Privacy Policy

Last updated: March 21, 2026

This Privacy Policy describes the personal data collected, used, and protected by Hemio ("App"). Hemio is developed by Kurtuluş Ahmet TEMEL ("we", "us").

    Summary: Hemio is a privacy-first app. Your data is stored in your Apple iCloud account — not on our servers. Report data is processed securely via AI and is never stored externally.

1. Data We Collect

Data Type	Examples	Purpose
Profile Information	Name, date of birth, biological sex	Personalized analysis
Health Context	Known conditions, medications, supplements	Contextualizing AI analysis
Blood Test Values	Numerical biomarker results	AI analysis and trend tracking
Health Data (HealthKit)	Sleep, heart rate, body measurements	Comprehensive health overview (with permission)
Usage Data	Screen views, feature usage	App improvement
Purchase Information	Subscription status	Premium feature access

2. Data We Do Not Collect

Lab report images and data are never stored on our servers. They are processed securely via AI for analysis only and are not retained after processing.
Location data is not collected.
Contacts, call history, or messages are never accessed.
Advertising identifier (IDFA) is not used.

3. How Data Is Processed

3.1 Report Processing

Hemio uses two methods to process lab reports:

On-device OCR: Apple's Vision framework extracts text from images on your device.
AI Vision Analysis: When enabled, report images may be sent securely to the Anthropic Claude API for more accurate extraction. Images are processed in real-time and are not stored by the AI service.

3.2 AI Analysis

Data sent to the Anthropic Claude API for analysis may include:

Biomarker names and numerical values
Report images (for AI Vision mode, processed in real-time, not stored)
Age and biological sex (for reference ranges)
Known health conditions (for context)

Full names or identity information are never sent to the AI service. All API communication is encrypted via HTTPS (TLS 1.2+).

3.3 Data Storage

All user data is stored in your iCloud account via Apple CloudKit. No data is held on our private servers. Your data is protected by Apple's encryption standards.

4. Third-Party Services

Service	Purpose	Data Shared
Anthropic (Claude API)	AI blood test analysis, vision-based report reading, and health guide	Biomarker values, report images (Vision mode), age, biological sex
Firebase Analytics	Anonymous usage statistics	Screen views, feature usage (anonymous)
Firebase Crashlytics	Crash reports	Crash logs (no personal data)
Firebase Remote Config	App configuration	No data shared (configuration is read-only)
RevenueCat	Subscription management	Anonymous user ID, purchase status
Apple CloudKit	Data synchronization	All app data (in the user's own iCloud account)
Apple HealthKit	Health data read/write	Only data types the user has granted permission for

5. Apple HealthKit

With your permission, Hemio can read from and write to Apple HealthKit:

Data read: Sleep analysis, heart rate, body measurements
Data written: Blood test values (Premium only, with user consent)

HealthKit data is never shared with any third party, is not used for advertising, and is processed solely for the in-app health overview.

6. Children's Privacy

Hemio is not designed for independent use by individuals under 18. Minimum age verification is performed during onboarding. Data for individuals under 18 may only be processed within a family profile created and supervised by a parent or legal guardian.

7. Data Security

Data is protected by Apple CloudKit encryption standards.
API keys are stored securely in the device Keychain.
AI API communication occurs over HTTPS (TLS 1.2+).
Report images sent for AI analysis are processed in real-time and not retained by the AI provider.

8. Your Rights

Under applicable data protection laws (including KVKK — Turkish Personal Data Protection Law No. 6698, and GDPR for EU citizens), you have the following rights:

Right of access: Learn what data is being processed
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data
Right to data portability: Request your data be provided to you
Right to object: Object to data processing

Since your data is stored in your iCloud account, you can manage it directly via Settings → Apple ID → iCloud. When you delete the app, all on-device data is removed; your iCloud data is managed according to Apple's policies.

9. Data Retention

Your data is stored in your iCloud account for as long as you use the app. When you delete the app:

On-device local data is deleted immediately.
iCloud data is subject to Apple's standard deletion policies.
Anonymous analytics data is automatically deleted after 26 months.

10. Changes

We may update this policy. You will be notified of significant changes via an in-app notification. Continued use of the app constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions:

Email: support@kurtulusahmet.com
Developer: Kurtuluş Ahmet TEMEL