Privacy policy

Last updated: 2026-10-04

The principle

Your health data stays on your phone. AlbA has no server for health data: we do not receive it, see it or sell it. No advertising, no profiling, no analytics or tracking tools.

Controller

ticinoWEB di Giovanni Frino, via Serafino Balestra 6, 6600 Locarno, Switzerland · info@ticinoweb.net. The Swiss Federal Act on Data Protection (FADP) applies and, for users in the EU/EEA, the GDPR.

What data the app processes (on your phone)

• Health data you authorise from Apple Health or Health Connect (e.g. steps, sleep, heart rate, weight, workouts).
• Profile: name, age, height, goals, conditions, medications and allergies you enter.
• Journal: mood, energy, symptoms and notes (written by you or noted by the coach at your request).
• Documents: reports, lab results and photos you add or share with the app, with the values and summary the AI reads from them.
• Conversations with the coach, and the coach's memory: short summaries of past conversations and lasting facts you told it (you can see and delete them in Settings).

They are stored in an encrypted database (SQLCipher, AES-256) on the device; the key is kept in the system's protected keychain and never leaves the phone. Automatic cloud backup of this data is disabled.

When data leaves your phone

Only in the following cases, and always directly from your phone to the service you chose (never through us):

1. Online AI (OpenAI, Anthropic, Google), only if you turn it on: with each question the app sends your message, a summary of the relevant data (e.g. sleep and step averages) and any attachments. If the coach is proactive, the same summary is also sent once a day to prepare your morning check-in. Each document you add to your health records is also sent once, so the AI can read its values and summarise it; each finished conversation is also sent once to write its summary and note lasting facts for the coach's memory; with the phone's AI the text of PDFs and photos is read on the device. The provider processes them under its own privacy policy; its servers may be located outside Switzerland and the EU (e.g. in the USA). With OpenAI we ask for conversations not to be stored (store: false). With the phone's AI (the default) nothing leaves the device.
2. Voice: transcription happens on the phone when possible; otherwise Apple's or Google's speech service is used. In the voice conversation with OpenAI, audio is streamed to OpenAI in real time.
3. Sharing and exporting that you start (e.g. opening a document in another app).

Permissions

Health, microphone, speech recognition, camera and photos are requested only when needed, and you can revoke them at any time in your phone's settings.

Retention and deletion

Data stays as long as you keep it. You can delete individual items in the app; uninstalling the app deletes the encrypted database. Data held by AI providers is subject to their retention policies.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Since the data is on your device, you can exercise most of these rights directly in the app. Questions: info@ticinoweb.net. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the authority in your country.

Children

The app is not intended for people under 16.

Changes

We will update this policy if the way data is processed changes; the date at the top shows the latest revision.