OmniSalub Consumer Health Data Privacy Policy

Effective date: 8 October 2026
Last updated: 8 October 2026
Publisher: Prameya LLC ("Prameya", "we", "us")
Applies to: OmniSalub for iPhone, iPad, Mac, Apple Vision Pro and Apple TV (bundle identifier legal.prameya.omnisalub), and the OmniSalub Apple Watch app (legal.prameya.omnisalub.watchkit)
Contact: admin@prameya.legal

This is a separate, distinctly-labelled consumer health data privacy policy, published as required by Washington's My Health My Data Act (RCW ch. 19.373) and drafted to satisfy Nevada's consumer health data law (SB 370, NRS ch. 603A) at the same time. It sits alongside — and does not replace — the OmniSalub Privacy Policy.

If you are a Washington or Nevada resident, this is the document written for you. Everyone else is welcome to read it; it describes what actually happens either way.

The short version

We do not collect, receive, store, share, sell or process any consumer health data. OmniSalub has no servers. What you record, and what the app imports from Apple Health with your permission, stays in the app's private storage on your own device, and — only if you allow it — in your own Apple Health account, which Apple operates and we cannot read. Ask, the app's assistant, runs on your device and sends nothing to us.

Apple's App Privacy nutrition label for this app is Data Not Collected. That matches this policy: Prameya LLC is not a recipient of your health data.

The sections below answer each disclosure the statute asks for, including the ones where the honest answer is "none". We have written those out rather than omitting them, because a missing element and a "none" element look identical to a reader and are not the same thing.

The 21 August 2026 revision retracted an earlier published table that listed thirteen categories under "consumer health data we collect". That table described what the app stores on your device, not what Prameya collects. Publishing both framings under the same statutory heading was SALUB-072. The governing answer is None.

1. Categories of consumer health data we collect, and the purpose of collection

None.

The app records and imports measurements, symptoms and settings that would be consumer health data if we received them. We do not receive them. There is no account, no server of ours, no analytics endpoint, no advertising SDK, and no code path that transmits what you record to us. The few paths that do move data off the app's own storage are described in section 8: they go to Apple Health, between your own devices through Apple's services, or wherever you choose to send an export — never to Prameya. Data written to Apple Health is written into your Apple account under Apple's terms, not ours.

Because we collect nothing, there is no collection purpose to state.

2. Categories of sources from which consumer health data is collected

None. We are not a recipient of any of the sources the app reads from (your own entries, or Apple Health with your permission).

3. Categories of consumer health data that is shared

None. We do not share, sell, rent, trade or disclose consumer health data, because we do not have any. We have never sold consumer health data and we do not intend to.

4. A list of the categories of third parties, and specific affiliates, with whom we share consumer health data

None — the list is empty.

For completeness, and because we would rather over-disclose than have you discover it elsewhere, these are the only third parties involved in the app at all, none of whom receives consumer health data from us:

• Apple Inc. — operates the App Store, Apple Health, iCloud, Handoff, the connection between iPhone and Apple Watch, and Apple Intelligence. In detail:
  • If you turn on settings sync, six non-health preferences (theme, guideline set, onboarding state, app lock, the tab you last had open, and a timestamp) are stored in your iCloud account, together with a small "where you left off" note (the tab you were on, the identifier of the Learn topic you were reading if that was the last thing you opened, and your appearance choice) that your other devices, including Apple TV, can read. Health data is never placed in iCloud; that is a fixed architectural boundary and an automated test enforces it.
  • Handoff passes the tab you are on to your own nearby devices signed in to the same Apple Account. It never carries the Learn topic you are reading, and never a reading.
  • The Apple Watch app's Ask iPhone sends the question you type to OmniSalub on your paired iPhone, and the answer — which can draw on what you have logged — comes back to the Watch, over Apple's connection between your two devices.
  • Where Apple Intelligence answers Ask, it uses Apple's on-device model. The app does not send your question or your logged data to Apple's servers or to Private Cloud Compute.
  • If you buy OmniSalub Pro, the App Store processes the purchase. That is not consumer health data (section 9).
• Hugging Face, Inc. — hosts the optional on-device language model's files. If, and only if, you choose to download the model, your device downloads those files. That request carries the model's repository identifier, the names of the files requested, standard request headers that name the app, and your IP address. It carries no health data of any kind, and we are not a party to it.

We have no affiliates.

5. Sale of consumer health data

We do not sell consumer health data, and we never have. Washington and Nevada both require a signed, specific written authorization before any sale. We have never sought one and have no plans to.

6. Geofencing

We do not use geofencing at all, anywhere. The app contains no location code. Both Washington and Nevada prohibit geofencing around healthcare facilities; we are nowhere near that line.

7. Precise location

The app never requests or uses precise location. It contains no location code at all, and an automated build check fails the project if any is added. Precise location is expressly consumer health data under the Washington statute, and we would rather the answer be structural than promised.

8. How the data is processed, stored and protected — on your device, not by us

• What the app handles on your device. The readings and symptoms you enter; the Apple Health data types you allow when you tap Connect Apple Health — by default the sheet lists the types the conditions you track use; turning on Import everything from Health in Settings widens it to every type the app can use — and the app imports the last 400 days of each of those types you allow (records of the symptom types it asks for in full), together with what Apple Health says about the app and device that recorded each reading (the full list is in section 3.1 of the OmniSalub Privacy Policy); the alerts the app raises; the conditions you choose; your visit date and visit questions; and your answer to the food-and-weight screening question. The app reads no other Apple Health type; with Import everything from Health left off it reads only your conditions' types, even where you allowed more on an earlier wider sheet. None of it reaches us.
• Where. In a database in the app's private storage on your device. On iPhone, iPad and Apple Vision Pro it is set to Data Protection "complete", so it is encrypted with a key derived from your device passcode and is unreadable while the device is locked. On a Mac it is protected by the app sandbox and by FileVault if you have FileVault on. The app connects to Apple Health only on iPhone and iPad; the Apple Watch and Apple TV apps keep no readings.
• Not in iCloud. Health data is never stored in iCloud by this app. The health database is created with iCloud syncing explicitly disabled, and an automated test blocks any health record, or any health-revealing field, from reaching the part of the app that does sync. Only six non-health preferences (theme, guideline set, onboarding state, app lock, the tab you last had open, timestamp) can sync, and only if you turn that on — it is off by default. Only while settings sync is on, the app also writes a small "where you left off" note (the tab you were on, the identifier of the Learn topic you were reading if that was the last thing you opened, your appearance choice) through Apple's iCloud key-value storage, which stores it in your iCloud account so your other devices can offer to continue — the Apple TV app shows that Learn topic, and only reads the note. It never contains a reading, we cannot read it, and turning sync off removes it.
• Handoff and Apple Watch. Handoff passes the tab you are on, described in section 4, between your own devices; the Watch app's Ask iPhone passes your question and the answer between your Watch and your iPhone. Both use Apple's services between your own devices and reach no one else.
• Backups. The health database is excluded from device backup. So is the widget's display file. Your on-device preferences are not excluded: a device backup, including iCloud Backup if you use it, includes the conditions you track, your visit date and your visit questions, under Apple's terms. The app itself never puts them in iCloud. On iPhone and iPad the app writes that file whether or not you add the widget, and by default it holds none of your information. Only if you turn on Show your visit record on the Home Screen (off by default) does it hold your visit record — the name of the measurement the app's Today screen leads with, the date of your latest reading of it (or your visit date, if there is no such reading yet), and your saved visit questions (up to three) — plus that reading if it is from today (it stays in the file until the app next rewrites the file, even after the day ends), and the name of what to log next. The widget can then show your visit record and that reading on your Home Screen, but never the name of what to log next. The file is encrypted at rest until the first time you unlock the device after a restart, rather than being re-locked whenever the screen locks, so the widget can redraw. While the device is locked (including in StandBy until you unlock it) and while the always-on display is dimmed, the widget shows only its name and a fixed line describing it, none of your information. If you add your iPhone's widgets to a Mac, the Mac shows what this widget shows on your iPhone; your iPhone passes it to the Mac through Apple.
• Ask. Ask is on by default. It gives your question and a summary of what you have logged — the names of the conditions you track, reading summaries and up to 36 readings from the last 30 days, up to 12 symptoms, and any open alert below the urgent level — to a model running on your device: Apple Intelligence's on-device model where it is ready, or the optional model you download. That context never leaves your device and is not sent to us, to Apple or to any AI provider. Crisis language never reaches a model, and while an urgent or emergency alert is open Ask shows that alert's fixed text instead of asking one. The conversation is not saved. You can turn Ask off in Settings → Assistant. Cloud and third-party inference modes are hard-wired off in this version.
• Notifications. Visit reminders are off until you turn them on. They are local notifications scheduled on your device, do not name a condition, and no notification content is transmitted anywhere.
• Retention. Your data stays until you delete it. We retain nothing, so there is no retention schedule on our side to describe.

9. Subscription tiers and consumer health data

No new collection when you subscribe

OmniSalub has a free tier and one paid upgrade, OmniSalub Pro, sold as Monthly, Annual or Lifetime; all three unlock the same Pro. Upgrading does NOT trigger new consumer health data collection.

Free and Pro:
- Process the same categories of consumer health data (section 8)
- Use consumer health data for the same purpose (operating features you choose to use)
- Store data in the same location (on your device)
- Transmit data to the same recipients (none — no health data leaves your device to us or to anyone we choose)

Pro unlocks features. It does not change what data is collected, how it is processed, or where it goes.

What changes between tiers

StoreKit data is not consumer health data

When you buy or restore Pro, Apple's StoreKit on your device completes the purchase with the App Store and, each time the app starts, tells the app which Pro products your Apple Account is entitled to. That is a payment record, not consumer health data under RCW 19.373.010.

• It does not identify your health status, condition, disease, or treatment.
• It is used only to turn the Pro features on or off.
• The app keeps no purchase record of its own and sends nothing about a purchase to us. Apple keeps the record, so "Delete everything this app stored" does not remove it.

An earlier version of this section described Plus and Premium tiers, automatic Apple Health sync, device integrations and a locally stored transaction record. None of those describes the app.

Apple separately processes your Apple Account ID and payment method when you subscribe. That processing is governed by Apple's terms, not ours.

10. How to exercise your rights

Washington residents have the rights below under RCW 19.373.040. Nevada residents have broadly parallel rights under Nevada SB 370. We honour these requests from anyone who asks, regardless of where they live.

How to make a request. Email admin@prameya.legal with "Consumer health data request" in the subject line. We do not require an account, and we will not ask you to create one.

Timing. We will respond within 45 days of receiving your request. If we need more time, we may extend once by a further 45 days, and we will tell you within the first 45 days that we are doing so and why.

Cost. Free, up to twice a year, as the law provides.

11. If we refuse — appeal, and then the regulator

If we decline to act on your request we will tell you why, and we will give you a way to appeal. Appeal by replying to our decision, or by emailing admin@prameya.legal with "Appeal" in the subject line. We will decide an appeal within 45 days of receiving it and explain the reasons in writing.

If the appeal is denied, we will provide a link or a means to submit a complaint to your state Attorney General:

• Washington: the Attorney General's office accepts consumer complaints online at atg.wa.gov/file-complaint.
• Nevada: the Attorney General's Bureau of Consumer Protection accepts complaints at ag.nv.gov.

Washington residents should also know that a violation of the My Health My Data Act is an unfair or deceptive act under the Washington Consumer Protection Act (RCW ch. 19.86), which carries a private right of action under RCW 19.86.090. Nevada's law is enforced by the Attorney General and does not provide a private right of action.

12. Changes to this policy

If we change this policy, we will update the "Last updated" date above and publish the new version at prameyallc.github.io/privacy/omnisalub/health-data.

If a change ever means we begin to collect consumer health data, we will say so in plain terms, obtain consent where the law requires it, and publish it before the version that does so is released — not after.

8 October 2026 — what changed. Our answer is unchanged: Prameya collects, shares and sells no consumer health data. This revision describes an app update:

• Section 8 says that Connect Apple Health now asks by default for the Apple Health types the conditions you track use. Import everything from Health is off unless you turn it on, and turning it on widens the sheet to every type the app can use. Before, the switch was on by default. What the app imports still stays on your device.

7 October 2026 — what changed. Our answer is unchanged: Prameya collects, shares and sells no consumer health data. This revision describes an app update to the Home Screen widget, made so that none of your information reaches the widget's file or your Home Screen unless you turn that on:

• Section 8 said the widget's display file named what to log next and, only if you turned on Show today's reading on the Home Screen, held today's latest reading. Now, by default, the file holds none of your information. The switch is now called Show your visit record on the Home Screen and is still off by default. Only while it is on does the file hold your visit record (the name and date of your latest reading of the measurement the Today screen leads with, or your visit date, and your saved visit questions), that reading if it is from today, and the name of what to log next. Only then can the widget show your visit record and that reading on your Home Screen. If you had turned the old switch on, the new one starts off; turn it on if you want your visit record on your Home Screen. Section 8 also now says that a reading from today stays in the file until the app next rewrites the file, even after the day ends; that was already so. The file still stays on your device, is excluded from backup and never goes to iCloud.
• Section 8 now says that the conditions you track, your visit date and your visit questions, which the app keeps in on-device preferences, are included in a device backup, including iCloud Backup if you use it. That was already so; the app did not change. It also says that a Mac showing your iPhone's widgets shows this widget too.

Later on 27 September 2026 — what changed. Our answer is unchanged: Prameya collects, shares and sells no consumer health data. Section 8 said Apple Health exists only on iPhone and iPad. Apple Vision Pro has Apple Health too; it is OmniSalub that connects to Apple Health only on iPhone and iPad. On a Mac or Apple Vision Pro it does not connect to Apple Health, as before.

27 September 2026 — what changed. Our answer is unchanged: Prameya collects, shares and sells no consumer health data. This revision corrects one statement:

• Section 8 said this version of the app was not signed with Apple's iCloud key-value storage capability, so the "where you left off" note did not leave the device, and section 4 did not mention the note. Since 26 September 2026 the app for iPhone, iPad, Mac and Apple Vision Pro is signed with it, so while settings sync is on Apple stores the note in your own iCloud account, where your other devices, including the Apple TV app, can read it. The note never contains a reading, we cannot read it, and turning sync off removes it.

24 September 2026 — what changed. Our answer is unchanged: Prameya collects, shares and sells no consumer health data. This revision describes an app update:

• Section 8 says that Connect Apple Health now asks for every Apple Health type the app can use, whichever conditions you track, unless you turn off Import everything from Health in Settings, which limits the request, and what the app reads, to the types your conditions use. What the app imports still stays on your device.
• Section 4 says that Handoff now passes only the tab you are on, not the Learn topic you are reading.

23 September 2026 — what changed. Our answer is unchanged: Prameya collects, shares and sells no consumer health data. This revision updates the facts behind it:

• Section 8 now lists what the app handles on your device, and says that Connect Apple Health asks only for the types the conditions you track use and imports the last 400 days of each of those types you allow (records of the symptom types it asks for in full).
• Section 8 describes Ask, which is on by default and uses Apple Intelligence's on-device model or the optional downloaded model, and what it is given; the "where you left off" note; Handoff; the Apple Watch app's Ask iPhone; visit reminders; and the widget's reading, now off by default.
• Section 4 lists Apple's services in more detail and what the Hugging Face request carries.
• Section 9 replaces a description of Plus and Premium tiers, automatic Apple Health sync, device integrations and a locally stored purchase record — none of which describes the app — with the free tier and Pro as they are.
• Section 10 describes Delete everything this app stored and what it keeps.
• The policy now covers Apple Vision Pro, Apple Watch and Apple TV.
• Later the same day, the app was fixed and this page updated to match: Connect Apple Health had been asking for every type in the app's Apple Health request, whichever conditions you chose, and now asks for and reads only those your conditions use; the "where you left off" note is written only while settings sync is on; and Delete everything this app stored now deletes your iCloud copy of your settings rather than resetting it and clears the activity log. None of this changed our answer: we still collect no consumer health data.

13. Contact

admin@prameya.legal
Prameya LLC
Postal address available on request by email.

For everything else — security, exports, deletion, children, HIPAA, and what OmniSalub is and is not — see the OmniSalub Privacy Policy. Other Prameya app policies are listed at prameyallc.github.io/privacy.