Privacy Policy
Effective date: 2026-10-21 Last updated: 2026-10-21
Trendium LLC (“we”, “us”) runs the Cardia AI app (“the app”). This policy explains what personal data the app uses, why, who receives it, how long we keep it, and what you can do. If you do not agree with this policy, please do not use the app.
We may update this policy when the app or the law changes. The date at the top shows the latest version. The policy is always available in the app (You ▸ Settings).
1. Who can use the app
You must be at least 16 years old to use the app. Cora, the AI chat, is only for adults (18 or older). If we learn that we hold data from a child under the minimum age, we delete it.
2. Cardia AI is not a medical device
Cardia AI is a wellness app. It does not diagnose, treat or prevent any disease and does not replace a doctor. Heart rate and HRV from the camera are estimates. The app does not measure blood pressure or blood oxygen with the camera; blood pressure and blood sugar are values you type in from your own cuff or meter, or read from Apple Health.
3. What data the app uses
Data you enter or allow the app to read (health data). Readings and logs you add, such as blood pressure, blood sugar, heart checks, sleep, stress, water, caffeine, alcohol, meals, weight, medicine reminders, cycle, symptoms and other trackers; your profile (for example age, sex, height, goals). If you allow it, data you choose to read from or write to Apple Health.
Where it is kept. This health data is stored on your iPhone (and your Apple Watch if you use it). It is not sent to our server, except for the features in section 4, and only with the data listed there.
Camera. The heart check uses the camera and flash to estimate heart rate and HRV on your phone.
Photos. Food, menu and label scans, and progress photos, use photos you take or choose. Progress photos stay on your phone. Scan photos are sent only as described in section 4.
Approximate location. For pollen levels, only a rounded area (about 11 km) is sent to fetch Google’s pollen forecast. Your exact location is not sent.
App user ID. The app creates a random ID for your installation (shown as your “support ID” in Settings ▸ Your data). It is used for purchases, analytics, our server features and support requests. It is not your name or Apple ID.
Usage and device data. Which screens and features you use, app version, device type, crash reports, and, through RevenueCat and our analytics tools, your IP address.
Purchases. Your subscription status and purchase history (through Apple and RevenueCat). We never see your card details.
Messages you send us. If you email support@filard.com, we receive your email and what you write.
4. Features that send data to our server and to OpenAI
These features only send data after you agree on a consent screen in the app. You can turn them off in Settings.
Food, menu and label scan. The photo (or a menu’s text), your age, health goals, your average blood pressure from the last 14 days and your app user ID go to our server (api.filard.com), which uses OpenAI to analyse it. We keep the scan result and any feedback you give.
Cora, the AI chat (Premium, adults only). Only after you tap “Allow and start” on the “Meet Cora” screen, and only when you send a question:
- your question and the earlier messages of the same chat;
- a short summary of your own data: today’s plan steps (medicine steps only as “Medicine reminder”, with no medicine name or dose), your daily scores for the last 7 days (for example hours slept, active minutes, heart rate), and your blood pressure and blood sugar readings from the last 14 days (no camera estimates);
- your app user ID, your language and the app version.
We do not send your name, email, Apple ID, contacts, photos or location to Cora.
Our server sends the question and the summary to OpenAI, which writes the answer. Questions and answers pass an automatic safety check (OpenAI moderation). Questions about an emergency, a crisis or a reading in a crisis range are answered on your phone and are never sent. Questions about medicines, doses or a diagnosis get a fixed reply. If you report an answer, we review it.
We keep your Cora questions, Cora’s answers and the data summary for 90 days, then delete them automatically. You can delete them sooner: “Delete my chats” in Cora’s menu, or “Delete all my data” in Settings.
AI providers. To analyze scans and write Cora’s answers, our server uses OpenAI. The provider in use processes the data only for us, as a service provider, under its business (API) terms.
5. What we use data for
- To provide the app’s features: tracking, charts, plans, reminders, scans and Cora.
- To process and restore purchases.
- To answer your support requests.
- To keep the app working and safe: crash reports, fraud prevention, and the safety checks on scans and Cora.
- To improve the app, with usage analytics.
- To measure which ads bring people to the app (only if you allow tracking; see section 7).
- To meet legal obligations.
We never use your health data, scan data or Cora chats for advertising or marketing, and we never sell your data.
6. Who receives data
| Who | What for | What they get |
|---|---|---|
| Apple | App Store, purchases, Apple Health, iCloud backups of your phone | as Apple’s own policy describes |
| RevenueCat | subscriptions | app user ID, purchase history, IP address |
| OpenAI | food scan and Cora answers (section 4) | the data listed in section 4 |
| Google (Firebase Analytics, Crashlytics, Remote Config, Dynamic Links) | analytics, crash reports, app settings, links | usage events, crash data, device data |
| Google (pollen forecast) | pollen levels | a rounded area of about 11 km |
| Amplitude | product analytics | app user ID, usage events |
| OneSignal | notifications and in-app messages | app user ID, device push token |
| AppsFlyer, Meta (Facebook SDK) | measuring which ads lead to installs and purchases | install, onboarding, paywall and purchase events; no health data |
| Authorities, lawyers | when the law requires it, or to defend legal claims | what the request requires |
Some of these companies are outside your country, for example in the United States. Where the law requires it, transfers are protected by safeguards such as the EU Standard Contractual Clauses.
7. Tracking and ads
The app asks for your permission (App Tracking Transparency) before it shares data for ad measurement. If you allow it, AppsFlyer and Meta receive install, onboarding, paywall and purchase events so we can see which ads work. Health readings, health-related events, scan data and Cora chats are never sent to these ad tools. If you do not allow tracking, the app still works the same way. You can change this any time in iPhone Settings ▸ Privacy & Security ▸ Tracking.
8. How long we keep data
- On your phone: until you delete it, delete the app, or use “Delete all my data”.
- Cora chats on our server: 90 days, then deleted automatically.
- Food scan records and feedback on our server: 90 days.
- Analytics and crash data: as set by each provider
- Purchase records: as long as the law requires.
9. Your choices and rights
- Export: Settings ▸ Your data ▸ export gives you a copy of what Cardia keeps on your phone.
- Delete: Settings ▸ Your data ▸ “Delete all my data” deletes everything on your phone and your Cora chats on our server. Data Cardia wrote to Apple Health stays there; remove it in the Health app.
- Server copies: to delete food-scan records, feedback and analytics copies, use “Ask to delete server copies” on that screen, or email support@filard.com with your support ID.
- Cora: “Delete my chats” and “Turn off Cora” in Cora’s menu.
- Scans: turn AI analysis of food scans off in Settings.
- Apple Health: change access in the Health app ▸ Sharing ▸ Apps.
- Notifications and tracking: in iPhone Settings.
You can also ask us to access, correct or delete your data, or to stop or limit its use, by emailing support@filard.com. We answer within one month. If a request is complex, we may need up to two more months and will tell you why. You can also complain to your local data protection authority.
10. Legal basis (EEA and UK users)
- Consent: health data, food scans, Cora, tracking for ads, notifications. You can withdraw consent at any time; this does not affect what happened before.
- Contract: providing the app and your subscription.
- Legitimate interests: keeping the app secure and working, crash reports, improving the app with analytics.
- Legal obligation: tax, accounting and requests from authorities.
11. Security
Data is sent over encrypted connections (HTTPS). Data on your phone is protected by iOS. Access to our server is limited. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
12. Contact
Trendium LLC
Email: support@filard.com