Legal

Privacy Policy

Effective date: August 10, 2026  ·  Applies to Kayris™ (consumer app), Kayris.me, and the referral program

In short: Kayris™ calculates your cardiovascular and metabolic risk on your device, not on our servers. We never see your health inputs or results. At launch, all features are available at no cost — we are not currently processing payments or running the referral program, so no account, billing, or referral data is being collected. The one feature that intentionally moves data off your device — Sync with Clinic — only happens when you choose to trigger it.

01 Our approach to your privacy

HealthCare Analytics II, LLC, a Rhode Island limited liability company ("Healthcare Analytics," "we," "us," or "our") built Kayris™ around a simple rule: your health information is yours, and we don't want it. The app's risk calculations — every equation, every result, every trend line — run locally on your phone. There is no Kayris™ server that receives, stores, or processes the health data you enter.

This policy explains, plainly, what limited information we do handle (mostly account and billing mechanics), what we never see, and the one deliberate exception where you can choose to share data with a clinician.

02 What we collect

Because most of Kayris™ operates without a server, the categories of information we collect are narrow and largely non-health in nature. At launch, all features are available at no cost through December 31, 2026 — during this period, we are not collecting an account identifier, referral activity, or subscription data, because those systems are not yet active. The table below reflects what we collect today, and what we will begin collecting once Premium and the referral program are introduced (Sections 06–07):

CategoryWhat it includesStatus
Account identifier A randomly generated, anonymous account ID — not your name, email, or a health-linked identifier. Not yet active. Will be created only once Premium or the referral program launches.
Referral activity Which anonymous account ID referred which other anonymous account ID, and the resulting reward tier. Not yet active. See Section 07.
Subscription & purchase status Whether you're on Basic or Premium, your billing cycle, and receipt validation data, to be handled by our billing processor, RevenueCat. Not yet active. See Section 06.
Basic diagnostic data Crash logs and app performance data, which may include device model and OS version but not your health inputs. Active — used to find and fix bugs.

We do not require your name, email address, or any government-issued identifier to use Kayris™.

03 What we don't collect

We never receive, store, or have access to:

  • The health information you enter — age, lab values, blood pressure, medical history, or questionnaire answers
  • Your calculated risk scores, Kairos Factor™ results, or trajectory charts
  • Any data derived from the above

These stay on your device, encrypted in local storage, unless you personally choose to export them using Sync with Clinic (Section 05).

04 On-device processing architecture

stays on device

Every Kayris™ risk model — the 2024 AHA PREVENT™ equations, the ACC/AHA Pooled Cohort Equations, the ADA Diabetes Risk Estimator, and the Kairos Factor™ calculation — is embedded in the app itself and runs entirely on your phone's processor. When you enter data or generate a result, no network request is made to transmit that information anywhere.

With your permission, Kayris™ can also read health values — such as height, weight, and blood pressure — directly from Apple Health (iOS) or Health Connect (Android), so you don't have to re-enter numbers you already track elsewhere. This is read-only: Kayris™ does not write any calculated results, scores, or other data back to Apple Health or Health Connect. Data read from either source is treated exactly like manually-entered data — it stays on your device, feeds only the on-device risk calculations described above, and is never transmitted anywhere.

This design was a deliberate architectural choice, not an incidental one. It means:

  • Your health inputs and results — whether entered manually or read from Apple Health or Health Connect — are never transmitted over the internet by the app
  • We cannot see, analyze, or monetize your health data, because we never receive it
  • A lost or stolen phone is the only realistic point of exposure for your local data — which is why we recommend enabling your device's own lock screen and encryption
Note: This architecture informs Kayris™'s regulatory positioning as clinical decision support software rather than a medical device, consistent with FDA guidance under the 21st Century Cures Act. This policy describes our data practices; it is not a regulatory or legal determination.

05 Sync with Clinic — the one deliberate exception

data leaves device — only when you choose it

Sync with Clinic is an optional feature that lets you share your Kayris™ data with a clinician using the companion Kayris™ Professional app. It is never automatic and never runs in the background. It only activates when you deliberately open Connect to Clinic and choose an action:

  • Export Secure Payload (file): generates a file (for example, Kayris_ClinicShare_[date].json) that you send yourself — by email, file sharing, or another method you control — to your clinician.
  • Generate QR Code: displays a QR code on your screen that a clinician using the Professional app scans directly. No file is created or transmitted independently of that scan.
  • Import (file or QR): the reverse flow, allowing your clinician to send data — such as a wellness guide or clinical report — back to your device.

Data included in a Sync with Clinic export may include your risk inputs, calculated results, and trajectory history. This is the only circumstance under which Kayris™ health data leaves your device. We do not operate the transmission channel and do not receive a copy of the exported file — it moves directly from your device to the destination you choose (a share sheet, a QR scan, or a file you send yourself). Once shared, that data is subject to your clinician's own privacy and recordkeeping practices, not this policy.

06 Premium access & future billing

At launch, all Kayris™ features — including what will eventually be offered as Premium — are available at no cost through December 31, 2026. No purchase, subscription, or payment is required or processed during this period, and we do not collect any billing or payment information from you right now.

When paid subscriptions are introduced, they will be processed through RevenueCat, a third-party subscription infrastructure provider, in combination with the Apple App Store and Google Play billing systems. At that point, RevenueCat will receive the information necessary to validate purchases and manage subscription status — your anonymous account identifier and purchase/receipt data — but never your health inputs or results, which never leave your device. Your payment card details will always be handled directly by Apple or Google, never by Kayris™ or RevenueCat. We will update the effective date of this policy before payment is introduced.

07 Referral program

The Kayris™ referral program is not active in this version of the app. No referral tracking, account linking, or reward processing is currently taking place, and no referral-related data is collected.

When introduced, the program will track who referred whom using anonymous account identifiers only — never your name, email, or health data. Referral relationships and reward status will be tracked server-side, via infrastructure we operate, so that rewards apply correctly across devices and reinstalls. We will update this policy to describe that infrastructure before the feature is enabled.

08 Sharing of information

We do not sell your information. Because Premium billing and the referral program are not currently active (Sections 06–07), the only party we currently share information with is a clinician — and only when you personally initiate a Sync with Clinic export. We may also share information with law enforcement or regulators where required by valid legal process.

Once Premium and the referral program are introduced, we will also share limited account and purchase data with RevenueCat, the Apple App Store / Google Play, and our infrastructure provider — never your health inputs or results — as described in Sections 06 and 07.

09 Data security

Health data stored locally on your device is encrypted at rest using your platform's standard secure storage. Any data in transit — account authentication, receipt validation, or a Sync with Clinic transmission you initiate — is encrypted using industry-standard TLS. No method of storage or transmission is 100% secure, and we encourage you to keep your device's operating system and lock-screen protections up to date.

10 Age & children's privacy

Kayris™'s risk models are clinically validated for adults ages 30–79, and the app is intended for use within that range. A user's name and age may be entered directly into the app's on-device profile — for example, to personalize results or to distinguish family members sharing one device — but that information is stored locally and is never transmitted to us. We do not operate a server that receives, stores, or has visibility into anything entered in a Kayris™ profile, so we have no way to know a user's name or age, whether they are an adult or a child.

Because of this, there is no mechanism by which a child's name, age, or other profile information could reach us, and nothing for us to identify or delete on our end. If you're a parent or guardian with concerns about a child's use of the app, the most direct step is to delete the app or the relevant profile from the device — which permanently removes that locally stored information. You're also welcome to contact us at the address in Section 13 with any concerns.

11 Your rights & choices

  • Local data: Because your health inputs and results live only on your device, deleting the app deletes that data. There is no server copy for us to remove.
  • Account & referral data: You can request deletion of your anonymous account identifier and associated referral or subscription records by contacting us (Section 13).
  • Sync with Clinic exports: Once a file or QR export has been sent to a clinician, its retention is governed by their recordkeeping practices, not ours.

Depending on your location, you may have additional rights under laws such as the CCPA or similar state privacy statutes, including the right to know, delete, or opt out of the sale of personal information. We do not sell personal information.

12 Changes to this policy

We may update this policy as Kayris™ evolves. If we make material changes, we'll update the effective date above and, where appropriate, notify you in the app. Continued use of Kayris™ after changes take effect constitutes acceptance of the revised policy.

13 Contact us

Questions about this policy or your data can be sent to privacy@kayris.app.