Privacy Policy

How Hunuu Health collects, uses, and protects your health data.

Last updated: September 19, 2026  ·  Effective date: October 19, 2026

Hunuu Health Inc. ("Hunuu Health," "we," "us," or "our") is committed to protecting your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and mobile applications.

Health information deserves careful protection. Whether HIPAA applies to a particular Hunuu service depends on its legal role and data flow. We apply the privacy and security duties that apply to the service and do not treat app-store review as legal certification.

Information we collect

We collect information you provide directly and information generated through your use of our platform:

• Account information: Name, email address, date of birth, and account credentials (stored as one-way bcrypt hashes — we never see your actual password)
• Health & biometric data: Heart rate variability, sleep, stress, glucose, activity, weight, body composition, and other measurements from supported connections you choose to enable
• Lab & clinical data: Health records, lab results, metabolic panels, or other clinical information you choose to provide where supported
• Care context: Information you choose to provide about symptoms, cancer-related care, medications, supplements, or peptide protocols where supported
• Genomic data: Genetic information you voluntarily provide for analysis
• Voice journal data: Recordings and transcriptions you create using the Voice Journal feature
• Self-assessment data: Mood, energy, anxiety, and other ratings you log
• Body composition photos: Images you take or upload for body-composition tracking
• Usage data: How you interact with our platform, features used, and session information
• Device information: Information about the devices and wearables you connect
• Payment information: Processed securely through Stripe — we do not store payment card details

How we use your information

• Provide and improve our AI-powered health intelligence platform
• Generate personalized health insights, predictions, and recommendations
• Compute your HIP Score™ and other scores where those features are available
• Enable Health Circle sharing features at your direction and with your explicit consent
• Process payments and manage your account
• Send platform updates, health alerts, and communications you've opted into
• Comply with legal obligations, including HIPAA requirements where they apply to the service
• Conduct anonymized research to improve health intelligence models (opt-out available)

About the four pillars: Our public educational pages organize health topics as Mind, Body, Intimacy, and Care & Context. These are content labels, not four additional permissions, four guaranteed app scores, a diagnosis, or authorization to share data with a new recipient. Care & Context discusses cancer-related care, labs and metabolic panels, medications, supplements, and peptides; treatment decisions remain with qualified clinicians.

Safeguards and applicable law

We use safeguards appropriate to the information and service. The existing policy describes the controls below; their production scope and vendor coverage must be confirmed before this revision takes effect:

• Encryption: Health data is protected in transit and at rest; the precise deployed protocols and coverage are subject to the security inventory
• Access controls: Role-based access controls limit who can access your data
• Audit logging: Access events are recorded according to the service's security design; log scope and retention require confirmation
• Vendor agreements: We evaluate vendor roles and enter into required agreements, including business associate agreements when legally required
• Incident response: We investigate suspected incidents and provide notices required by the law applicable to the affected data and service; this policy does not substitute a universal 72-hour or 60-day rule for that analysis

AI services and your consent

What gets sent to Anthropic

When you use AI features in Hunuu, the following data may be transmitted to Anthropic, PBC (operator of the Claude AI API):

• Voice journal transcriptions (when you record using the Voice Journal feature)
• Questions you type into the AI chat
• Your biomarker values (HRV, sleep, stress, lab results, and similar) when you request an AI-generated interpretation of your data
• Your mood and self-assessment ratings, when relevant to the AI request

What does not get sent

• Your password, payment information, or contact details
• Photos, video, or raw audio (we send transcriptions, not audio files)
• Any data from before you granted AI consent
• Any data if you decline consent — Hunuu still works for tracking and dashboards without AI features

How Anthropic handles your data

Anthropic processes API requests under their commercial API terms. Per Anthropic's own policy, API inputs are not used to train Claude or any other AI model. Anthropic's full privacy policy: anthropic.com/legal/privacy.

Revoking AI consent

Open the Hunuu HIP app → tap the profile menu → Settings → Privacy → Revoke AI consent. After revoking, no further data will be sent to Anthropic from your account.

Data sharing with third parties

We do not sell your personal health data. Ever.

The four-pillar terminology and AI Health Persona concept do not change the sharing practices described in this section. We do not share personal health data or individual-level health-derived scores with advertisers or health marketers. Any proposed partner or routing service would require a separate data-use assessment, applicable permission, and an updated public disclosure before launch.

We share data only with the following categories of third parties, and only as required to deliver the Services:

We may also share information under the following limited circumstances:

• With your explicit consent: Health Circle sharing is entirely controlled by you via QR-gated permission tiers
• Legal requirements: When required by law, court order, or government request
• Safety: To prevent imminent harm to you or others
• Business transfer: In the event of merger or acquisition, with advance notice to you

Apple HealthKit data

The Hunuu HIP app uses Apple HealthKit to read biomarker data with your permission. HealthKit data and any data we receive from it:

• Is never used for advertising or shared with third parties for advertising
• Is never sold to data brokers
• Is never disclosed to anyone outside Hunuu except as described in this policy
• Is never used to make decisions about your insurance, credit, or employment

You can disconnect HealthKit any time from iOS Settings → Health → Data Access & Devices → Hunuu HIP. To request deletion of any HealthKit-derived data from us, email privacy@hunuuhealth.com.

Your rights

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Export your health data in standard formats (JSON, CSV, FHIR)
• Opt-out: Opt out of anonymized research use of your data
• Withdraw consent: Revoke AI consent or any third-party integration at any time
• Restriction: Request restriction of certain processing activities

To exercise any of these rights, contact us at privacy@hunuuhealth.com. We will respond within 30 days.

Data retention

We retain information while an account is active and as needed to provide requested services, protect security, resolve disputes, and meet applicable legal obligations. You may request account deletion at any time; we respond to the request within 30 days. We may retain some health data for up to seven years after account deletion where a documented legal, security, or dispute-resolution reason applies. HIPAA itself does not impose a seven-year medical-record retention period. When information is retained after a deletion request, we will identify the categories, reason, and expected deletion point in our response where we can lawfully do so.

Scope and important limitations

Privacy commitments remain binding. Product descriptions, research concepts, app-store listings, and educational content do not expand the data uses or recipients described here. A future feature is not authorization to collect or disclose a new category of health data. We will seek any required permission and update applicable notices before materially changing those practices.

Health information is not medical advice. Hunuu's educational information, patterns, scores, and AI-generated explanations are not a diagnosis, treatment plan, emergency-monitoring service, or substitute for a licensed clinician. No score or pattern is guaranteed to predict a condition or outcome. If you have symptoms or an urgent concern, seek professional care; for an emergency, contact emergency services.

Rights and applicable law control. The preceding product limitations do not waive privacy rights, reduce duties imposed by law, excuse inaccurate disclosures, or limit remedies that cannot legally be waived. Some services may be subject to different laws depending on Hunuu's role and the data involved. Where a separate legally required notice applies, we will provide it. If a term here conflicts with non-waivable law, that law governs to the extent of the conflict.

Children's privacy

Hunuu Health is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately at privacy@hunuuhealth.com.

Cookies & tracking

We use essential cookies for platform functionality and authentication. We do not use advertising cookies or sell browsing data to advertisers. You may disable non-essential cookies in your browser settings.

International users

Hunuu Health is operated in the United States. If you access our platform from outside the US, your information may be transferred to and processed in the United States, which may have different data protection laws than your country.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on our platform at least 30 days before they take effect, unless a shorter period is required by law or necessary to address a security issue. The effective date appears above; a change does not retroactively authorize a new use of information collected under an earlier promise.

Contact us

For privacy questions, data requests, or concerns:

Email: privacy@hunuuhealth.com
Mail: Hunuu Health Inc., Attn: Privacy Officer, Canton, GA
Web: hunuuhealth.com