Consumer health data

Our consumer health data privacy policy, for the Sotto app for iPhone. Effective 4 October 2026.

Some US state laws, such as Washington’s My Health My Data Act, Nevada’s SB 370 and Connecticut’s data privacy law, ask apps to say plainly what health data they handle. This page does that. Our full privacy policy has the rest.

What health data the app handles

• Your breathing practice: your control pauses, your pulse, your sessions and how they went.
• Your logs: how you slept, your nose, your calm and your breathing comfort, and the medicines you choose to note.
• Your answers to the safety questions, and the result: one letter for how gently the app should guide you.
• Your notes and your questions to Ask, which may say something about your health.

Where it comes from

Only from you, as you use the app. We buy no data and get none from others.

What it’s for

To run the app for you: to keep your diary, to plan your practice within safe limits, to show your trends, and, if you use Ask, to answer your questions about your own practice.

Where it goes

• Your iPhone and your iCloud. Your diary lives there. iCloud is your own storage with Apple; we can’t read it.
• DeepSeek, only when you use Ask. After you agree in the app, each question goes with a summary of your diary through our server to DeepSeek, an AI service in China. DeepSeek gets no name, account, ID or IP address; our server checks your membership with RevenueCat first. Your answers to the safety questions and your medicines are never sent. The privacy policy lists exactly what is.
• Nowhere else. Our usage statistics carry no health data. We never sell health data and never use it for ads.

Your rights

You can see, delete and stop sharing your health data, and withdraw your consent:

• See it: Export, in the Diary or in the app’s settings, gives you all of it.
• Delete it: Delete everything, in the app’s settings, removes it from your iPhone and from your iCloud.
• Stop sharing it: turn off Ask in Settings › Ask, and nothing more goes to DeepSeek.
• Ask us: write to hello@getimaginalis.com. We answer within 45 days. If we say no, you can appeal by replying to that email, and we answer the appeal within 45 days.

If something goes wrong

If health data we’re responsible for were ever exposed, we would tell you and the US Federal Trade Commission, as its Health Breach Notification Rule asks.