Architecture, not marketing
“Privacy-first” here means where processing happens, not a badge on the landing page. For camera-based readings, raw video frames are handled on your phone. Derived metrics — pulse, quality scores, timestamps — sync to your account when you save a reading.
What never leaves by default
- Raw camera video during a normal scan session
- Frames you did not explicitly choose to upload for research
What can leave — with consent
Optional research consent in onboarding allows de-identified metric bundles to support validation studies. Raw heart-sound audio uploads only if you opt in separately; you can revoke that consent in settings without losing the rest of the product.
Where account data lives
Trends, reports, and journal entries for your account are stored encrypted at rest. More detail on the dedicated privacy page.
Your controls
Access, export, deletion, and consent withdrawal live in the cabinet under settings. You should not need an email to exercise basic rights.
Related
- Science and validation — how we validate without inventing credentials
- Pricing — what Free includes