Privacy Policy
Last updated: September 2026
The Short Version
We collect what you tell us and what you log. We use it to make Aria useful to you. We do not sell your personal data. Sharing anything beyond our own analysis is opt-in and off by default. The longer version is below, and it is specific on purpose.
What We Collect
Your account. Your email address and a hashed version of your password. We never store your password in plain text. If you sign in with Apple or Google we receive your email address and name from them.
Your health information. What you choose to record: your medication, dose, route and schedule, the dates you took it, your weight, symptoms and their severity, daily check-ins, foods and how they sat with you, your supply count, your treatment goal, age, biological sex, height, related health conditions, other medications, who prescribes for you, and whether you pay out of pocket. Also your conversations with Aria.
Apple Health, if you connect it. See the section below.
Notification registration. If you turn on reminders we store the notification token your phone gives us, the platform, and your timezone offset, so a reminder can arrive at the right hour. The token identifies your device, not you.
Usage. Which features you use and how often you open the app, kept alongside your record. Some of these events are themselves health related, such as the fact that a dose was logged on a given day, so we do not claim they are separate from your health information.
We do not use advertising identifiers, we do not track you across other apps or websites, and there is no third-party analytics or advertising SDK in Zyptova.
Apple Health
If you connect Apple Health, Zyptova reads one thing: your body mass readings, up to the last year, so your weight history is already there instead of being typed twice. It is read-only. We never write anything back to Apple Health, and we ask for no other data type.
A weight that came from Apple Health is then treated like any weight you typed: it is stored with the rest of your record, it is part of the context sent to Anthropic so Aria can talk about your trend, and if you have opted in to research sharing it contributes to the weight-change figure in the de-identified records described below. We never use Apple Health data for advertising or marketing, and we never share it with a data broker.
You can disconnect it at any time in the Health app under Data Access & Devices.
How We Use It
To make Aria specific to you. Aria cannot say anything useful about your week without knowing what you are taking and where you are in it, so each conversation carries context about you. That context includes your first name, age, biological sex, medication, dose, route, week, start date, injection day, treatment goal, related conditions, other medications, prescriber type, whether you pay out of pocket, your weight trend, and your recent check-ins with their symptom severities. The doctor visit summary additionally includes your name and recent conversation messages, because it is a document you hand to a clinician.
For our own analysis. We keep a de-identified copy of what you log, so we can understand patterns across everyone using Zyptova: how common a symptom is at a given week on a given medication, for example. That copy is keyed to a pseudonym rather than to your name or email, it never contains your conversations with Aria, and it is created whether or not you have opted in to sharing. Sharing it outside Zyptova is a separate choice, described next. It is deleted when you delete your account.
Research Sharing, Which Is Opt-In
Under You, “Contribute to research” controls whether your logs may be shared with healthcare organisations, researchers and partners. It is off unless you turn it on, and this may be a paid arrangement for us.
We want to be precise about what is shared, because “anonymous” would be the wrong word. What leaves us is de-identified individual records, not only summary percentages: rows carrying a stable pseudonym, an age band, biological sex, medication, dose, route, treatment goal, week on treatment, weight change as a percentage, and the symptoms, doses, check-ins and foods you logged with their dates. It never carries your name, your email, your date of birth, your device, your location, or anything you said to Aria. It is de-identified rather than anonymous: we cannot re-identify you from it without information we hold separately, but it is not aggregate statistics either.
You can turn it off at any time. Entries you logged while it was off are never shared. Deleting a symptom or a food entry also withdraws it from anything shared going forward. Deleting your account removes your records from that store entirely.
Data Storage and Security
Your data is stored in Upstash Redis and hosted on Vercel, encrypted in transit over HTTPS and encrypted at rest. Passwords are hashed with scrypt and a per-account random salt.
We retain your data while your account is active. If you delete your account, your record, your conversations, your symptom archive, your notification registration and your de-identified research rows are all deleted. One exception: records of payments and subscription events are kept for accounting and tax purposes, and those carry the email address the purchase was made under.
Third Party Services
Zyptova uses these third parties, and this is the complete list:
Anthropic powers Aria. Each conversation sends your messages together with the context described above, which includes health information about you. Anthropic processes it as our API provider and their terms apply to that processing.
Apple for Sign in with Apple, for subscriptions bought inside the iPhone app, and for delivering notifications to your device. Notification text is delivered through Apple's servers, so the medication name in a reminder passes through them and appears on your lock screen unless you change that in iOS Settings.
Google for Sign in with Google, if you use it. We receive your email address and name.
RevenueCat manages subscriptions bought inside the app. It receives your email address as your subscriber identifier, along with purchase and renewal events.
Stripe for subscriptions bought on the web. Stripe handles all card data and is PCI compliant. We never see or store your card details.
Upstash for data storage, and Vercel for hosting the application and its serverless functions.
Resend for email. It receives your email address and the message we are sending.
We send transactional email you cannot opt out of while you have an account: verifying your address, resetting your password, confirming account deletion.
If you ticked the box at signup we also send an occasional note with tips relevant to how you take your medication. That is optional, it is the only marketing email we send, and every one carries a one-click unsubscribe that needs no login.
Your Rights
You can access what we hold, correct it, download it, and delete your account and everything attached to it at any time. Deletion is in the app under You, or from the web if you no longer have the app installed. Depending on where you live you may also have the right to object to or restrict certain processing, and to lodge a complaint with your data protection authority. Email support@zyptova.com and we will help.
The in-app download covers your profile and everything you have logged. If you also want your conversations with Aria or the raw symptom archive, email us and we will send them.
Children
Zyptova is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe someone under 16 has created an account, contact us at support@zyptova.com and we will remove it.
Changes to This Policy
We may update this policy as our practices change. We will tell you about significant changes by email or an in-app notice. The date at the top reflects when it was last updated.
Contact
Privacy questions or concerns? Email us at support@zyptova.com. We take these seriously and will respond within 5 business days.