Privacy Policy

Last updated: February 2026

Theme Health, Inc. ("Theme Health," "we," "us") is committed to protecting your privacy. This policy describes how we collect, use, and protect your information.

1. Information We Collect

Account information: Name, email address, and condition type when you sign up.

Health data: Symptoms, energy levels, medications, triggers, and other health information you share through check-ins and profile questions. This data is provided voluntarily by you.

Device and wearable data: If you connect a wearable device such Apple Health, Oura Ring, Fitbit, we collect sleep, activity, and heart rate data with your explicit permission.

Usage data: How you interact with the app, including features used, session duration, and app performance data.

2. How We Use Your Data

To provide personalized health insights and pattern detection
To generate anonymous community patterns (never tied to your identity)
To improve our algorithms and the quality of insights
To communicate with you about your account and product updates

3. Community Patterns

Theme Health surfaces patterns from aggregated, anonymized data. We require a minimum of 50 similar patients before any pattern is shown. Your individual data is never identifiable in community insights. You can opt out of contributing to community patterns while still using personal features.

4. What We Don't Do

We don’t sell personal data.
We don’t share identifiable health data except with service providers who help us operate the service (and only under strict confidentiality).
We don’t use your health data for targeted advertising.
We never provide medical advice, diagnosis, or treatment. If you think you’re experiencing a medical emergency, call local emergency services.

5. Data Security

Your data is encrypted in transit and at rest. We use healthcare-grade security practices, including access controls, audit logging, and regular security reviews.

6. Your Rights

You can request to view, export, or delete your data at any time by emailing [email protected]. We will process deletion requests within a reasonable timeframe (typically within 30 days).

7. Data Retention

We retain your data as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated data that has already been incorporated into community patterns is retained.