Privacy notice · version 2026-10-21
Your data, your choice
What Carpemind stores and why. The first item is needed for the app to work; everything else is optional, off unless you turn it on, and can be changed any time in the app under Profile → Privacy and data.
Carpemind is a wellness app, not a medical device. Nothing it shows is a diagnosis.
What Carpemind stores
Your account and entries Required
Sign-in, and everything you log: water, weight, body fat, muscle, visceral fat level and scale brand, waist, height, year of birth, sex, routines, workouts and your own exercises.
- What
- Your Google or Apple account id, e-mail and name; the entries listed above with their times; pictures and videos you add to your own exercises; your language and water goal; a push token per phone for reminders. Water and weight are health data, so this needs your explicit consent (GDPR Art. 9(2)(a)).
- Where
- On Carpemind’s server (Hetzner Online GmbH, EU). Phones and the watch keep a copy so they work offline.
- How long
- Until you delete an entry or your account. Deleted data leaves the nightly backups within 14 days.
- Who can see it
- Only you. Hetzner Online GmbH, EU hosts the server; Google or Apple only confirm your sign-in. Nothing is sold or shown to advertisers.
Health Connect / Apple Health Optional
Bring in water, weight, body fat and your height, year of birth and sex from other apps, and save what you log here there too.
- What
- Water, weight, body fat and height records from Health Connect or Apple Health, with the name of the app that wrote them, plus the year of birth and sex saved there (Apple Health only). Carpemind writes your water, weight, height and workouts back.
- Where
- Read on your phone, then stored with your entries on Carpemind’s server.
- How long
- Like your other entries. Turning it off stops all reading and writing at once; you can also have everything imported deleted.
- Who can see it
- Only you. Other apps can read what Carpemind writes to Health Connect or Apple Health only if you allow them there.
Mood and stress Optional
Calm sessions, mood check-ins and a gentle stress estimate from your heart rate, HRV, sleep and steps.
- What
- Heart rate, resting heart rate, HRV, steps and sleep that your watch or other apps saved in Health Connect or Apple Health; your heart rate measured by the watch before and after a calm session; your 1–5 mood check-ins with an optional note; when you did a calm session.
- Where
- The phone reads the health store only when it needs to and doesn’t copy the readings. It sends hourly summaries (average heart rate and HRV, steps, minutes asleep) to Carpemind’s server, which works out the estimate. Check-ins and calm sessions are stored there too.
- How long
- Hourly summaries 180 days, then deleted automatically; check-ins and calm sessions until you delete them. Turning this off stops everything at once, and can also delete it all.
- Who can see it
- Only you. The estimate is worked out by fixed rules, not by AI, and is not a medical reading.
Morning tips Optional
A short morning briefing and a few tips that link your sleep, heart, training, sauna and supplement days. Needs “Mood and stress” for the body signals.
- What
- A summary per night (HRV, resting heart rate, sleep timing and stages, how long the watch was worn) and per day (training load, active energy, steps, other apps’ workouts), made on your phone from Health Connect or Apple Health; how hard your workouts felt; your sauna, cold and supplement logs; which tips you found helpful.
- Where
- The phone reads the health store and sends only the summaries to Carpemind’s server, which compares them with your own past using fixed rules. No AI, no other users’ data.
- How long
- Night and day summaries 365 days, tips 180 days, then deleted automatically. Turning this off deletes them at once; your sauna and supplement logs stay as entries.
- Who can see it
- Only you. Tips are suggestions for wellbeing, never a diagnosis, and nothing is decided for you.
AI on your phone Optional
Let the phone’s built-in model (Gemini Nano on Android, Apple Intelligence on iPhone) read your data to draft routines and summaries.
- What
- The data the request needs, e.g. your goals, recent workouts and exercise list.
- Where
- Only on your phone. Nothing is sent to Carpemind or anyone else.
- How long
- Not kept: the request and answer are gone when you close it, unless you save the result.
- Who can see it
- Nobody. It works offline.
Cloud AI (Google Gemini) Optional
Only a fallback: on phones and tablets that can’t run AI themselves, send the request to Google’s Gemini API.
- What
- The request and the data it needs, e.g. goals, recent workouts and exercises. Never your name, e-mail or account id.
- Where
- Sent through Carpemind’s server to Google’s servers, possibly outside the EU (USA), under the EU–US Data Privacy Framework and standard contractual clauses.
- How long
- Carpemind does not keep it. Under the paid Gemini API terms Google does not train on it, but may keep it up to 55 days to detect abuse.
- Who can see it
- Google, as Carpemind’s processor.
Who is responsible
Carpemind is the controller of your data. Contact: privacy@carpemind.com.
Why we may use it
Your consent (GDPR Art. 6(1)(a) and, for health data, Art. 9(2)(a)), separately for each purpose above. Keeping your account working is also needed to provide the service you asked for (Art. 6(1)(b)).
What for
Only to provide the features you use. No advertising, no profiling for others, no selling of data. Decisions with legal effect are never made automatically.
How it is protected
Encrypted connections (HTTPS), sign-in tokens kept in the phone’s secure storage, pictures and videos reachable only through short-lived signed links, a firewalled server with automatic security updates.
Error and performance data
To find and fix faults, Carpemind’s server sends technical records of its requests (which address was called, how long it took, and any errors) to Grafana Labs, as our processor, stored in its EU region (GDPR Art. 6(1)(f)). They never contain what you enter, your e-mail or your name; at most your internal account number. Grafana keeps them for about two weeks.
Outside the EU
Only if you turn on cloud AI: then requests go to Google in the USA, as described above.
Your rights
Access, a copy in a machine-readable format, correction, deletion, restriction, objection and withdrawing consent at any time without affecting what was done before. Most of these are buttons in the app under Profile → Privacy and data; for the rest, write to privacy@carpemind.com. You may complain to a data protection authority (in Hungary: NAIH, naih.hu).
To delete your account and everything stored with it, see Delete your account.
On this website
The site sets no cookies, stores nothing in your browser and loads nothing from other servers: its fonts are served from here, so your IP address isn’t sent to Google Fonts or anyone else.
We count visits ourselves, with no outside analytics service. Each page view sends the page, the site you came from (its domain only), any campaign tags in the link, whether the screen is a phone, tablet or desktop size, and your browser’s language. To count each visitor once a day, our server mixes your IP address and browser name with a random key that changes every day and is never written down, and keeps only the result for that day; your IP address itself is never stored. What we keep are counts per day, page and source, which say nothing about who you are. We do this to see how the site is found and used (legitimate interest, GDPR Art. 6(1)(f)).
If you sign up for the beta, we keep your e-mail, the Google account you give, your phone and watch model, the page language and the time, to let you into the test and write to you about it (GDPR Art. 6(1)(b)). If you’re approved, your Google account is added to the test in Google Play, with Google as the processor. We keep it until the beta ends or you ask us to delete it, and 90 days after the decision if you’re not approved. Write to privacy@carpemind.com to see, correct or delete it.
If you write to us through the contact form, we keep your e-mail, the name if you give one, the topic, your message, the page language and the time, to answer you (GDPR Art. 6(1)(b), or 6(1)(c) for a privacy request). Only the team sees it. We keep it up to 12 months after we answer; a privacy request as long as we must be able to show we handled it.
Reports from the app
“Report a problem” in the app sends what you type, the topic, the app version, your phone or watch model and the app language, tied to your account so we can look into it. Your e-mail goes along only if you ask for an answer by e-mail. Only the team sees it; it is part of your data download, and it is deleted with your account, otherwise up to 12 months after we dealt with it.
You can add up to five screenshots or screen recordings to a report, to show us what went wrong. Adding them is your choice, and they can show health data that is on your screen, so crop out what we don’t need. Your phone makes them smaller (pictures as WebP, recordings as 720p video) before they are uploaded, and they are uploaded only when you send the report; one you picked but never sent is deleted within a day. They are stored with the report, under your account, on Carpemind’s server (Hetzner, EU), and only the team sees them, including on the internal bug ticket made from your report, which links to them rather than copying them. They are part of your data download, and they are deleted together with the report or your account.
Age
Carpemind is for people aged 16 or over.
Changes
If this notice changes in substance, the app asks you to read and agree again before you can go on.