Last updated: 19 July 2026 (revised)
AIRA (“we”, “the app”) helps you track factors related to bone health and produces a daily risk score. This policy explains what data we collect, why, and how it is handled.
Your data is used to operate the app: authenticating you, storing your logs, and calculating your scores and history. We do not sell your data or use it for advertising.
If you request an AI-generated report, the health inputs needed for that report are sent to Google and processed by the Gemini API to write the summary. This data leaves our servers for that purpose. Your name, email address and account details are not sent. If you never request an AI report, nothing is ever sent to Google.
AI reports are opt-in. You are asked for explicit consent before the first report is generated, and you can withdraw that consent at any time — doing so deletes every report already generated for you.
AIRA does not use tracking or advertising cookies. The app stores your sign-in session (an access token and your email) in your browser’s local storage, purely so you stay signed in between visits. This data stays on your device and is cleared when you log out.
Data is stored in our own database on a private server. Access is restricted and transport is encrypted (HTTPS). Automated backups are retained for a limited period.
You can delete your account and all associated data at any time from Profile → Danger zone → Delete account in the app — this immediately and permanently removes your baseline, logs, and account record. You can also request access to your data, or ask us to delete it on your behalf, by contacting us at the email below.
Questions about this policy: privacy@phinnovation.org