Privacy Policy
The short version
- What you log lives on your phone. There is no account and no sign-up.
- We do not keep your health data on our servers. There is no copy of it for us to read, lose, or hand over.
- It leaves your phone only for the features you switch on — and each one tells you what it sends. The two that can carry the most are generative AI and speech to text, and both are off until you turn them on.
- We never sell or share your data for advertising, and we do not measure how you use the app. If Mini stops working you can choose to send a failure report — that is off unless you turn it on, and it never includes anything you logged.
- You can delete everything, instantly, from Profile.
The rest of this page is the detail behind those five lines.
Who we are and what this covers
Mini is made by DailyQZ, LLC ("we", "us"). This policy covers the Mini mobile app for iOS and Android.
Mini helps people living with chronic conditions keep track of how they're doing and explain it to a doctor, an employer, or someone close to them. It is not a medical device, and it does not give medical advice, diagnoses, or treatment. Mini is for adults 18 and over.
What Mini keeps on your phone
Mini stores everything in a database on your device. This includes:
- Your profile — the name you give Mini, your companion device's name, and any conditions you choose to record. Recording a condition is optional and "prefer not to say" is always available.
- The questions you set up for yourself, and every answer you log — scales, choices, yes/no answers, numbers, and anything you write in your own words.
- Notes you jot down at any time.
- Your conversations with Mini, in full.
- Your schedule — reminders, check-ins, and medications.
- Reports you've generated.
- Health data you've connected — see below for which figures and from where.
Some of this is sensitive by any measure: conditions, symptoms, mood, menstrual data, and what you say in chat. We've built Mini so that this material stays where you put it.
What we don't do
- No accounts. Mini never asks for an email address, a password, or a phone number. We have no user list.
- No health data on our servers. We do not store, back up, or sync what you log.
- No selling, and no sharing for advertising. We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law. There are no ads in Mini.
- No usage analytics. We do not measure what screens you visit, what you tap, or how often you open Mini. There is no advertising SDK and no third-party tracking. The one exception is app-failure (crash) reports, which are off unless you turn them on — see App failure reporting below.
- No push notifications. Reminders are scheduled locally by your phone. Mini never registers a push token, so there is no notification identifier to link back to you.
- No training on your data. Nothing you write is used to train AI models — not by us, and not by Anthropic under the terms we use.
What leaves your phone, and when
Each of the following is something you turn on or ask for. Nothing here happens silently.
Generative AI — off unless you turn it on
Mini's chat, its trend narration, and the written summary in a report are produced by Claude, made by Anthropic. This is off by default. You choose whether to switch it on, during setup or later in Profile, and you can switch it back off at any time. With it off, no request is ever sent and the AI features are hidden.
With it on, a request carries only what's needed to answer it:
- Dated summaries of what you logged — the values, not a full export.
- Health figures you've connected, when they're relevant to what you asked.
- Your schedule for today and the week ahead — the name, time and kind of each item, and whether it's done. Not the notes on it, and not a clinician's name or a clinic's address.
- Recent messages in the current conversation.
- Text you wrote yourself — notes and write-in answers — only when the request actually calls for it, and limited in both number and length.
Requests travel over an encrypted connection to our server, which keeps no copy of them, and on to Anthropic. Our server stores nothing and writes nothing about what you asked or what came back into its logs — it records only counts and timings, like how long a request took. Anthropic processes the request to produce the reply and, under the commercial terms we use, does not use it to train their models. Their own handling is governed by their terms; see Anthropic's privacy policy.
Because reports can include figures from Apple Health or Health Connect, Mini asks you separately, the first time that would happen, before sending any of it.
Health apps you connect
You can connect Apple Health (iOS) or Health Connect (Android) and choose which figures Mini reads: steps, sleep, resting heart rate, heart-rate variability, active energy, exercise minutes, and — only if you turn them on individually — VO₂ max and menstrual flow. Your phone asks permission for each type, and you can withdraw it in your device settings. This data is read onto your phone and stays there.
If you turn on "Write to Apple Health", the symptoms and mood you log are added to Apple Health on the same phone. Mini only ever edits entries it created. This is off unless you enable it.
Fitbit
If you connect Fitbit, you sign in to Fitbit directly — we never see your Fitbit password — and Mini then reads the same daily figures from Fitbit onto your phone. The access token is held in your device's secure storage. Fitbit (owned by Google) will know that you have connected Mini and what it requested; see Fitbit's privacy policy. You can disconnect in Profile.
Feedback you send us
"Send feedback" in Profile sends what you typed, plus the app details shown on the same screen if you leave that switch on — the app version, your phone's platform, which settings are on, and how many health sources you have connected. Everything that gets sent is on screen before you send it.
Nothing you have logged travels with it — no answers, notes, conditions or health figures. That is enforced by the server, which rejects a feedback message carrying any other field rather than quietly accepting it.
We keep feedback so we can act on it, and it is linked to an anonymous identifier for your installation of the app so that two reports from the same phone can be recognised as related. It identifies no account, because Mini has none. If your message itself describes your health, that is your choice and we hold what you wrote.
Daily weather
If you add weather as a source, Mini fetches daily conditions from Open-Meteo, a free weather service. The request contains only the coordinates of the city you picked, rounded to roughly 11 km, and a range of dates. It carries nothing about you and no health data. Mini does not use your device's location — you choose a city.
Backups you make
"Back up data" builds a file containing everything you've logged, including your chat history, and hands it to your email app or your phone's share sheet. It goes wherever you send it; it does not come to us.
This file is an ordinary spreadsheet (CSV) and is not encrypted. We chose that deliberately, so the file stays readable by you and so there is no key for anyone — including us — to hold. It also means anything that can open the file can read your health data, so send it somewhere you trust and think twice before putting it on a shared computer.
Reports you share
A report is built on your phone as a PDF. Printing, sharing, or emailing it sends it to whoever you choose. Once it leaves your phone, what happens to it is between you and the person you sent it to.
Speech to text — off unless you turn it on
Speech to text is off when you install Mini, and stays off until you switch it on in Profile → Voice. With it on, tapping the microphone in Chat or Logging — or pressing the button on a Mini device and speaking to it — records your voice and turns it into text.
Where that happens depends on your phone, and the app tells you which case applies to yours before you turn the setting on:
- Phones that can transcribe offline do it on the device. The audio never leaves your phone.
- Phones that cannot use Mini's own recogniser, which also runs entirely on your phone. It is not part of the app download — it is a one-time ~57 MB file Mini fetches from our website the first time you switch speech to text on. That download sends nothing about you. It is an ordinary request for a fixed file, made to us rather than to a third party, and it carries no identifier, no health data, and nothing about what you intend to say. You can remove it from Profile at any time to reclaim the space.
- If that download fails or you decline it, Mini does not quietly fall back. It tells you, and using your phone's own speech service instead — which sends the recording to Apple on iPhone or Google on Android — is offered as a separate choice you have to make deliberately.
Recordings made by a Mini device are written to a temporary file on your phone, sent to whichever recogniser applies above, and deleted as soon as the words come back — including when the transcription fails. We never receive the audio, and we never store it.
Turning speech to text off stops all of this. A Mini device then still buzzes, lights up, shows text and reports its battery; it simply cannot turn what you say into anything, and it says so on its own screen.
Reading things aloud
Mini can read replies and reminders aloud. On iPhone this is produced entirely on your phone and nothing is sent anywhere.
On Android the words are handed to whichever text-to-speech service your phone uses — usually Google's. Some of its voices fetch the audio online, and speaking with one of those sends the text being read to Google. Mini only offers voices that work offline, so picking any voice from the list in Profile → Voice keeps the words on your phone.
The one case we cannot speak for is System default, which is your phone's own choice of voice rather than ours — Android does not tell an app which voice that resolves to. If you want certainty, choose a named voice from the list.
Calendar events
Adding a scheduled item to your phone's calendar opens your own calendar app with the details filled in, for you to confirm. Mini does not read your calendar.
App failure reporting (crash reports) — off unless you turn it on
When Mini stops working, it can send a report so we can find the fault and fix it. This is off by default. You choose whether to switch it on — it is Report app failures, in Profile — and you can switch it back off at any time. With it off, nothing is sent. Your phone may still write a report when Mini stops working — Mini deletes those, so switching reporting on later cannot send something recorded while it was off.
With it on, a crash report contains:
- Where in Mini's code the crash happened — a stack trace.
- Details of your device and the app: model, processor, memory and free disk space, operating system version, which version of Mini you're running, whether the device is jailbroken or rooted, whether Mini was in the foreground, and a few readings taken at the moment it crashed, such as screen orientation and proximity-sensor status.
- Two random identifiers for this installation, so we can tell one phone crashing ten times from ten phones crashing once. Neither carries your name, and neither is used to recognise you anywhere else.
A crash report never contains anything you logged. No symptoms, no severity ratings, no medications, no conditions or diagnoses, no notes, no figures from Apple Health or Health Connect, and no text you have written anywhere in the app.
Reports go to Firebase Crashlytics, a Google service. Google keeps them for 90 days and then begins removing them from its live and backup systems.
Switching this on does not switch on any other measurement. Mini still does not record what screens you visit or how you use it.
Checking the app is genuine
When you use the AI features, your phone attests to Apple or Google that it is running a genuine copy of Mini, and passes that attestation to our server. This is what stops strangers from running up our AI bill. It identifies the app installation, not you, and we don't store it — we hold a scrambled form of it in memory only, to count requests for the day, and it disappears when the server restarts.
Who else is involved
| Who | What they receive | Why |
|---|---|---|
| Anthropic | The content of an AI request — which can include what you logged, connected health figures, and text you wrote | To generate the reply, when you have generative AI switched on |
| Google (Firebase, Android speech services) | Hosts our AI server and this website; issues the app-genuineness check on Android. Audio recorded for speech to text only if you explicitly choose your phone's speech service over Mini's own offline recogniser | Infrastructure. Requests pass through; nothing about them is stored. Transcription only on that explicit choice |
| Apple | The app-genuineness check on iOS. Audio recorded for speech to text only if you explicitly choose your phone's speech service over Mini's own offline recogniser | Abuse prevention; transcription only on that explicit choice |
| Fitbit (Google) | Your sign-in and Mini's requests for your own Fitbit data | Only if you connect Fitbit |
| Google (Firebase Crashlytics) | Crash reports: a stack trace, details of your device and the app, and two random installation identifiers | Only if you switch on crash reports |
| Open-Meteo | City-level coordinates and a date range | Only if you add daily weather |
That is the complete list. We have no advertising partners and no data brokers. The only measurement service we use is crash reporting, and only when you switch it on.
Keeping it safe
Because your data stays on your phone, its main protection is your phone's: the device passcode or biometric lock, and the operating system's app sandbox, which stops other apps reading Mini's database. Access tokens for connected services are held in your device's secure storage. Everything Mini sends over the internet uses an encrypted connection.
Being straight about the limits: anyone who can unlock your phone can open Mini and read what's in it, and a backup file you've emailed to yourself is readable by anyone who gets hold of it. No system is perfectly secure.
Your controls
- Generative AI — Profile. Off by default; turning it off stops all requests.
- Crash reports — Profile. Off by default; turning them off stops any further report being sent.
- Connected health sources — Profile → Health data. Connect or disconnect each one, and choose which figures it reads.
- Write to Apple Health — Profile → Health data. Off by default.
- Weather — Profile → Health data. Remove the city to stop the requests.
- Reminders — Profile, and your phone's notification settings.
- Delete all data — Profile. Erases the entire database on your phone. Because we hold nothing, this is complete and immediate; there is nothing on our side to request. It cannot be undone, so back up first if you might want it later.
- Uninstalling removes the database with the app.
Your rights
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to limit how sensitive information is used. Some states also give you the right not to have your data sold or shared, and not to be discriminated against for exercising these rights.
Mini's design makes most of this immediate rather than a request you have to file: we do not hold your data, so there is nothing for us to disclose, correct, or delete on your behalf. Your copy is in the app, you can export it yourself, and "Delete all data" erases it. We do not sell or share personal information, and we do not use sensitive information for anything beyond providing the features you've turned on.
If you'd like to exercise a right, or you want confirmation in writing that we hold nothing about you, email privacy@dailyqz.com and we'll respond within the time your state's law allows. We will not ask you to create an account to make a request. If we ever have to say no, we'll tell you why, and you can appeal by replying to that message.
Washington, Nevada, and Connecticut consumer health data
Washington's My Health My Data Act, and similar rules in Nevada and Connecticut, give specific rights over consumer health data. Because those laws require it to be set out separately, it has its own page: Consumer Health Data Privacy Notice.
Adults only
Mini is for adults 18 and over, and is rated accordingly in the app stores. We do not knowingly collect personal information from anyone under 18 — and in the ordinary case we could not, since we don't collect it from anyone. If you believe a minor is using Mini and something needs our attention, write to us and we'll help.
Where data is processed
Mini is offered in the United States. When you use the AI features, requests are processed on servers in the United States.
If something goes wrong
If we ever learn that data was exposed or disclosed without authorisation, we will notify affected users and the Federal Trade Commission as the Health Breach Notification Rule requires, and any state authority that also requires it. We'll tell you what happened, what was involved, and what to do about it.
Changes to this policy
If we change how Mini handles your data, we'll update this page and change the date at the top. For anything material — a new recipient of your data, or a new category of data leaving your phone — we'll tell you in the app and ask again where your consent is what makes it lawful. We won't apply a material change retroactively to data already collected.
Contact
DailyQZ, LLC
Privacy: privacy@dailyqz.com
Anything else: support@dailyqz.com