Legal
Privacy Policy
Version: October 19, 2026
At a glance
- Finn is an adult consumer wellness service, not a medical provider or emergency service.
- Finn does not sell personal or consumer health data, use it for advertising, or train its own AI models with it.
- Finn sends coaching data to its selected AI provider—OpenAI, Google Gemini, or Anthropic—only after you give explicit permission. Apple Health summaries require a separate permission.
- You can withdraw health/AI coaching permission separately from Terms acceptance and privacy acknowledgment. Withdrawal blocks future AI-backed coaching and may sign you out, depending on your app version. In-app account controls after withdrawal depend on that version. If a control is unavailable, contact support for account or privacy assistance. Legal documents remain on this website; manage Apple subscriptions through your Apple Account. Apple Health import and Apple Health AI use have separate controls.
1. Scope and who we are
This Privacy Policy explains how Ellison Software LLC, doing business as Finn ("Finn," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information when you use the Finn iOS application, coachfinn.com, or support services (collectively, the "Services"). It also covers any retained information previously submitted through the former website waitlist. Ellison Software LLC determines the purposes and means of processing described here.
Our separate Consumer Health Data Privacy Notice provides additional disclosures and rights for consumer health data. It supplements this Policy and controls if the two conflict regarding consumer health data.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account and contact | Name, email address, account identifiers, authentication status, support communications, and any retained submissions to the former website waitlist. | You; our identity provider. |
| Profile, health, fitness, and nutrition | Height, weight, goals, schedule, training experience, workouts, mobility activity, soreness, injuries or limitations, sleep, dietary preferences, food intake, and nutrition goals. | You; Apple Health when you connect it. |
| Apple Health summaries | Daily summaries of sleep duration, resting heart rate, heart-rate variability (SDNN), respiratory rate, steps, exercise minutes, and active energy, plus workout type, timing, duration, and available workout measurements. | Apple Health, with your HealthKit permission. |
| User content and coaching records | Chat messages, onboarding answers, generated plans, recipes, workout and mobility logs, preferences, and feedback. | You; generated from your requests and data. |
| Purchase information | Product, entitlement, transaction identifier, purchase, renewal, expiration, and subscription status. We do not receive payment-card details. | Apple and RevenueCat. |
| Technical and usage | IP address, app and browser version, device and operating-system information, request time, security events, and diagnostic data. | Automatically from your device, app, browser, and servers. |
Free-form fields can contain information you choose to provide. Please do not submit information about another person unless you are authorized to do so. Finn does not use third-party advertising SDKs or engage in cross-app tracking.
3. How we use information
- Provide, personalize, and adapt workouts, mobility sessions, nutrition content, recipes, schedules, and coaching responses.
- Display and synchronize your history, progress, subscription access, and connected-health summaries.
- Authenticate users, maintain accounts, respond to support requests, and send service communications.
- Operate, secure, troubleshoot, test, and improve Service functionality and safety.
- Enforce our Terms, prevent fraud or abuse, comply with law, and establish or defend legal claims.
Finn does not use personal, chat, fitness, nutrition, or health information to train its own AI models. AI providers process the information needed for your request under their applicable service terms and data controls, including processing for security and legal obligations.
4. Apple Health and HealthKit
- Finn requests read access only to the specific HealthKit types listed in Section 2. You choose each permission in Apple Health and can change it in iOS Settings or the Health app.
- Raw HealthKit samples remain on your device. Finn normalizes them on-device and uploads the daily and workout summaries described above.
- HealthKit permission, Finn's Apple Health connection, and permission to use imported summaries with Finn's selected AI provider are separate choices.
- Finn does not use HealthKit data for advertising, marketing, eligibility decisions, or unrelated data mining; sell it; disclose it to data brokers; or store it in iCloud.
- Disconnecting Apple Health stops future imports and disables its AI-use permission. It does not by itself delete previously imported summaries; use the in-app delete control or contact us to delete them.
5. AI providers and explicit permission
Finn currently uses Google Gemini API for requested coaching responses and plans. The application also supports OpenAI API and Anthropic Claude API as alternatives. Before Finn sends personal information, the app describes the possible providers, data and purposes and asks for your explicit permission. Only the provider selected for a request receives the information used for that request.
- Data sent: chat and onboarding content; relevant goals, schedule, injuries or limitations, nutrition preferences, plan and workout history; and Apple Health summaries only if you separately enable Apple Health AI use.
- Purpose: generate the response, plan, workout, mobility, recipe, or nutrition content you request and operate service safety and security.
- Not sent: Auth0 passwords, payment-card information, or raw HealthKit samples.
- Provider data controls: Google's paid-API terms describe processing to provide the requested service without using prompts and responses for product improvement. Provider security, abuse-prevention and legal processing can involve retention. Request logging and optional data contribution are separate settings, and a request can override project storage defaults. See the Gemini API terms and Google's logging and sharing information. A general project-log window is not a promise about every provider copy.
- Alternative providers: if OpenAI or Anthropic is selected, its applicable API terms and data controls govern its processing. See OpenAI's data-use information and Anthropic's commercial data-use information. Provider processing may include limited security or legally required retention.
- Your choice: where available in your app version, withdraw under Profile → AI Data Sharing. If the control is unavailable, contact support for assistance with withdrawing consent. Withdrawal stops future AI processing and blocks AI-backed coaching until you grant permission again; it does not recall data already processed.
6. When we disclose information
We disclose only what is reasonably necessary for the following recipients and purposes:
- OpenAI: AI processing described in Section 5 when OpenAI is the selected provider, after explicit permission.
- Google Gemini API: AI processing described in Section 5 when Gemini is the selected provider, after explicit permission.
- Anthropic: AI processing described in Section 5 when Claude is the selected provider, after explicit permission.
- Auth0 by Okta: account authentication, identity, and security.
- RevenueCat, Inc.: purchase validation and subscription entitlements. See RevenueCat's privacy information.
- Apple: App Store purchases and the HealthKit permissions and data flows you control through Apple's services.
- Render Services, Inc.: hosts and operates the API, background processing, PostgreSQL database and Valkey cache in Oregon, USA. The static website is delivered globally through Render.
- Legal, safety, and business events: when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or evaluate a merger, financing, acquisition, or sale, subject to appropriate confidentiality and notice where required.
We require every third party with whom we share personal information to process it only for authorized purposes and to provide the same or equal protection of user data as stated in this Policy and required by Apple's App Review Guidelines. We do not sell personal information or consumer health data, share it for cross-context behavioral advertising, or disclose HealthKit data for advertising or marketing.
7. Retention and deletion
| Data | Retention approach |
|---|---|
| Imported Apple Health observations, workout summaries, and value-free sync audit records | Kept for connected-health and coaching functions. Request deletion through available app controls or our privacy contact. Do not rely on automatic erasure after a fixed number of days; see below. |
| Account, profile, plans, logs, and chats | While your account is active and as needed to provide the Services, unless you delete them sooner. |
| Former website waitlist submissions (if retained) and support records | Until the request is resolved, you ask us to delete them, or they are no longer reasonably needed. |
| Purchase, security, and legal records | As needed for transaction records, fraud prevention, disputes, and legal obligations. |
Imported health observations, workout summaries and value-free sync audit records remain stored for your connected-health and coaching functions. To have them removed, use the controls available in your app version or contact us. Do not rely on a fixed automatic expiry for these imported records.
You can request deletion of covered information from active systems, subject to limited retention needed for security, fraud prevention, transaction records, legal compliance or legal claims. Provider processing or technical failures can delay completion; a request alone does not confirm that all copies have been erased. If deletion fails or you need its status, contact us from your account email address. The production Render database can recover earlier database states from the preceding seven days, including a state from before deletion. This is not a maximum retention period for every provider record or other copy, and it is not a promise of completed erasure.
8. Your choices and privacy rights
Depending on where you live, you may have the right to:
- know, access, and receive a portable copy of personal information;
- correct inaccurate personal information;
- delete personal information, subject to lawful exceptions;
- withdraw consent for future processing or sharing;
- confirm whether consumer health data is shared and obtain a list of recipients; and
- appeal a denial of a privacy request and not receive discriminatory treatment for exercising a right.
Where available in your app version, use Profile → AI Data Sharing for AI-provider permission or Profile → Apple Health for health permissions and imported-data controls. If a control is unavailable or you need assistance, email coachfinntech@gmail.com. State the right you want to exercise and the email associated with your account. We may verify your identity and authority before acting. We will respond and provide any appeal instructions within the period required by applicable law.
In app versions that provide this control, use Profile → Delete Account to request account deletion. If the control is unavailable or deletion fails, email us from the address associated with your account for assistance. Provider processing or technical failures can delay completion, as described in section 7. A plan or data reset is different from account deletion. Deleting the app or your Finn account does not cancel an Apple subscription; manage it in your Apple Account settings.
You can also change HealthKit permissions in iOS Settings or the Apple Health app and manage App Store subscriptions in your Apple Account. Deleting Finn does not cancel an Apple subscription.
9. Security and incident notice
We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including access controls, encrypted transport, and separation of permissioned data flows. No system is completely secure. If an incident triggers a notification duty under applicable law, including an applicable health-breach notification rule, we will provide the required notices.
10. Consumer wellness service; not HIPAA care
Finn is a direct-to-consumer wellness service, not a healthcare provider, health plan, medical record system, or emergency service. The Services are not intended to create a clinician-patient relationship or serve as a HIPAA-covered healthcare service. We treat health-related information as sensitive regardless of whether HIPAA applies.
11. International processing
Finn is operated from the United States. The Render API, background worker, database and cache are in Oregon, USA; the website is delivered globally. AI, identity and subscription providers may process information in other countries where they or their subprocessors operate, which may have different data-protection laws. Contact us for information about recipients, the grounds for international transfers and available safeguards.
12. Adults only
The Services are intended only for people age 18 or older. We do not knowingly collect personal information from anyone under 18. Contact us if you believe a minor has provided information, and we will investigate and delete it as appropriate.
13. Changes to this Policy
We may update this Policy as the Services or law changes. We will post the revised version and update the date above. If a change materially expands how we collect, use, or disclose sensitive or consumer health data, we will provide additional notice and obtain consent when required before applying the new practice.
14. Contact
Questions, complaints, privacy requests, and appeals may be sent to coachfinntech@gmail.com or mailed to Ellison Software LLC, 1302 Bonnie Brae Street, Hermosa Beach, CA 90254. Please do not include detailed health information in an unencrypted email.