Privacy policy
Decis processes only the information needed to provide the service and does not sell personal data.
Information we process
We process account email and sign-in information; connected health, training, nutrition, and calendar records; work-agent session information and the work records or summaries selected for sync; content and images you submit and responses; record type and source metadata needed for sync; service usage records; and subscription and billing status. If you turn on notifications, we store that device’s notification token, app language, and the content of notifications we send. Precise workout-route location from Apple Health is imported only with your explicit permission for that data type. Paddle processes payment details such as card numbers directly; Decis does not store them.
Health data (sensitive information)
Health records such as sleep, heart rate, activity, body composition, and nutrition are sensitive information under Korea's Personal Information Protection Act. Right after sign-up, or when you first connect or record health data, we tell you the purpose, the data collected, the retention period, and your right to decline, and ask for consent separately from other personal data. If you decline, you can't connect or record health data. You can withdraw your health data consent at any time. On the web, go to Settings › Privacy › Health data consent and select Withdraw; it takes no more steps than giving consent. When you withdraw, we stop collecting and using health data and promptly and permanently delete the health records we collected, analyses based on them, meal and nutrition records and photos, briefings, Ask conversations, and health data connections. Your account, calendar and work records, and billing records are kept, and you can keep using those features. If you consent again, you can reconnect or record health data. Decis is not a healthcare provider, does not process medical records, and is not a HIPAA covered entity.
Google user data
When you sign in with Google, we receive your name, email address, and profile picture from your Google account and use them only to create and authenticate your Decis account. If you connect Google Calendar or Google Health as a data source, we access only the read-only data types you approve on the Google consent screen, use them solely to provide the features described in this policy, and store them encrypted. We do not sell Google user data, use it for advertising, or transfer it except as needed to provide these features. Decis's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Decis's access at any time in Settings or at your Google Account permissions page.
How we use Google Calendar data
When you connect Google Calendar, Decis uses read-only access to retrieve your calendar list and event details returned by the Google Calendar API, which can include calendar names and identifiers; event titles, descriptions, start and end times, locations, recurrence, status and visibility; and organizer, attendee, conferencing, and attachment metadata. Decis uses this data to display your schedule, let you choose which calendars are included, classify events, compare meetings and scheduling patterns with your connected health and recovery records, and generate user-requested answers. Event data and OAuth credentials are encrypted in transit and at rest. We disclose data to service providers when needed to operate these features, and to apps you explicitly authorize to read your Decis records. Decis does not create, modify, or delete events in Google Calendar, and does not use Google Workspace data to train or improve generalized AI or machine-learning models.
AI work-agent data
Connecting a work agent syncs work times, agent type, repository and branch, task context, and outcomes. With ‘Summarize with Decis AI,’ Decis stores a distilled work record and uses Google Cloud Vertex AI to summarize it. With ‘Summarize with this agent,’ the agent installed on your device summarizes the distilled record; its provider may process it under your account and settings. In that case, Decis receives only the summary and does not send it to Vertex AI. Neither mode uploads complete source session files, raw tool output, authorization headers, or recognized secrets.
Apps you connect
If you allow an app such as ChatGPT or Claude to connect to Decis, it can read your account email and the health, nutrition, schedule, and work records it requests to answer your questions. When you allow the connection, we tell you the recipient, purpose, international transfer, and retention, and ask for your separate consent. Records sent are handled under that provider's policies and your settings. Disconnecting on the Agents page in Decis blocks further access, but records the provider already received are not deleted. The provider manages those records.
How information is used
We use attached images to answer your questions. We use information to analyze your records, provide wellness insights, organize AI work sessions in Timeline, maintain connected-data sync, send briefing notifications to devices where you turned them on, and handle account, subscription, and security issues.
Service providers
We use Supabase for authentication and databases, Vercel for hosting, and Paddle for payments. We may use AI infrastructure providers such as Google Cloud Vertex AI for answer generation, meal-photo and description nutrition estimates, calendar-event classification, and the work-record summary method you select. The iOS app asks for your permission before it first sends a question or meal for AI processing, and you can turn this off in Settings. We use Apple Push Notification service to deliver notifications. We use PostHog (United States) for troubleshooting and service quality checks. We send each provider only the information needed for its function.
International transfers
Decis's database and servers are located in Seoul, South Korea. Apps you allow to connect receive your account email and the health, nutrition, schedule, and work records they request over the network each time they ask. For ChatGPT and Codex the recipient is OpenAI OpCo, L.L.C. (United States, privacy@openai.com); for Claude and Claude Code it is Anthropic PBC (United States, privacy@anthropic.com). When you connect an app, the consent screen tells you the recipient, purpose, international transfer, and retention, and asks for your separate consent; retention follows that provider's policies. Disconnecting on the Agents page in Decis stops further transfers. To operate the service, we send information over the network to the following providers each time you use the service: usage records, error information, screen recordings with their content masked, and AI processing records without their content to PostHog Inc. (United States, privacy@posthog.com) for troubleshooting and quality checks; payment information to Paddle.com Market Limited (United Kingdom, privacy@paddle.com); notification device tokens and notification content to Apple Inc.'s Apple Push Notification service (United States, apple.com/legal/privacy/contact); and the questions, records, and photos AI features need to Google Cloud Vertex AI (processing may occur outside Korea, support.google.com/cloud/contact/dpo). Each provider uses the information only for that function, and retention follows Retention and deletion. These transfers are necessary to provide the service, so to refuse them you need to stop using the service and delete your account. If you refuse, you can't use Decis.
Service troubleshooting
We retain service usage records and related content for troubleshooting.
Deleting a connected source
Deleting a connected source removes its synced data and connection credentials from Decis. For work agents, it also stops sync and removes the corresponding sessions and summaries. Original records in connected services such as Apple Health and Google Calendar, or in local agents, are not changed.
Permanently deleting your Decis account
Permanent account deletion removes your Decis account, service data, and connection credentials. Billing records are unlinked from the deleted account internally and retained as needed for fulfillment and legal obligations. Original records in connected services are not changed.
Retention and deletion
Images attached to a conversation are deleted with that conversation. Unsent temporary attachments are cleaned up after 24 hours. We retain information while your account and connections remain active, subject to the record retention terms in our Terms of service. Records without account identifiers used to confirm completed account deletion are kept for 30 days. Apple revocation credentials not needed for a pending deletion request are kept for 7 days. Notification tokens are deleted when you sign out or when a token can no longer receive notifications. Billing records are retained as needed for fulfillment, disputes, and legal obligations. PostHog retains screen recordings used for troubleshooting and quality checks, with their content masked, for 30 days; usage records, error information, and AI processing records follow its event retention policy. Account or source deletion does not immediately delete these records; they expire under those retention periods.
Your choices
In Settings, you can stop connections, delete synced data, withdraw health data consent, and change work-agent summary methods, language, and time zone. You can turn off notifications anytime in your device’s Settings app. You can also request a copy of your records or permanently delete your account. The scope of source and account deletion is described above. Disconnecting Google Health, WHOOP, or Google Calendar keeps records already imported; deleting them is a separate request.
Users under 18
Decis is only for people 18 or older. If we learn that we have collected personal data from someone under 18, we delete it without delay.
Security
We use encryption in transit and at rest, server-only credentials, access controls, and least-privilege practices. Connection credentials for external services are stored encrypted. No system can guarantee absolute security.
Security incident notification
If we confirm unauthorized access to or use of your information, we will promptly notify affected users as required by applicable law and, where required, the connected data providers and relevant authorities.
Operator and contact
- Operator
- Tab0 Inc.
- Privacy and billing support
- support@decis.me