Privacy Policy

Last updated 18 October 2026

Humo is built around a simple idea: the most personal information about you should stay on your phone. This policy explains what that means in practice, what little we do receive, and what you can do about all of it.

We have tried to write this in plain language. If anything is unclear, email privacy@humo.health and we will explain it.

1. Who is responsible for your data

Humo is operated by Max Chernousov Advisory Services (KvK 97206261), a sole trader registered in the Netherlands, trading as Humo.health. Under the GDPR we are the "controller" of the personal data described here.

Contact: privacy@humo.health

We have not appointed a Data Protection Officer. We are not required to at our current size, and we will revisit that if Humo grows materially.

2. The short version
Stays on your phone, always In the Humo app: your Apple Health data, your calendar and reminders, your answers to every check-in and reflection, and every score, trend and insight Humo calculates from them.
Reaches our servers only while you are using the web check-in The answers you give at humo.health/assessment, for the seconds it takes to score them. Nothing is written down. See section 4.5.
Reaches our servers Your login details, a record of the privacy choices you made, and any routines you write yourself.
We never do Sell your data. Share it with advertisers. Use it to train anything. Show you ads.

Humo calculates everything on your device. Your health and calendar information is not transmitted to us, so we cannot read it, cannot lose it in a breach of our systems, and cannot hand it to anyone who asks us for it.

3. What stays on your device

This information is processed entirely on your phone and is never sent to us:

  • Apple Health data — sleep, steps, active energy, stand hours, workouts, mindful minutes and your activity goals, where you have connected Health and given permission.
  • Calendar and reminders — event titles, times, and your reminder lists, where you have connected them.
  • Cycle tracking — if you turn it on, the period days in Apple Health (the ones you log and any saved by another app, with how heavy each day was), Apple Health's cycle alerts (irregular cycles, infrequent periods, prolonged periods, persistent spotting), and what Humo works out from the period days: cycle day, recent cycle and period lengths, and an estimate of when your next period may start. This is a separate choice from Apple Health, off unless you turn it on, and it is the one thing Humo writes as well as reads — see section 3.1.
  • Your check-ins and reflections — every answer you give in any questionnaire in the app, including reflections on personality, relationship patterns, and how you have been feeling about work and energy.
  • Everything Humo works out from the above — your scores, balance and burnout signals, trends over time, and the way your calendar time is categorised.

Why this matters: because we never receive it, this data is not part of any transfer to another country and is not accessible to us or to any supplier. What Humo has worked out and stored goes when you delete the app — but see section 3.1 for the things Humo puts into apps you already own, which do not.

3.1 What Humo puts into your other apps

Humo can add things to apps that are already yours:

  • Your calendar or reminders — when you schedule a practice or a task from Humo.
  • Apple Health — the period days you log, if you turn cycle tracking on. They are saved as coming from Humo, so they can be told apart from anything another app wrote.

These live in your apps, not in Humo. We never see them there.

They stay when you delete Humo. That is deliberate — they are yours, in your apps, and a calendar you kept or a health record you built should not vanish because you removed an app. But it has a consequence worth knowing: deleting Humo makes them harder to remove, because the control that removes them goes with the app. If you want them gone, do it before you delete Humo — Settings → Privacy → Cycle Tracking removes the period days Humo saved, and calendar entries can be deleted in your calendar as normal.

Removing them in the Health or Calendar app works at any time, and only ever touches what Humo put there. Entries you or another app created are never affected.

What this also means: if you lose your phone or delete the app without exporting your data first, this information is gone. We have no copy to restore.

4. What we receive, and why

4.1 Your account

What: your email address, and — if you sign in with Apple or Google — the identifier and basic profile they give us, such as a display name. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address. We keep no Apple credential: when you delete your account, we ask Apple to disconnect Humo from your Apple ID at that moment, and Apple may ask you to confirm.

Why: so you can sign in on a new phone and keep your subscription.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

4.2 Your privacy choices

What: for each category you can connect — Health, Calendar, Reminders — whether you turned it on or off, when, and which version of this notice was in effect at the time. It records the decision, never the data. No health value, calendar entry or answer is stored here.

Why: the law requires us to be able to demonstrate that you agreed before we processed anything sensitive, and to show when you changed your mind.

Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

4.3 Routines you create

What: the title, description, tags and settings of any routine or practice you write yourself, plus which ones you have marked as favourites.

Why: so your own routines follow you to a new phone or survive reinstalling the app.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

Please note: these are free-text fields. Whatever you type into a routine is stored on our servers. We do not ask you for health information there and we would rather you did not put any in, but we cannot inspect or filter what you write.

4.4 Your subscription

What: whether you have an active subscription. Our payment provider receives an anonymous identifier for your account — not your name, not your email, and none of your health or reflection data.

Why: to unlock the features you have paid for.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

4.5 The check-in on our website

Separate from the app, and the only place your answers reach us.

What we receive. The 36 answers you give, and nothing else. No name, no email, no account — you do not sign in, and we do not ask who you are.

Why. To score the check-in and show you the summary. That is the whole purpose.

Our legal basis. Your consent (Art. 6(1)(a) GDPR), and because answers about how you are coping are health data, your explicit consent (Art. 9(2)(a)) as well. You give it on the page before you start. There is no other basis we could rely on for this, and we do not try to.

Who else is involved. Vercel hosts the site and runs the scoring, so the answers pass through their servers while the page is working. To stop the check-in being abused we also count requests per network address for a short period — that address is used for nothing else and is not kept.

How long we keep it: we do not. Your answers exist in memory for the seconds it takes to score them, and are never written to a disk, a database or a log. When the response reaches your browser, there is nothing left. We do not email you the result, because that would mean keeping an address and a copy.

Withdrawing consent, honestly. You can stop at any point before you submit. Afterwards there is nothing to withdraw, because there is nothing held — closing the page is the end of it. That is also why we cannot show you a past check-in or delete one on request: no copy exists to show or delete.

Age. The web check-in is for people aged 16 and over, the same as the app.

Health information receives special protection under European law (Article 9 GDPR), and we treat your reflections and check-ins the same way even though we never receive them.

Before Humo reads anything from Apple Health, your calendar or your reminders, we ask you separately for each one, and everything starts switched off. That is your explicit consent under Article 9(2)(a), together with Article 6(1)(a).

Cycle tracking is a fourth, separate choice, and turning on Apple Health does not turn it on. It is off unless you choose it, it has its own explicit consent, and it can be turned off on its own without affecting anything else. We record that choice only on your phone — it is never sent to us, because a record on our servers saying that you track your cycle would itself be information about your health, and the safest place for it is the one place it never has to travel from.

You can change your mind at any time, for any category independently, in Settings → Privacy. Turning a category off is as easy as turning it on was, and takes effect immediately — Humo stops reading that source straight away.

Insights Humo has already worked out stay on your phone unless you delete them. If you would rather remove those too, deleting your account clears everything Humo holds on the device.

One thing it does not clear, on purpose: the entries Humo put into your calendar, reminders or Apple Health, described in section 3.1. Those are in your apps rather than in Humo, and closing an account here should not delete a health record or a calendar you keep elsewhere. Remove them first if you want them gone — in Humo, or later in the app that holds them.

Withdrawing consent does not make our earlier processing unlawful.

6. Who else is involved

We keep the list of suppliers deliberately short.

Supplier What they do What they can see
Supabase Hosts our database and sign-in Your account details, privacy choices, and any routines you wrote
Apple App Store, subscriptions, Sign in with Apple, and the Health and Calendar permissions on your phone Standard App Store and subscription information. If you use Sign in with Apple and delete your account: the one-time code Apple issues for that step, and our request to disconnect Humo from your Apple ID. Apple does not receive your Humo data from us
RevenueCat Manages subscription status An anonymous account identifier from us, plus purchase and device information Apple provides to them directly through the App Store
Resend Holds the waitlist for our website, and sends the welcome note Your email address, if you joined the waitlist. Nothing else, and nothing from the app

We use no advertising networks, no analytics services, and no crash-reporting service that receives your data.

If you joined the waitlist on our website. We keep your email address so we can tell you when Humo is available. That is the only thing we hold, we asked for nothing else, and it is not connected to any account or to anything in the app. You can ask us to delete it at any time by emailing privacy@humo.health, and we will remove it rather than merely stop writing to you. The waitlist ends when the app launches, and we delete it then.

7. Where your data is stored

Our database is hosted in the European Union, in Frankfurt, Germany.

Both suppliers are based outside the European Union, so there is a theoretical possibility that authorities in their countries could compel one of them to hand over data held for us. We manage this by:

  • keeping everything sensitive off our servers entirely — the exposure is limited to your email address, your privacy choices, and routines you wrote yourself;
  • storing data in the EU rather than moving it abroad;
  • relying on contracts with both suppliers that include the European Commission's Standard Contractual Clauses.

We assess this risk in writing and review it at least annually, or sooner if the law changes.

8. How long we keep things
On your device Until you delete it, delete your account, or remove the app
Account details Until you delete your account
Routines you created Until you delete them, or delete your account
Record of privacy choices While your account exists. Deleted with everything else when you delete your account

Deleting your account removes your data from our systems and clears the Humo data on your device — your answers, your scores, your routines, and the index of how Humo categorised your calendar. We keep nothing back. If you used Sign in with Apple, we also ask Apple to disconnect Humo from your Apple ID; if that step cannot complete, you can remove Humo yourself under Settings → Apple Account → Sign in with Apple.

9. Your rights

You have the right to access your data, receive a copy in a portable format, correct it, delete it, restrict or object to how we use it, and to withdraw consent at any time.

Two of these you can exercise yourself, immediately:

  • Get a copy of your data — Settings → Privacy → Save a Copy of My Data. Because most of your data lives on your phone, the app assembles the file locally so it contains what you actually have, not just the little we hold. The file tells you what it includes and what it does not.
  • Delete everything — Settings → Manage Account → Delete Account. This removes your account and your data from our systems and clears the Humo data on your phone. It cannot be undone.

For anything else — or if you no longer have the app installed — email privacy@humo.health. We will respond within one month. If your request is complicated we may take up to two further months, and we will tell you within the first month if so.

We do not charge for this, and we will not ask you for more identifying information than we need.

One honest limitation: we cannot give you data we never received. For everything that lives only on your phone, the in-app copy is what we can give you — and the file itself lists exactly what it contains and what it leaves out. Two things are not in it today: the detailed history of how Humo categorised your calendar, and the list of event names Humo learned from your corrections.

10. Complaints

If you think we have handled your data badly, please tell us first — we would like the chance to fix it.

You also have the right to complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live elsewhere in the EU or the UK, you can complain to your own national authority.

11. Age

Humo is intended for people aged 16 and over — both the app and the check-in on our website. The questionnaires and guidance assume an adult context of work and relationships.

We ask on the check-in page rather than verifying, and we apply the same protections to everyone regardless of the answer. Nothing is retained from a web check-in, so a person who answers untruthfully reads a page about themselves and closes it, rather than leaving data behind.

We do not knowingly collect data from anyone under 16. If you believe a child has created an account, email privacy@humo.health and we will delete it.

12. Security

Your most sensitive information never leaves your phone, which removes most of the risk outright. For the little we do hold: connections are encrypted in transit, data is encrypted at rest, and access rules mean one account cannot read another's data.

Data on your phone is protected by your device passcode and Apple's encryption. Please keep a passcode set.

If a breach occurs that is likely to put your rights at risk, we will notify the Dutch authority within 72 hours and tell you directly where required.

13. Automated decisions

Humo calculates scores and trends from what you give it, and this happens automatically on your phone. These are reflections to help you notice patterns — they are not decisions about you, and they have no legal or similarly significant effect. Nothing is decided about you by automated means in the sense of Article 22 GDPR.

Humo is not a medical device. It does not diagnose, treat, cure or prevent any condition, and it is not a substitute for professional advice. If you are worried about your health, please speak to a qualified professional.

14. Changes

If we change how we handle your data, we will update this notice and change the date at the top. If a change means we would be using your information for something new, we will ask for your consent again rather than assume the old answer still applies.

Version 1.1 — effective 18 October 2026.