Privacy Policy
Wellness awareness only
ONESS is not a medical device. It does not diagnose, treat, cure, or prevent any disease. The Service is intended for general wellness awareness only and is not a substitute for professional medical advice.
Beta stage — v0.3
ONESS is currently in TestFlight beta. This policy will be updated with production infrastructure details, incorporation state, and a jurisdictional clause as those firm up.
Contents
1. Who we are
ONESS is operated by Aoshi Health ("Aoshi Health", "we", "us", "our") — the legal entity form (e.g. "Aoshi Health Ltd" or "Aoshi Health Inc") will be set once incorporation is finalised. You can reach us at privacy@aoshihealth.org for any privacy question.
This policy describes how we handle data when you use the ONESS iOS application ("the App"), the ONESS web dashboard, and the ONESS API ("the Service").
2. What ONESS does
ONESS is a wellness awareness platform. It reads health-related signals from your Apple Watch and your environment, computes an "O₂ Adequacy Score" (OAS) and related awareness indicators, and shows them to you.
3. Data we read from your device
With your explicit consent through Apple's HealthKit permission sheet, the App reads these data types from Apple Health on your iPhone:
| Data type | HealthKit identifier | Why we read it |
|---|---|---|
| Oxygen saturation (SpO₂) | HKQuantityTypeIdentifierOxygenSaturation | Primary input to the OAS |
| Heart rate | HKQuantityTypeIdentifierHeartRate | Activity and stress context |
| Heart rate variability (SDNN) | HKQuantityTypeIdentifierHeartRateVariabilitySDNN | Autonomic nervous system signal |
| Respiratory rate | HKQuantityTypeIdentifierRespiratoryRate | Breathing pattern context |
| Step count | HKQuantityTypeIdentifierStepCount | Activity level over the last hour |
The App does not write any data to Apple Health.
You can revoke our access at any time in iPhone Settings → Privacy & Security → Health → ONESS.
4. Data we collect through the App
When you use the App, we process:
- Demographics you enter: age, sex, weight, height, optional body fat %, optional chronic-condition flags. Stored to compute personalised predictions.
- Sensor readings sent from your iPhone via the App to our API: the HealthKit signals listed in §3, plus environmental signals (indoor CO₂ from any connected sensor, altitude from GPS).
- Authentication tokens: a JWT minted on Apple sign-in. Stored in the iOS Keychain on your device.
- Settings: your preferred API URL, dashboard URL, alert preferences. Stored in your device's NSUserDefaults.
5. What we do NOT collect
We deliberately do not collect:
- Your name, email, address, or phone number unless you provide them voluntarily (we do not require them to use the Service).
- Precise location beyond the altitude reading you choose to send (the App does not request
NSLocationWhenInUseUsageDescription). - Advertising identifiers (
IDFA). - Device tracking signals across other apps or websites.
- Photos, contacts, calendar, microphone, camera — the App has no entitlements for these.
- Apple Health data beyond the five types in §3.
6. How we store your data
ONESS is architected to keep your data on infrastructure we control:
- During the TestFlight beta: your sensor readings and predictions are stored on the ONESS backend, routed through a Cloudflare Tunnel to a developer-managed host. Database systems (PostgreSQL, InfluxDB) run as Docker containers on that host.
- In production: data will be stored in encrypted databases on the ONESS production backend hosted in a European or Asian data centre (final region to be published before general release).
Persistence layout
| Datum | Where it lives | How it's protected |
|---|---|---|
| Demographics | SQLite on backend, keyed by user ID | At-rest encryption on the backend filesystem |
| Sensor readings | InfluxDB on backend, tagged by sha256(user_id) | We never store the plaintext user_id in the time-series store |
| Predictions | InfluxDB, same hash key | Same |
| Audit log | JSONL on backend, keyed by sha256(user_id) | Append-only; 7-year retention (regulatory) |
| Auth tokens | iOS Keychain on your device only | iOS Keychain hardware-backed encryption |
7. Data we share
Default: we share nothing with anyone. Specifically:
- We do not sell your data.
- We do not share with advertisers, data brokers, or analytics services.
- We do not integrate with social networks.
- We do not use your data to train models that affect other users (your data informs only your own predictions).
Limited exceptions:
- Apple: when you sign in with your Apple ID, Apple authenticates you. We never receive your Apple ID password. We receive only a per-user opaque identifier and (optionally) a hashed email relay. See Apple's Privacy Policy.
- Service providers we minimally engage: Cloudflare (for the tunnel that exposes the backend), and the Apple App Store / TestFlight (for app delivery and crash reporting). These parties see network traffic metadata but not the contents of your predictions.
- Legal compulsion: we will comply with lawful subpoenas or court orders. We commit to challenging requests we believe are overbroad and to notifying you when permitted by law.
8. Your rights
You can, at any time and without justification:
- See the data we have associated with your account by emailing privacy@aoshihealth.org. We will respond within 30 days.
- Export your data in a portable format (JSON).
- Delete your account and all associated data. The audit log retains cryptographic hashes (not plaintext) for the regulatory retention period.
- Withdraw HealthKit access in iPhone Settings without affecting your account.
- Object to processing of your data.
If you are in the EU/EEA, UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. We honour all of them. Contact us via the email above.
9. Children
ONESS is not intended for users under 18. We do not knowingly collect data from such users. If you believe a child has used the Service, please contact us and we will delete the data.
10. Security
We use industry-standard practices:
- In transit: TLS 1.3 for all API traffic (HTTPS).
- At rest: AES-256 for sensitive fields; full-disk encryption on backend hosts.
- Authentication: Sign in with Apple (OAuth 2.0 / OpenID Connect). No passwords stored.
- Tokens: short-lived JWTs; refresh via Apple sign-in. iOS Keychain hardware backing.
- Audit log: every prediction is recorded with a hashed user ID and a SHA-256 hash of the input. We can prove (or disprove) what the system told you, when, without re-deriving your data.
No system is perfectly secure. If we discover a breach affecting your data, we will notify you within 72 hours per GDPR norms, even if your jurisdiction does not require it.
11. Changes to this policy
We will update this policy as the Service evolves. Material changes will be communicated in-app at least 14 days before they take effect. You can review the version history at the public URL where this policy is hosted, and on GitHub at github.com/PrakashTaiwan/oness-o2-engine.
12. Contact
Privacy questions: privacy@aoshihealth.org
Company name on file: Aoshi Health
Postal address: to be published upon incorporation; email above is the primary contact during beta.
13. Jurisdiction
This policy is governed by the law of the jurisdiction of Aoshi Health's incorporation — to be set on incorporation. In the interim, disputes are handled in good faith via the contact address above.