Circle Privacy Policy
Circle is a personal health companion for iPhone. Circle does not sell personal data and contains no advertising or cross-app tracking. Apple Health source records, local analysis, sleep and medication records, notification settings, and original audio are kept on your iPhone. Connected accounts synchronize text notes and completed transcripts. After explicit AI consent, OpenAI/Codex processes your prompts and relevant notes or previous conversation fragments. If you also allow Agent health access, Circle can relay selected health records and local references needed for a question from your active iPhone.
Information Circle processes
- Apple Health data. With your permission, Circle reads information such as heart rate, beat-to-beat samples, ECG, heart-rate variability, activity, and sleep to create on-device trends. Health data is not continuously backed up to Circle's server. If you enable Agent health access, the Agent can request a bounded period of original samples or an individual ECG/heartbeat recording while you chat. The phone returns timestamps, sources, units, and coverage information over HTTPS; Circle holds these records in server memory only for that answer and may send needed records or calculations to OpenAI/Codex.
- Medication, notification, and sleep information. Medication names, dosages, reminder times and choices, dose records, and sleep diary entries are stored on your iPhone. Structured medication and notification records are not sent to the Agent. With Agent health access enabled, relevant sleep diary entries and local health analysis may be requested as references. Circle schedules medication reminders through iOS. Dose history is automatically limited to the most recent 90 days.
- Health notes and voice recordings. Typed notes and completed speech transcripts are stored locally. If you connect a Circle account, those text notes and transcripts are synchronized to the server. Original recordings stay on the iPhone where they were created and are never uploaded. Transcription runs on the device when supported; when on-device recognition is unavailable, Circle does not send the recording elsewhere and transcription is unavailable.
- Health Agent conversations. Prompts, conversation history, and responses are retained on Circle's server so conversations can continue. After Circle explains the transfer and you give explicit permission, prompts, relevant text notes, and related fragments from earlier conversations are sent through Circle's server to OpenAI/Codex to generate responses. If you enable Agent health access, the Agent may also receive requested health samples, local analysis, and sleep diary references. Original audio is not included. Saved questions and responses can contain health measurements even though raw tool datasets are not saved by Circle.
- Account and connection data. Circle uses an administrator-issued username and password. The password is stored in the iOS Keychain, and server data is separated by account.
- Technical data. The server may process limited request information needed for security and troubleshooting, such as timestamps, IP addresses, and error records. Circle does not use advertising SDKs or third-party behavioral analytics.
How information is used
Circle processes information only to provide its core features: on-device health trends, medication reminders, note storage and optional synchronization, ongoing Health Agent conversations, account security, and service troubleshooting. Apple Health data is not used for advertising, marketing, user profiling, or sale to data brokers.
Storage and service providers
Raw Apple Health data, on-device analysis, medication information, notification settings, sleep diary entries, and original recordings are stored on your iPhone. Synchronized text notes, completed transcripts, and Agent conversations are stored on Circle's access-controlled server, currently hosted in Tokyo, Japan. Circle uses Apple's HealthKit permission system and on-device speech recognition. After your explicit consent, OpenAI/Codex processes the prompt, relevant text, and any authorized health records or calculations needed to answer an Agent request under OpenAI's privacy policy. Circle requires service providers that handle user data to provide the same or equivalent protection described in this policy and required by applicable rules. Server and AI processing may occur outside your country or region.
Retention and deletion
On-device information remains until you delete it in the app or system, or uninstall the app; medication dose history is automatically pruned after 90 days. Raw records requested for Agent analysis are released from Circle server memory when the question ends, is cancelled, or the connection closes; they are not written to new Pi runtime sessions. Server notes, transcripts, and conversations, including any health values stated in their text, remain until the related account is removed or you request deletion. AI provider retention is governed by its own policy and account settings. You may request access, correction, export, or deletion using the email below; we will verify the Circle username before acting. Deleting local data does not automatically delete a server copy unless the app completes a server deletion request or you contact us.
Your choices
You can withdraw Apple Health, microphone, speech recognition, and notification permissions in iOS Settings. You can turn off third-party AI processing in Circle's settings and continue to use the on-device health, sleep, medication, and local note features. Turning the AI permission off stops new Agent transfers; use the contact address below to request deletion of information already stored on the server or processed for past requests. Depending on applicable law, you may also have rights to access, correct, delete, restrict processing of, or obtain a copy of your personal data.
Security
Circle uses HTTPS for server communications, account-based access controls, and the iOS Keychain for passwords. No system can guarantee absolute security. We will take reasonable steps to address security incidents and provide notice when required by law.
Children and medical disclaimer
Circle is not directed to children under 13. Circle provides personal recordkeeping and general health information. It does not diagnose conditions and is not a substitute for a physician, pharmacist, or emergency service.
Changes and contact
If Circle's data practices materially change, this page and its date will be updated. For privacy questions or data requests, contact 0xshxyz@gmail.com.
Circle 隐私政策
Circle 不出售个人数据，不含广告或跨 App 跟踪。Apple 健康源记录、本地分析、睡眠和用药记录、通知设置以及原始录音保存在 iPhone 上。连接账号后，文字随记和完成后的语音转写会同步到 Circle 服务器。明确同意 AI 处理后，问题、相关随记和以往对话片段会交给 OpenAI/Codex；如果同时允许 Agent 读取健康记录，正在聊天的手机还可按需提供指定时段的健康原始记录及本地参考资料。
Circle 处理哪些信息
- Apple 健康数据：经你授权后，Circle 会读取心率、逐次心搏、心电图、心率变异性、活动和睡眠等数据，并在设备本地生成趋势。Circle 不会持续把全部健康数据备份到服务器。开启 Agent 健康读取后，AI 可在聊天期间请求指定时段的原始样本或某次心搏、心电图记录；手机通过 HTTPS 回传日期、来源、单位和覆盖情况。原始数据只在 Circle 服务器内存中保留到本轮问答结束，所需记录或计算结果会交给 OpenAI/Codex 处理。
- 用药、通知与睡眠信息：药物名称、剂量、提醒时间、提醒选择、服药记录和睡眠日记保存在 iPhone 上。用药与通知结构化记录不提供给 Agent。允许 Agent 健康读取后，相关睡眠日记和本地健康分析可按需作为参考回传。Circle 通过 iOS 安排用药提醒；服药历史自动只保留最近 90 天。
- 健康随记和录音：文字随记和完成后的语音转写先保存在本机；连接 Circle 账号后，这些文字内容会同步到服务器。原始录音只留在创建它的 iPhone 上，绝不会上传。转写只在设备支持本机语音识别时进行；不支持时，Circle 不会把录音改送到云端，转写功能会不可用。
- 健康 Agent 对话：提问、对话历史和回复会保存在 Circle 服务器上，以便继续对话。Circle 会先说明数据去向并取得明确同意，再把问题、相关文字随记及以往对话片段通过 Circle 服务器交给 OpenAI/Codex 生成回复。开启 Agent 健康读取后，也会按需提供健康样本、本地分析或睡眠日记。原始录音不包含在内。原始工具数据不写入新的服务器会话文件，但保存的提问与回复可能包含健康数值。
- 账号和技术信息：密码保存在 iOS 钥匙串中；服务器按账号隔离数据，并可能处理安全与故障排查所需的时间、IP 地址和错误记录。Circle 不使用广告 SDK 或第三方行为分析。
用途、存储与第三方
信息仅用于本地健康趋势、用药提醒、随记保存和可选同步、健康问答、账号安全和故障排查。Apple 健康数据不会用于广告、营销、用户画像或出售。健康数据、用药信息、通知设置、睡眠日记和原始录音保存在 iPhone 上；同步的文字随记、转写和 Agent 对话保存在目前位于日本东京的 Circle 服务器。Circle 使用 Apple HealthKit 权限系统和本机语音识别；经你明确同意后，OpenAI/Codex 会按照 OpenAI 隐私政策处理生成回答所需的问题、相关文字，以及你授权提供的健康记录或计算结果。Circle 要求处理用户数据的服务商提供与本政策及适用规则要求相同或同等的保护。服务器和 AI 处理可能发生在你所在国家或地区以外。
保留、删除与选择
设备信息会保留到你在 App 或系统中删除，或卸载 App；服药历史会在 90 天后自动清理。Agent 请求的原始记录会在本轮问答结束、取消或连接关闭后从 Circle 服务器内存释放，不写入新的 Pi 会话文件。服务器随记、转写和对话文字（包括其中提到的健康数值）会保留到账号被删除或你提出删除请求；AI 服务商的保留方式由其隐私政策和账号设置决定。你可以在 iOS 设置中撤回健康、麦克风、语音识别和通知权限，也可以在 Circle 设置中关闭第三方 AI 处理并继续使用全部本地功能。关闭 AI 权限会停止新的 Agent 数据传输；如需访问、更正、导出或删除服务器上已有的信息，请使用下方邮箱联系我们。只删除本地数据并不一定同时删除服务器副本，除非 App 已成功完成服务器删除请求或你联系我们处理。
安全、儿童与医疗说明
Circle 使用 HTTPS、账号访问控制和 iOS 钥匙串保护信息。Circle 不面向 13 岁以下儿童。Circle 只提供个人记录和一般健康信息，不进行诊断，也不能替代医生、药师或紧急医疗服务。
联系我们
如需访问、更正或删除服务器数据，或有隐私问题，请联系 0xshxyz@gmail.com。