Effective date: July 9, 2026
Applies to: the NoBand app for iPhone and Apple Watch, its widgets and complications, and the NoBand coach service.
NoBand turns health data already on your iPhone into daily Recovery, Strain, Sleep, and Stress scores. We built it around one principle: your health data belongs to you, and as much as possible it stays on your device. This policy explains exactly what is processed where, what (little) leaves your phone, and the choices you have.
The short version
- All scoring happens on your device. Your raw Apple Health data is never uploaded in bulk, never sold, and never used for advertising or marketing.
- The optional AI coach sends your recent chat messages plus a compact summary of your scores to our server so the AI can answer. That is the main data that ever leaves your phone.
- If you sign in with Apple (optional, only needed for purchases), a compact diagnostic snapshot of your recent scores may also be sent to our server during the beta period so we can investigate scoring problems.
- We show no ads, embed no third-party analytics or tracking SDKs, and do not track you across other apps or websites.
- You can use the entire app — including an offline coach — without ever creating an account.
1. Data processed only on your device
With your permission, NoBand reads the following from Apple Health (HealthKit): heart-rate variability, resting and daytime heart rate, breathing rate, wrist temperature, blood oxygen, cardio fitness (VO2max), cycle tracking, sleep (including sleep stages and breathing disturbances), workouts, heart-rate recovery, steps, active energy, time in daylight, and State of Mind entries; plus your date of birth, biological sex, weight, height, and waist circumference to pre-fill your profile and estimate your Fitness Age.
This data is used on your iPhone to compute your scores, trends, correlations, and coach suggestions. It is stored in the app's private container (and a private App Group shared only with NoBand's own widgets and watch app) so screens load instantly.
If you enter your height, waist, or weight in NoBand, the app can write those values back to Apple Health so your profile stays in sync. NoBand never writes anything else to Apple Health.
Your journal entries, coach chat history, settings, streaks, and profile (including the name you choose for the coach to use) are also stored locally on your device.
We never use Apple Health data for advertising, marketing, data brokering, or any purpose other than providing the app's features. We never store your Apple Health data in iCloud.
2. Data that leaves your device
2.1 AI coach conversations
When you send a message to the AI coach, the app transmits over an encrypted connection (HTTPS) to our coach server:
- your last 10 chat messages in that conversation;
- a compact plain-text summary of your current state (for example: today's recovery score and its main driver, recent strain/sleep/resting-heart-rate/HRV figures, a summary of recently logged habits, and any notable day-over-day change);
- the first name you asked the coach to use (optional); and
- your app tier (free / purchased), so the service can apply its access policy.
Our server forwards the conversation to a third-party AI model provider (currently GMI Cloud) to generate the reply. We share only what is listed above — never your Apple sign-in identity, email, or raw Health database. The coach service is stateless by design: requests are processed and answered, not built into a profile.
Beta notice: while NoBand is in its beta/early-release phase, coach exchanges may be temporarily logged on our server to diagnose quality problems. These logs are access-restricted, used only for debugging, disabled by default, and deleted when the investigation ends.
If you prefer, simply don't use the chat coach — every score, trend, and the built-in offline coaching rules work with zero network calls.
2.2 Diagnostic snapshots (beta, signed-in users only)
If — and only if — you have signed in with Apple, the app may upload a compact diagnostic snapshot after a data refresh: your last ~35 days of scores and the inputs that produced them, your recent journal entries, and the app build number, keyed to your pseudonymous Apple sign-in identifier. We use this solely to investigate scoring bugs during the beta. Signed-out users upload nothing. These snapshots are stored access-restricted on our server and are deleted on request (see Section 7) and at the end of the beta program.
2.3 AI agent connections (optional, off by default)
NoBand lets you deliberately connect an external AI assistant of your choice (Settings → "Connect an AI agent"). If you mint an agent token, the agent you give it to can read your diagnostic snapshot (profile, recent days, journal entries, today's scores) and send you messages or journal *suggestions* — nothing is written to your journal without your explicit in-app approval. Treat an agent token like a password: anyone holding it can read that data. You can stop sharing by not using the token and asking us to revoke it.
2.4 What we never send
Your raw Apple Health samples are never bulk-uploaded. We have no advertising identifiers, no third-party analytics, no crash-tracking SDKs, and no social integrations.
3. Sign in with Apple (optional)
An account is never required to use NoBand. Sign in with Apple exists for one reason: tying your one-time purchase to you. If you sign in, Apple gives us a pseudonymous user identifier and, only on first sign-in, your name if you choose to share it. You may use Apple's "Hide My Email" — NoBand does not require or use your email address. Signing out in Settings removes the identity from the device.
4. Purchases
Payments (the 7-day free week followed by the one-time unlock) are processed entirely by Apple through the App Store. We never see your payment details. Purchase entitlement is verified on-device via Apple's StoreKit.
5. Voice dictation
The coach's microphone button uses Apple's speech recognition to convert your speech to text on your device (audio may be processed by Apple per Apple's own privacy terms). NoBand does not record, store, or transmit audio; only the resulting text appears in your message box, and only if you send it does it go to the coach (Section 2.1).
6. Notifications
All notifications (morning recovery, wind-down, health alerts, silent alarm, weekly summary) are generated and scheduled locally on your device. We operate no push-notification server.
7. Retention and deletion
- On-device data: deleting the app deletes all locally stored NoBand data. Health data remains in Apple Health under your control.
- Server data: diagnostic snapshots and any beta coach logs are retained only as long as needed for debugging and are deleted at the end of the beta. To have your server-side data deleted at any time, email us (Section 11) — include the request from the device if possible so we can locate your pseudonymous identifier; we will confirm deletion within 30 days.
8. Security
All app–server communication uses TLS (HTTPS). Server-side data is stored with restricted file permissions on infrastructure hosted by OVH. No system is perfectly secure, which is why our architecture minimizes what leaves your device in the first place.
9. Children
NoBand is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect data from them.
10. Your rights
Depending on where you live (for example, under the GDPR or CCPA), you may have rights to access, correct, delete, or export your data, and to object to processing. Because almost all your data lives on your own device, you can exercise most of these directly; for anything server-side, contact us and we will honor your request. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
11. Contact
Questions, deletion requests, or concerns:
Email: [email protected]
12. Changes to this policy
If we materially change what data is collected or how it is used — for example, if the AI coach ever becomes a paid add-on or diagnostics move out of beta — we will update this policy, change the effective date, and note the change in the app before it takes effect.