Legal

Privacy Policy

Last updated: April 8, 2026

The short version

  • Your raw HealthKit data — heart rate samples, sleep timestamps, HRV, wrist temperature — never leaves your iPhone.
  • Trana sends a small summary (today's score, peak time, the metrics you can already see in the app) to our proxy at trana.health to generate written insight cards. No raw HealthKit samples and no personally identifying information are sent.
  • Apple's App Attest framework verifies that requests come from a genuine Trana install. The keyId stored on the server is anonymous — Trana has no user accounts.
  • We do not retain the request beyond the moment it is processed. Nothing is stored after the response is returned.
  • Your HealthKit data is never used for advertising.
  • Your data is never sold or shared with third parties.
  • You can delete all local data at any time from the app settings.
  • We collect no personally identifiable information.

1. Information We Collect

Trana accesses Apple HealthKit data on your device, specifically: heart rate samples (HKQuantityType.heartRate), step count (stepCount), sleep analysis (sleepAnalysis), heart rate variability (heartRateVariabilitySDNN), and where available, wrist temperature. This data is read from HealthKit and processed entirely on your iPhone. We do not collect names, email addresses, phone numbers, or any personally identifiable information. If you join our email waitlist on trana.health, your email address is stored separately and is never linked to health data.

2. How We Use Your Data

Raw HealthKit samples are used solely to compute circadian rhythm metrics (Relative Amplitude, Interdaily Stability, Intradaily Variability, Acrophase, MESOR, Sleep Regularity Index) and your daily Trana Score. All computation on raw data occurs on your iPhone using local processing. Raw HealthKit samples and the timestamps of individual readings are never transmitted off-device.

3. AI Insight Generation

To generate the personalized written insight cards you see in the app, Trana sends a small summary to our LLM proxy at https://www.trana.health/api/llm-insight. This summary contains: today's numerical Trana score, your peak time as a clock time, your computed rhythm metric values, and your status verdict — the same numbers you can already see on your own screen. The summary contains no raw HealthKit samples, no individual reading timestamps, no HealthKit identifiers, no device identifiers, no user identifiers, and nothing that could identify you. We use Apple's App Attest framework to ensure only genuine Trana iOS installs can use the proxy. The proxy forwards the summary to xAI (Grok) for natural-language generation and returns the response. We do not retain the request beyond the moment it is processed; the request body is discarded after the response is returned. xAI's own retention policy applies to the summary content sent to them.

4. Disabling AI Insights

If you prefer Trana to make no outbound network requests at all, the chat feature and AI-generated insight cards can be disabled in Settings. The rest of the app — your score, your status, your charts, your history, your chronotype classification, your social jet lag, your Sleep Regularity Index — works fully offline and on-device. (Note: this toggle ships in Build 4.)

5. Data Storage

Computed scores, metric history, and baseline values are stored locally on your iPhone using Apple's SwiftData framework. This data exists only on your device and in your iCloud backup (if you have iCloud backup enabled for the Trana app). We have no access to this data.

6. Data Sharing

We do not share, sell, rent, or transfer your health data to any third party. We do not use HealthKit data for advertising or marketing purposes, in compliance with Apple's HealthKit guidelines. The summary sent to our LLM proxy (described in Section 3) is the only outbound transmission of data derived from HealthKit, and it contains no personally identifying information.

7. Third-Party Services

The Trana app uses Apple's App Attest framework (Apple) and our own LLM proxy at trana.health, which forwards requests to xAI (the maker of Grok). The Trana website (trana.health) uses Vercel Analytics for basic page view counts and Resend for waitlist email delivery. Website analytics never access or reference health data.

8. Data Deletion

You can delete all Trana data at any time through the app's Settings screen. This permanently removes all computed scores, metric history, and baseline data from your device. HealthKit data remains in Apple Health and is managed by Apple's privacy controls.

9. Children's Privacy

Trana is not intended for use by children under 17. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this privacy policy, contact us at privacy@trana.health.