Diastra

Consumer Health Data Privacy Policy

Effective 27 September 2026

The short version. On diastra.app a visitor can save their sex, their age and their maximum heart rate, and the heart rate bands drawn from them. Diastra keeps those answers only when the visitor agrees, uses them to draw the bands and to improve Diastra, and never sells them. A browser that sends Global Privacy Control never has them saved.

The Diastra app reads Apple Health data on your iPhone and keeps it there. The only health figures that leave it are worked-out figures sent to Anthropic to be written as sentences, which you can switch off.

This policy is published by Diastra LLC, 139 N Dobson Rd, Apt 404, Mesa, AZ 85201-6055, United States, under the Washington My Health My Data Act, Nevada Senate Bill 370 and the consumer health data provisions of the Connecticut Data Privacy Act. It covers consumer health data that Diastra collects through the website diastra.app and through the Diastra iPhone and Apple Watch apps. The Privacy Policy covers everything else Diastra collects, and describes the same data in its sections 4 and 16.

1. The consumer health data Diastra collects

On diastra.app, only when the visitor agrees

The answers are saved with the page, the ad or link the visit came from, the country and state, the browser type, a random visit id, PostHog's visitor id, the time, and the exact consent words shown. After a visitor agrees, the recording of their visit (Privacy Policy, section 16a) shows the bands section with these answers, and PostHog receives their sex, a ten-year age group, such as 40 to 49, and whether they typed a maximum heart rate.

In the Diastra app

The app reads Apple Health data on your iPhone, such as heart rate, resting heart rate, heart rate variability, workouts and their routes, sleep, blood oxygen, breathing rate and wrist temperature (the full list is in the Privacy Policy, section 3). It works everything out on the iPhone and keeps it there. Diastra LLC does not receive these records.

When "Write my reads with AI" is on, which it is when you install Diastra, short worked-out figures pass through Diastra's relay on their way to Anthropic, which writes them as sentences. They include minutes in each heart rate band over a week, a resting or overnight heart rate, sleep and sleep stage totals, how many times you woke, and whether the recovery check is holding work back. The relay stores none of it.

2. Why Diastra collects it

3. Where it comes from

Only from you. On the website, the visitor types or taps the answers into the bands section of diastra.app. In the app, the data comes from Apple Health on your own iPhone, and only the types you allow on Apple's permission sheet. Diastra does not buy consumer health data and does not collect it from anyone else.

4. Consent

Nothing is saved on the website without consent.

In the app, you choose what Diastra may read on Apple's permission sheet, and you can change it at any time in the Health app under Sharing. The figures sent to Anthropic stop the moment you turn off "Write my reads with AI" in Diastra, under Profile, then Data & privacy.

5. Who receives it

Diastra does not sell consumer health data and does not share it with anyone for their own use. It is handled only by service providers working on Diastra's instructions, which may not use it for themselves.

Service providerWhat it doesWhat it receives
Supabase, Inc.Runs the database where the answers are storedThe saved answers and everything saved with them
Cloudflare, Inc.Runs the website, carries the answers to the database, stores visit recordings, and runs the app's relayThe answers on their way to the database, recordings that show the bands section after a visitor agrees, and the app's worked-out figures on their way to Anthropic
PostHog, Inc.Compares how different groups use the websiteSex, a ten-year age group and whether a maximum heart rate was typed, never an exact age, heart rate or band
Anthropic PBCWrites the app's worked-out figures as sentencesThe figures listed in section 1, while "Write my reads with AI" is on
NetlifyPasses requests from app version 1.1.1 and earlier on to Diastra's relayThe same figures, on their way through

No visitor's answers are ever given to an advertising company. Diastra has no affiliates, and no affiliate receives this data. No third party collects consumer health data about a visitor over time or across different websites through diastra.app.

6. How long it is kept

7. Your rights, and how to use them

Wherever you live, you can ask Diastra

Write to support@diastra.app. The saved answers are not linked to a name or an email address, so tell Diastra the day you saved them, your state or country, and the answers you gave (your sex and age). Diastra may ask for enough detail to find your answers and to confirm the request is yours, and answers within 45 days. When a request needs more time, Diastra tells you within those 45 days and answers within 45 more.

If a request is refused, reply to that answer to appeal, and the appeal is decided within 45 days. If the appeal is refused, you may complain to your state's attorney general: in Washington at atg.wa.gov/file-complaint, in Nevada at ag.nv.gov, and in Connecticut at portal.ct.gov/ag.

To stop the website saving answers or recording visits in a browser, use the privacy choices page. To stop the app sending figures to Anthropic, turn off "Write my reads with AI". Diastra never charges more or offers less because you use these rights.

8. Security

The answers travel over an encrypted connection and are written only by Diastra's own server. The database tables that hold them cannot be read or written with the public keys that web pages use. Only Diastra's own servers and Diastra LLC, holding secret keys, can reach them.

9. Changes to this policy

If this policy changes, the date at the top changes with it, and the current version is always at this address. Diastra asks for new consent before it uses consumer health data in a way this policy does not describe.