Privacy Policy

1. Who this policy covers

This Privacy Policy applies to the redd mobile application, redd.health, and the related account, synchronization, subscription, and support services (collectively, the “Service”).

For privacy questions or requests, contact hello@redd.health.

2. Information we handle

Account and profile information

We process information such as your email address, internal user identifier, authenticated sessions, date of birth, gender, height, and display-unit preferences.

Health and wellness information

When you choose to provide or import it, redd may process health, fitness, and wellness information including:

• activity, workouts, steps, strength training, and VO2 max;
• sleep, resting heart rate, heart-rate variability, and recovery data;
• weight, body composition, DEXA, and blood pressure;
• food, nutrition, medication, supplement, and compound logs;
• blood-test and other biomarker results;
• symptoms, daily wellbeing, mood, energy, stress, and sexual-health entries; and
• notes, dates, measurements, and other details you add to those records.

This data may come directly from you or, with your authorization, from Apple Health or Android Health Connect. You control the health-data permissions granted to redd through your device settings.

Subscription information

Apple or Google processes your payment details. redd receives only the subscription status needed to provide paid access, such as the product, entitlement, renewal, expiration, and cancellation status. We do not receive your complete payment-card number or provide your health information as part of subscription processing.

Technical, diagnostics, and usage information

We may process app version, operating system, device and network information, IP address, coarse timestamps, screens viewed, feature events, synchronization status, error reports, stack traces, and performance diagnostics. This processing takes place on infrastructure operated for redd. We do not send this information to third-party analytics, advertising, or crash-reporting services.

Camera and barcode information

If you use barcode scanning, the camera is used to recognize a food or medication barcode. Camera frames are processed on your device. The resulting barcode value may be sent to redd to find a matching item. redd may query a public product catalog using the barcode alone; no account or health information is included in that query.

Support communications

If you contact us, we process your email address, message, and any diagnostics or attachments you choose to provide. Please do not include health information in a support request unless it is necessary.

3. How we use information

We use information to:

• create and secure your account;
• provide logging, synchronization, charts, scores, trends, and related features;
• verify subscriptions and manage paid access;
• respond to support, recovery, privacy, and security requests;
• detect abuse, protect accounts, and troubleshoot failures;
• measure basic product usage and improve the Service; and
• meet legal, tax, accounting, and regulatory obligations that apply to us.

redd’s scores and trends are generated to provide the Service to you. We do not use your health information to target advertising.

4. Legal bases for users in Europe and the EEA

Where European data-protection law applies, we rely on the performance of our contract with you, compliance with legal obligations, and legitimate interests such as security and service reliability. We process health information with your explicit consent where required, including when you authorize health-platform access or deliberately enter health information into redd.

You can withdraw a health-platform permission through your device settings. Withdrawal does not affect processing that occurred before withdrawal. Information already synchronized to your redd account can be removed by deleting the relevant entry or your account.

5. No transfer of your data to third parties

We do not sell, rent, share, or otherwise transfer the personal or health information you store in redd to third parties. Our databases, product analytics, diagnostics, and service infrastructure are operated for redd and are not used to provide your data to external analytics, advertising, or data-brokerage companies.

Actions you initiate may involve a platform outside redd—for example, completing a purchase through Apple or Google, granting access to Apple Health or Health Connect, or looking up a product barcode. redd does not send your health records to those services. We may disclose information only when legally required to do so.

6. Storage and security

redd stores and processes information on infrastructure operated for redd. We use safeguards designed for sensitive information, including encrypted network connections, authenticated access, secure credential storage, and an encrypted local application database. No storage or transmission system can be guaranteed completely secure.

7. Retention and deletion

We retain account and health information while your account is active or as needed to provide the Service. We may retain limited records longer where necessary for security, dispute resolution, fraud prevention, or legal compliance. Deleted information may remain temporarily in protected backups or logs until those systems are overwritten under their normal retention cycle.

You can delete individual entries in the app. You can permanently delete your account through Profile → Support & account → Delete account, or follow the instructions on our account-deletion page.

8. Your choices and rights

Depending on where you live, you may have the right to:

• access, correct, or receive a copy of your personal information;
• request deletion, restriction, or portability;
• object to certain processing or withdraw consent;
• manage Apple Health or Health Connect permissions in device settings;
• manage or cancel subscriptions through Apple or Google; and
• complain to your local data-protection authority.

To make a request, email hello@redd.health. We may need to verify that you control the relevant account before completing a request.

9. Children

The Service is intended for adults and is not directed to children under 18. Do not create an account or provide personal information if you are under 18.

10. Changes to this policy

We may update this policy as the Service or legal requirements change. We will update the date above and provide additional notice when a change materially affects your rights or how we use sensitive information.

11. Contact

Questions and privacy requests can be sent to hello@redd.health.