birll health
Menu
Get launch updatesUpdates

Birll Health / Privacy Policy

Birll Health is a product of Birll LLC. Optional services described in this policy depend on availability in your app build. Read the separate Consumer Health Data Privacy Policy.

Birll Health — Privacy Policy

Last updated: 24 October 2026

This Privacy Policy explains what information the Birll Health app ("Birll Health", "we", "us") collects, how we use it, and the choices you have. Birll Health is a personal wellness app. It is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease.

1. Information We Collect

  • Health and fitness data — from Apple HealthKit (such as steps, heart rate, sleep, and workouts), from Bluetooth sensors you pair for a live workout (heart rate, cycling power, and cadence), and from what you enter or record yourself (such as blood pressure, glucose, nutrition, water, weight, medications, health conditions, allergies, mood, stress, and the notes you ask Birll AI to remember). HealthKit access is granted only with your explicit permission.
  • Lab results and biomarkers — values you type in or import from a lab report photo or PDF. The lab-import feature runs entirely on your iPhone, using Apple's on-device text recognition and on-device Apple Intelligence model; it does not upload the imported report, photo or values to our servers or your cloud account. On-device AI features read your lab values only on your iPhone, and only if you have consented to AI processing and left Labs switched on under Settings › Birll AI › AI Data Access; stored lab values are never sent to Apple Private Cloud Compute or Anthropic. Information you choose to put in a chat message or attachment is described separately under AI Processing.
  • Account information — your email address, from Sign in with Apple.
  • Photos you attach — meal photos you take or pick for nutrition tracking, and images you choose to attach to a Birll AI conversation. Food-photo analysis uses Apple's on-device features. A food photo could be sent to Apple Private Cloud Compute only if you have allowed Private Cloud Compute and only if you have consented to AI processing; Private Cloud Compute is unavailable in this build. Chat photos are checked on your iPhone; a photo identified as clinical or unreadable is not sent to Claude. Resized, metadata-stripped copies of other chat photos may be sent through our authenticated Supabase proxy to Anthropic only after you allow Claude chat and consent to AI processing. This check cannot guarantee detection of every sensitive detail in content you provide. Chat attachments are stored in a private area of your cloud account that only you can read, and the full-resolution original stays on your device.
  • Location — when you record an outdoor workout, the GPS route is recorded on your device and, if cloud sync is on, saved to your account so it survives reinstalling the app. Location is used only while you are recording a workout; we do not track your location in the background at other times. Two things send route coordinates to Apple: drawing a route on a map fetches map tiles from Apple Maps, and importing a route file looks up the street names for its turns once, at import, through Apple's geocoding service. Neither carries your name or account.
  • Food lookups — when you scan a barcode or search for a food by name, the barcode or the words you typed are sent to Open Food Facts, and may also be sent to the USDA FoodData Central database, to fetch nutrition facts. These requests carry no account identifier.
  • Diagnostics — crash reports collected through Apple's MetricKit (the app version, iOS version, device model, and the technical details of the crash) are uploaded to your account so we can fix bugs.

Everything above is stored against your account, so it is linked to you rather than anonymous, with three exceptions: structured lab records are not stored in your cloud account, structured cycle tracking is read from Apple Health on your device and is never backed up to your account, and food lookups are not tied to your account at all. Health details you choose to put in a chat message or attachment can be saved with that conversation.

2. How We Use Your Data

We use your data to show your trends and insights, track progress toward your goals, power Birll AI, and keep your information in sync across your devices. Processing happens both on your device and, when you consent, in the cloud.

3. Data Storage and Security

Data sent between the app and our servers is encrypted in transit (TLS). Cloud data is stored in your private account in our hosted database (Supabase) and is access-controlled to your account. Sensitive credentials are stored in the iOS Keychain.

4. AI Processing

Birll asks for one required consent before you use the app: collection and processing of the health data you provide or allow us to read, to deliver health tracking and AI-powered wellness insights. The sign-in consent names this purpose and links to this Privacy Policy. It does not grant Apple Health permissions, account backup, Private Cloud Compute or Claude chat sharing; those remain separate choices.

Birll AI chat uses Claude from Anthropic. When you enable chat, your messages, permitted earlier conversation turns and eligible attachments are sent through Birll's authenticated Supabase chat proxy to Anthropic to produce a reply. Sending requires separate, versioned permission under Settings › Birll AI › Where Birll AI runs › Allow Claude chat. This permission is off by default, belongs to your signed-in account and is not granted by an earlier AI-processing choice. You can turn it off there; this stops new chat requests and does not delete content already sent. You can decline Claude chat and still use the rest of the app.

AI Processing Consent and the category switches under Settings › Birll AI › AI Data Access separately control access to stored wellness context, such as vitals, activity and workouts, sleep and recovery, body measurements, food and water, goals, and mood and mindfulness entries. Access to the app requires recorded AI-processing consent; category switches let you limit the stored information used for insights and chat. The app does not add your account name to this context. Where permitted, context can include your age, sex, chosen goals and favourite activities, measurement preferences and confirmed targets. Stored lab results, medications, health conditions, allergies, clinical records, cycle tracking and stress readings are excluded from Claude's stored-data access. Clinical write tools are not offered to Claude. Your messages or attachments may themselves contain health details or identifying information; category filters do not guarantee removal of everything you type or attach.

Reports, food features, plans and lab processing continue to use Apple Intelligence on your iPhone; they are not routed to Anthropic. The Apple-model setting is separate from Claude chat permission. Private Cloud Compute is unavailable in this build because its required entitlement is not enabled, and no requests are sent to it. About Private Cloud Compute, Apple states: “The data being processed in Private Cloud Compute is not stored or made accessible to Apple.” (Apple Intelligence & Privacy, https://www.apple.com/legal/privacy/data/en/intelligence-engine/)

The chat proxy does not log or store message or reply content, and the Anthropic API secret is kept on the server rather than in the app. Separately, your conversation — your questions and Birll AI's replies — is saved to your account so it syncs between your devices. Anthropic may retain API inputs and outputs under its commercial terms and data-handling policies, including safety and legal exceptions; Birll does not promise zero retention. Read Anthropic's commercial privacy information about model training (https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training), retention (https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data) and Commercial Terms (https://www.anthropic.com/legal/commercial-terms).

5. Data Sharing

We do not sell your personal data, and we do not use it for advertising. We do not use third-party advertising, analytics, or tracking SDKs. The companies that receive your data to run the service are Supabase (the database, sign-in, file storage and authenticated chat proxy), Apple (Sign in with Apple, HealthKit and the map tiles and route geocoding described under Location, under Apple's own terms), and Anthropic for Claude chat only when you grant its separate permission, as described under AI Processing. Open Food Facts and the USDA receive only the barcode or search words you look up. Health data is never used for advertising or shared for marketing, in compliance with Apple's HealthKit guidelines.

6. Your Rights and Deletion

You can withdraw AI-processing consent in Settings › Birll AI › AI Data Access. Withdrawal stops new personal-data AI requests and returns you to privacy review before you can continue using the app. It does not delete existing records or grant any other permission. You can decline to agree again and sign out. You can request access, export or deletion at info@birll.com, including when you are signed out; the in-app export and deletion controls are described below.

You can export a copy of your data as a file (Settings › Privacy & Data › Export Health Data) and delete it at any time. The export is a JSON file holding your cloud records and the ones kept only on this device, lab results included; photos and scanned lab documents are not in it, and the file states its own scope in its opening lines. Delete All Data (Settings › Account) erases your health data on this device and in your cloud account; Delete Account (Settings › Account) does the same and also removes your sign-in, closing the account. Deletion covers your rows in our database, your chat photos in cloud storage, and what the app stored on this device — including your saved workout routes and any crash report not yet sent. It cannot reach what the app saved into Apple Health (weight, blood pressure, glucose, water, nutrition, mindful sessions and workouts): those samples belong to Apple's Health app and are deleted there. When you ask us to delete your data we pass that request on to the companies that process it for us. We honour the rights the GDPR gives you (access, export, erasure, and withdrawal of consent) and, for California residents, the Confidentiality of Medical Information Act (CMIA), which treats an app that keeps your medical information as a provider of health care. If you live in Washington or Nevada, we also maintain a separate Consumer Health Data Privacy Policy for you; email the address below and we will send you a copy. To exercise any right the app's controls do not cover, or to appeal a decision we make about your data, email info@birll.com.

7. Children's Privacy

The App is not intended for anyone under 18, and we do not knowingly collect data from them.

8. Changes to This Policy

We will notify you of significant changes through the App or via email.

9. Contact

For privacy inquiries, contact us at info@birll.com.

Optional connected services

Connection options depend on the app build, service configuration and provider availability. Where a connection is offered and you authorize it, the provider is an additional source of the data shown on its authorization screen. The app includes connection options for Oura, WHOOP, Strava, Polar and Withings; this list does not mean that every connection is available or approved for public use.

The provider separately processes your account, authorization and API requests under its own terms and privacy policy. Review the permissions before connecting. Review or disconnect an offered connection in Settings › Devices & Services › Connected Apps. This website does not receive provider passwords or authorization codes. Read more about connection availability.

This website

This website is hosted by Netlify. Requests to load its pages and assets are processed to deliver and secure the website. See Netlify’s privacy information. The website uses locally hosted fonts and does not include advertising trackers, third-party analytics or a website account system.

The launch-update field opens your email app. The website does not submit or store that field on a server. If you choose to send the email, we receive your address and the message you send so we can respond to your request. Do not include health information. You can ask us to stop updates or delete correspondence by emailing info@birll.com.