Privacy Policy
Last updated: September 2026
The Short Version
We collect what you tell us and what you log. We use it to make Aria useful to you. Apart from the services that run the app, listed below, nothing you log is shared with or sold to anyone outside Zyptova unless you opt in, and that includes statistics about groups of people. Opting in is off by default, we may be paid for what is shared, and you can change it any time. The longer version is below, and it is specific on purpose.
What We Collect
Your account. Your email address and a hashed version of your password. We never store your password in plain text. If you sign in with Apple or Google we receive your email address and name from them.
Your health information. What you choose to record: your medication, dose, route and schedule, the dates you took it, your weight, symptoms and their severity, daily check-ins, foods and how they sat with you, your supply count, your treatment goal, age, biological sex, height, related health conditions, other medications, who prescribes for you, and whether you pay out of pocket. Also your conversations with Aria.
Apple Health, if you connect it. See the section below.
Notification registration. If you turn on reminders we store the notification token your phone gives us, the platform, and your timezone offset, so a reminder can arrive at the right hour. The token identifies your device, not you.
Meal photos, if you use them. Photographing a meal is optional and part of Premium. The photo is made smaller on your phone and sent to Anthropic once, to name the foods and estimate the protein. It is not stored by us, not stored on your phone by the app, and not used to train anything. What is kept is only what you confirm on the screen afterwards: the food names, the rough portion and the protein estimate, in your food log with everything else. No calorie figures are produced anywhere in Zyptova.
Usage. Which features you use and how often you open the app, kept alongside your record. Some of these events are themselves health related, such as the fact that a dose was logged on a given day, so we do not claim they are separate from your health information.
We do not use advertising identifiers, we do not track you across other apps or websites, and there is no third-party analytics or advertising SDK in Zyptova.
Apple Health
If you connect Apple Health, Zyptova reads one thing: your body mass readings, up to the last year, so your weight history is already there instead of being typed twice. It is read-only. We never write anything back to Apple Health, and we ask for no other data type.
A weight that came from Apple Health is then treated like any weight you typed: it is stored with the rest of your record, it is part of the context sent to Anthropic so Aria can talk about your trend, It is never included in the de-identified copy described below, so it is never in anything we share or sell. We never use Apple Health data for advertising or marketing, and we never share it with a data broker.
You can disconnect it at any time in the Health app under Data Access & Devices.
How We Use It
To make Aria specific to you. Aria cannot say anything useful about your week without knowing what you are taking and where you are in it, so each conversation carries context about you. That context includes your first name, age, biological sex, medication, dose, route, week, start date, injection day, treatment goal, related conditions, other medications, prescriber type, whether you pay out of pocket, your weight trend, and your recent check-ins with their symptom severities. The doctor visit summary additionally includes your name and recent conversation messages, because it is a document you hand to a clinician.
For our own analysis. We keep a de-identified copy of what you log, so we can understand patterns across everyone using Zyptova: how common a symptom is at a given week on a given medication, for example. That copy is keyed to a pseudonym rather than to your name or email, it never contains your conversations with Aria, and it is created whether or not you have opted in to sharing. It is for our own use: unless you opt in, nothing from it is shared with or sold to anyone, not even as group statistics. It is deleted when you delete your account.
Group statistics. From what people who opted in to research sharing (described next) log, we produce statistics about groups of people, such as how many are still taking their medication after six months, or how common nausea is in the first month on a given dose. They are produced only from people who opted in: if you have not, nothing you log is counted in them. They are percentages and rounded counts, each covering at least 5 people, and never a row about any one person. We may share or sell these statistics to healthcare organisations, researchers, pharmaceutical companies and health insurers, and we require anyone who receives them not to use them to decide any individual’s insurance coverage or price.
Research Sharing, Which Is Opt-In
Under You, “Contribute to research” controls whether what you log may be shared with, or sold to, healthcare organisations, researchers, pharmaceutical companies and health insurers, both as your de-identified records and counted in group statistics. It is off unless you turn it on. We are paid for some of this sharing. Anyone who receives your records must agree not to try to identify you, and not to use them to decide anyone’s insurance coverage or price. Weight readings from Apple Health are never included. If you turned this on before 27 September 2026, we will ask you again in the app before anything you log is included in what we share or sell, as records or in group statistics, and until you say yes it is not.
We want to be precise about what is shared, because “anonymous” would be the wrong word. What leaves us is de-identified individual records, not only summary percentages: rows carrying a stable pseudonym, an age band, biological sex, medication, dose, route, treatment goal, week on treatment, weight change as a percentage, and the symptoms, doses, check-ins and foods you logged with their dates. It never carries your name, your email, your date of birth, your device, your location, or anything you said to Aria. It is de-identified rather than anonymous: we cannot re-identify you from it without information we hold separately, but it is not aggregate statistics either.
You can turn it off at any time, and from then on nothing you log is counted in group statistics we share or sell. Entries you logged while it was off are never shared as records. Group statistics are worked out from your record as it stands while sharing is on, so they can count what you logged before you turned it on. Deleting a symptom or a food entry also withdraws it from anything shared going forward. Deleting your account removes your records from that store entirely.
Comparisons inside Zyptova. While it is on, what you log also goes into the comparisons other people see in the app: how common a symptom is for people on the same medication, dose and stage of treatment, how people felt that week, which day after a shot symptoms tend to peak, and which foods people said sat well on days they had nausea. These appear only as percentages and rounded counts, never with your name or anything that points to you, and nothing is shown unless at least 5 people are behind it. A food name appears only when at least 5 different people logged the same food. Weight is never compared. The figures are rebuilt once a day, so something you delete drops out of them by the next day.
Data Storage and Security
Your data is stored in an Upstash Redis database, and the app and its servers are hosted on Vercel. Everything sent between the app and our servers is encrypted in transit over HTTPS. The database can only be reached with a secret key held on our servers, and passwords are never stored: we keep only a scrypt hash with a random salt for each account.
We retain your data while your account is active. If you delete your account, your record, your conversations, your symptom archive, your notification registration and your de-identified research rows are all deleted. One exception: records of payments and subscription events are kept for accounting and tax purposes, and those carry the email address the purchase was made under.
Third Party Services
Zyptova uses these third parties, and this is the complete list:
Anthropic powers Aria. Each conversation sends your messages together with the context described above, which includes health information about you. Anthropic processes it as our API provider and their terms apply to that processing. If you photograph a meal, that photo is sent to Anthropic in the same way, read once and not retained.
Apple for Sign in with Apple, for subscriptions bought inside the iPhone app, and for delivering notifications to your device. Notification text is delivered through Apple's servers, so the medication name in a reminder passes through them and appears on your lock screen unless you change that in iOS Settings.
Google for Sign in with Google, if you use it. We receive your email address and name.
RevenueCat manages subscriptions bought inside the app. It receives your email address as your subscriber identifier, along with purchase and renewal events.
Stripe for subscriptions bought on the web. Stripe handles all card data and is PCI compliant. We never see or store your card details.
Upstash for data storage, and Vercel for hosting the application and its serverless functions.
Resend for email. It receives your email address and the message we are sending.
We send transactional email you cannot opt out of while you have an account: verifying your address, resetting your password, confirming account deletion.
If you ticked the box at signup we also send an occasional note with tips relevant to how you take your medication. That is optional, it is the only marketing email we send, and every one carries a one-click unsubscribe that needs no login.
Your Rights
You can access what we hold, correct it, download it, and delete your account and everything attached to it at any time. Deletion is in the app under You, or from the web if you no longer have the app installed. Depending on where you live you may also have the right to object to or restrict certain processing, and to lodge a complaint with your data protection authority. Email support@zyptova.com and we will help.
The in-app download covers your profile and everything you have logged. If you also want your conversations with Aria or the raw symptom archive, email us and we will send them.
Children
Zyptova is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe someone under 16 has created an account, contact us at support@zyptova.com and we will remove it.
Changes to This Policy
We may update this policy as our practices change. We will tell you about significant changes by email or an in-app notice. The date at the top reflects when it was last updated.
Contact
Privacy questions or concerns? Email us at support@zyptova.com. We take these seriously and will respond within 5 business days.