1. Introduction & Scope
Panoram ("we", "us", "our") is a personal health aggregator mobile application. This Privacy Policy explains how we collect, use, store, and protect your personal and health data when you use Panoram on iOS or Android. Effective date: 2026-07-17 By using Panoram you agree to this policy. If you do not agree, please do not use the app.
2. Data We Collect
2.1 Data you provide directly • Biometrics: height, weight, age, sex • Daily goals: calories, protein, fat, carbohydrates, steps, hydration, sleep • Food & hydration diaries (daily logs) • Sleep & activity logs • Supplements and medication schedules • Location: city name only (no GPS coordinates) • Account information: email address 2.2 Health context notes Free-text notes you enter describing your health conditions, medications, or allergies. These notes are shared with the AI assistant to personalise responses. 2.3 Data from connected services When you connect Apple Health, Oura, Whoop, or similar services, we read health metrics (steps, heart rate, sleep stages, HRV, etc.) with your explicit permission. We read only the categories you authorise. 2.4 Technical data App version, device platform (iOS/Android), crash logs. We do not collect device identifiers or advertising IDs.
3. Legal Basis
We process your data under the following legal bases (GDPR Art. 6 & 9): • Explicit consent (Art. 9(2)(a)) — for all health data, which is a special category requiring explicit consent • Contract performance (Art. 6(1)(b)) — for account creation and service delivery You may withdraw your consent at any time from Settings → Data & Privacy. Withdrawal does not affect prior processing.
4. How We Use Your Data
• Generate daily, weekly, and monthly health reports • Compute derived metrics: BMI, TDEE, hydration targets • Power the AI assistant with personalised context • Send optional reminders (hydration, supplements, weekly summary) • Sync your data securely across your devices We do not use your data for advertising, profiling for third-party marketing, or any purpose other than providing the Panoram service.
5. AI Processing
Panoram uses third-party AI providers to generate personalised health insights and responses. When you interact with the AI assistant, your health context notes and relevant aggregated metrics are sent to those providers' servers for processing. Key facts: • Our AI providers do not train their models on data submitted via the API • Data sent to the AI is governed by each provider's Data Processing Agreement • You can disable AI features at any time in Settings → Data & Privacy → AI data processing • If AI features are disabled, no health data is ever sent to an AI provider
6. Data Sharing & Sub-processors
We share your data only with the following sub-processors, which are necessary to operate the service: • Supabase Inc. — database hosting, authentication, and storage (your data is stored in their cloud infrastructure) • Our AI providers — AI processing (only when AI features are enabled) We do not sell your data. We do not share your data with advertisers. We do not share your data with insurance companies or employers.
7. Data Location & International Transfers
Your data is stored on Supabase's infrastructure. Depending on your region, this may involve transfer of data to the United States or other jurisdictions. Such transfers are covered by Standard Contractual Clauses (SCCs) where required by GDPR.
8. Data Retention
We retain your data for as long as your account is active. If you delete your account, all your data is permanently deleted within 30 days. Local data (stored on your device) is deleted when you uninstall the app or clear app data. Use the Export feature before uninstalling to keep a copy.
9. Security
• All data in transit is encrypted with TLS 1.2+ • Data at rest is encrypted by Supabase • Row-Level Security ensures you can only access your own data • Authentication uses Supabase Auth with email/password; passwords are hashed and never stored in plain text
10. Your Rights
You have the following rights regarding your personal data: • Access — export a copy of your data (Settings → Data & Privacy → Export my data) • Rectification — edit your data in the app at any time • Erasure — delete your account and all data from Settings • Portability — your export is a structured JSON file you can use elsewhere • Withdraw consent — disable AI features or delete your account at any time • Lodge a complaint — contact your national data protection authority (e.g. ICO in the UK, CNIL in France)
11. Children
Panoram is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date and, for material changes, ask you to review and re-accept the updated policy before continuing to use the app.
13. Contact
For privacy-related requests or questions: Email: privacy@panoramhealth.com You can also submit data deletion or access requests directly from Settings → Data & Privacy in the app.