coach, the app transmits over an encrypted connection (HTTPS) to our coach server:
- your last 10 chat messages in that conversation;
- a compact plain-text summary of your current state (for example: today's recovery score and its main driver, recent strain/sleep/resting-heart-rate/HRV figures, a summary of recently logged habits, and any notable day-over-day change);
- the first name you asked the coach to use (optional); and
- your app tier (free / purchased), so the service can apply its access policy.
Our server forwards the conversation to a third-party AI model provider (currently GMI Cloud, which hosts the Anthropic Claude model that writes the reply) to generate the answer. That provider acts solely as our processor under contract: it may not use your data for its own purposes, for advertising, or to train models, and it is bound to protections equivalent to those described in this policy. We share only what is listed above — never your email, and never your raw Health database. The coach service is stateless by design: requests are processed and answered, not built into a profile.
The summary we send is derived from Apple Health data (for example HRV, resting heart rate, sleep duration and stages, breathing rate, wrist temperature, workouts, plus your age, sex and weight). It is used for one purpose only: writing your coaching answer. It is never used for advertising or marketing, never sold or shared with data brokers, and never used to train AI models.
Beta notice: while NoBand is in its beta/early-release phase, coach exchanges may be temporarily logged on our server to diagnose quality problems. These logs are access-restricted, used only for debugging, disabled by default, and deleted when the investigation ends.
If you prefer, simply don't use the chat coach — every score, trend, and the built-in offline coaching rules work with zero network calls.
2.2 Diagnostic snapshots (beta, signed-in users only)
If — and only if — you have both signed in with Apple and allowed cloud AI, the app may upload a compact diagnostic snapshot after a data refresh: your last ~35 days of scores and the inputs that produced them, your recent journal entries, and the app build number, keyed to your pseudonymous Apple sign-in identifier. We use this solely to investigate scoring bugs during the beta. Signed-out users upload nothing. These snapshots are stored access-restricted on our server and are deleted on request (see Section 7) and at the end of the beta program.
2.3 AI agent connections (optional, off by default)
NoBand lets you deliberately connect an external AI assistant of your choice (Settings → "Connect an AI agent"). This also requires cloud AI to be switched on. If you mint an agent token, the agent you give it to can read your diagnostic snapshot (profile, recent days, journal entries, today's scores) and send you messages or journal *suggestions* — nothing is written to your journal without your explicit in-app approval. Treat an agent token like a password: anyone holding it can read that data. You can stop sharing by not using the token and asking us to revoke it.
2.4 What we never send
Your raw Apple Health samples are never bulk-uploaded. We have no advertising identifiers, no third-party analytics, no crash-tracking SDKs, and no social integrations.
3. Sign in with Apple (optional)
An account is never required to use NoBand. Sign in with Apple exists for one reason: tying your one-time purchase to you. If you sign in, Apple gives us a pseudonymous user identifier and, only on first sign-in, your name if you choose to share it. You may use Apple's "Hide My Email" — NoBand does not require or use your email address. Signing out in Settings removes the identity from the device.
4. Purchases
Payments (the 7-day free week followed by the one-time unlock) are processed entirely by Apple through the App Store. We never see your payment details. Purchase entitlement is verified on-device via Apple's StoreKit.
5. Voice dictation
The coach's microphone button uses Apple's speech recognition to convert your speech to text on your device (audio may be processed by Apple per Apple's own privacy terms). NoBand does not record, store, or transmit audio; only the resulting text appears in your message box, and only if you send it does it go to the coach (Section 2.1).
6. Notifications
All notifications (morning recovery, wind-down, health alerts, silent alarm, weekly summary) are generated and scheduled locally on your device. We operate no push-notification server.
7. Retention and deletion
- On-device data: deleting the app deletes all locally stored NoBand data. Health data remains in Apple Health under your control.
- Server data: diagnostic snapshots and any beta coach logs are retained only as long as needed for debugging and are deleted at the end of the beta. To have your server-side data deleted at any time, email us (Section 11) — include the request from the device if possible so we can locate your pseudonymous identifier; we will confirm deletion within 30 days.
8. Security
All app–server communication uses TLS (HTTPS). Server-side data is stored with restricted file permissions on infrastructure hosted by OVH. No system is perfectly secure, which is why our architecture minimizes what leaves your device in the first place.
9. Children
NoBand is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect data from them.
10. Your rights
Depending on where you live (for example, under the GDPR or CCPA), you may have rights to access, correct, delete, or export your data, and to object to processing. Because almost all your data lives on your own device, you can exercise most of these directly; for anything server-side, contact us and we will honor your request. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
11. Contact
Questions, deletion requests, or concerns:
Email: [email protected]
12. Changes to this policy
If we materially change what data is collected or how it is used — for example, if the AI coach ever becomes a paid add-on or diagnostics move out of beta — we will update this policy, change the effective date, and note the change in the app before it takes effect.