XYNDAA

XYNDAA Privacy Policy

Draft for a pre-launch app. XYNDAA has not launched and has no users yet. This policy describes how the app is designed to handle your data. We will check it against the finished app, and update it, before XYNDAA launches.

Effective date: Not yet in effect: XYNDAA has not launched.
Last updated: 3 November 2026

1. Who we are

XYNDAA is an iPhone app and a small companion web page, operated by Lazy Objects Private Limited, a company registered in India (CIN U52601KA2021PTC156153), trading as Intentstack. Registered office: 58, Jyoti Nivas College Rd, KHB Colony, 5th Block, Koramangala, Bengaluru, Karnataka 560095, India. In this policy "XYNDAA", "we" and "us" mean Lazy Objects Private Limited.

Contact for privacy questions and requests: privacy@xyndaa.com

XYNDAA is offered only to people aged 18 or over in the United States.

2. The short version

  • XYNDAA turns your own health and activity data into scores and insights measured against your own history.
  • Your data is only ever used for you. The AI in XYNDAA sees only your data, never another user's, and another user's AI never sees yours.
  • We do not train AI models on your data, and we do not let our AI provider do so.
  • We do not sell your data, and we do not use it for advertising. XYNDAA has no advertising or tracking SDKs.
  • Cloud AI is off until you switch it on, and you can switch it off at any time. Scores and insight cards work without it.
  • Some data never leaves your iPhone: cycle tracking, mood (State of Mind), the places you visit often, and raw Apple Health samples.
  • Crews are private groups of up to 8 people. Crewmates see only what you choose to share with that crew.
  • You can export your data and delete your account in the app or on the web.

3. What we collect, by source

We collect only what a feature needs. We ask for each source separately, and you can disconnect any of them.

3.1 Your account

Data Why
Email address (stored encrypted), or your Sign in with Apple identifier (stored only as a one-way hash) To sign you in and send account emails
Display name Shown to your crewmates
Birth year and confirmation that you are 18 or over To keep XYNDAA adults-only
Time zone, units, notification settings To show data correctly and keep to your message limit
App Store purchase records (transaction IDs, product, dates; no card details: Apple handles payment) To give you the plan you paid for
Device push token and an Apple App Attest key ID To send notifications and stop abuse of free limits

3.2 Apple Health (HealthKit)

With your permission, the app reads health data from Apple Health on your iPhone. It turns the samples into per-night and per-day summaries (for example, overnight heart rate variability, resting heart rate, sleep, steps, workouts with heart-rate zones, dietary totals such as caffeine) and sends only those summaries to our servers. Raw Apple Health samples are never uploaded.

  • Stays on your iPhone, never uploaded: cycle tracking, State of Mind (mood), clusters of places you visit often, raw HealthKit samples.
  • Medications (only if you turn this category on): we store only that a medication started and the start date. We never store the medication's name or drug code. The app can show the name on your phone by reading it live from Apple Health.
  • We do not write false data to Apple Health, and we do not store Apple Health data in iCloud.
  • Deleting your XYNDAA account does not change anything in Apple Health.
  • Apple Health data is never used for advertising, marketing or data mining, by us or anyone else.

3.3 Devices and services you connect directly

You can connect accounts at other companies. You sign in with them, they give us an access token, and we read only the data listed. Tokens are kept only on our servers, encrypted, never on your phone, and are revoked when you disconnect or delete your account.

Source What we read Can it reach the AI?
Garmin Health and Activity data: sleep, heart rate, heart rate variability, stress, Body Battery, workouts with GPS. We do not request Garmin's Women's Health or Training data Only if you give Garmin-specific AI permission (see §6). Off until you do
WHOOP Recovery, strain, sleep, workouts and basic profile Only with your per-source permission. WHOOP data is kept only as long as WHOOP's terms allow (see §9)
Polar Nightly Recharge HRV, heart rate, sleep stages, workouts No. Polar data is not used by the AI at launch. If that changes, we will update this policy and ask your permission first
Oura Readiness, sleep and activity scores, for display Never. Oura's terms do not allow Oura API data to be used by AI
Fitbit / Pixel Watch (Google Health API) Sleep, heart rate, heart rate variability, skin temperature, activity Only with your per-source permission
Ultrahuman, COROS, Oura AI connector Not offered unless each company confirms in writing that our use is allowed. Glucose and other Ultrahuman M1 data are never read No, unless that company has approved it in writing

We never connect Strava. Data from other brands reaches XYNDAA only through Apple Health.

3.4 Workouts you record, and location

  • When you record a workout, the app uses GPS only while the app is in use and stores the full track encrypted. Only you see the full track.
  • If you share a workout with a crew, crewmates see a trimmed map: the part near the places you start and finish often is hidden from them, and start times are rounded to the hour. Posts appear to your crew 1 hour after the workout by default; you can change this.
  • Location is never sent to the AI.
  • We do not use background location, record the places you visit, or draw geofences around any place.

3.5 Things you tell us

Tags (for example "late meal", "travel"), corrections, experiments you run, questions you ask the AI, memories you confirm ("rest day is Sunday"), comments in crews, and reports you file. Health-related items are encrypted.

3.6 Technical data

Pseudonymous usage events that never contain health values, insight types, tags or metric names; app and OS version; Apple's MetricKit performance reports. Server logs are allow-listed and never contain request bodies, health data, AI prompts or AI answers.

4. How we use your data

  • To compute your scores, baselines and insights, measured against your own history.
  • To word insights and answer your questions with AI, if you have switched cloud AI on (§5).
  • To run crews: show what you choose to share, comments and a weekly recap.
  • To keep the service safe: rate limits, abuse prevention, moderation of reported content.
  • To send messages you have allowed, never more than your chosen limit (at most 4 a week and 1 a day, none before 6 am). Notifications never show health values or places.
  • To process purchases and refunds.

XYNDAA is a wellness app, not a medical device. It does not diagnose, treat or prevent any disease and it does not give medication advice (see the Terms of Use).

5. The AI in XYNDAA

5.1 Your AI sees only your data

  • The AI works on your data only. Each request is bound to one user; the AI has no way to look up another person. We keep no shared AI memory, embeddings or vector store across users.
  • Crew recaps are built only from what each member already shares with that crew, and every member can veto a line about themselves before the recap posts.

5.2 What is sent, and to whom

  • AI provider: Anthropic, using models running in the United States only.
  • We send summaries and computed facts (for example "average overnight HRV over 60 days"), plus your question if you are using Ask. We never send raw time series, GPS tracks or location, cycle or mood data, or data from a source whose terms forbid AI use (for example Oura's API).
  • We remove other people's names, crew names and place names from what we send. When you use Ask, the screen tells you: what you type is sent to our server and to Anthropic to answer you; don't include other people's details.
  • All numbers in an AI answer are checked against our own calculations before you see them. If the check fails, you see a plain fact card instead.

5.3 Consent

  • Cloud AI is off until you accept it on a screen that names Anthropic and the region. Declining is as easy as accepting, and everything except the AI wording keeps working.
  • For each connected source you can separately allow or block AI use. Garmin has its own AI permission (§6).
  • If you withdraw cloud-AI consent, AI calls stop within 1 minute, and memories that came from cloud AI sessions are deleted within 24 hours.

5.4 No training

We do not use your data to train, fine-tune or evaluate any AI model, and our test sets are synthetic or come from consenting staff, never from users. We have not given, and will not give, our AI provider permission to train on your data.

5.5 How long the AI provider keeps data

  • Flagged conversations. Anthropic's published data-retention terms say that if a conversation is flagged by its automated trust and safety systems, it may keep the inputs and outputs for up to 2 years, and that it may also keep data where the law requires. This applies even under a zero-data-retention arrangement. We cannot delete copies Anthropic keeps for these reasons.
  • All other conversations. We are asking Anthropic for a zero-data-retention arrangement, under which Anthropic would not keep the content of our requests after answering them. It is not in place yet. Before cloud AI is offered to anyone, we will update this section to state exactly how long Anthropic keeps requests.
  • We have asked whether flagged-content retention can be excluded or shortened for XYNDAA. If the answer changes anything above, we will update this section.

5.6 Human review (optional, off by default)

Our staff never browse your health data. A staff member sees an AI message only if (a) you report it, in which case they see that message and the facts it quoted; or (b) you have switched on "Help improve AI safety" (off by default, never asked during sign-up), in which case a small weekly sample of AI answers may be reviewed with numbers, data labels and names masked. Every staff view is logged. You can switch it off at any time; that stops future sampling.

6. Garmin: AI transparency statement

We plan to offer cloud AI as an option. If you switch it on for Garmin data, we plan to send the minimum data needed for your question to our AI provider, Anthropic, to generate the answer, for that answer only. We do not train or fine-tune any model on Garmin data, and no Garmin data is used in test sets or prompt tuning. We tell you before this happens and ask for your permission, which you can withdraw at any time in You → Health data → Garmin. Garmin data is shown to other people only if you choose to share it in a private crew of up to 8, and is labelled with its Garmin source.

7. Crews (private groups)

  • A crew has at most 8 members. You join by invitation; by default the organiser approves each join, and every join is announced to the crew. A new member cannot see what was posted before they joined for 24 hours.
  • Sharing is your choice, per crew and per item (activities; readiness band; sleep band). By default only activities are shared. Sharing consent is separate from your consent for us to process your health data.
  • Crewmates see bands and comparisons against your own baseline only, never your raw values. We never show crew averages or totals of health values.
  • Comments are visible only to that crew. You can report or block anyone; blocking works both ways.
  • Friends without an iPhone can join a crew on the web page with an email code and confirm they are 18 or over. They see the crew page only.
  • XYNDAA has no public profiles, leaderboards or discovery.

8. Who we share data with

We do not sell personal data or consumer health data, and we do not share it for advertising. We share data only:

With What Why
Your crewmates Only what you choose to share with that crew Crews
Anthropic (AI provider) Summaries, facts and your Ask questions, only with your cloud-AI consent AI features (§5)
Hosting providers: Supabase (database), Cloudflare (network, file storage), Hetzner (servers) Data they store or carry for us To run the service (§14)
An email delivery provider (we will name it here before launch) Your email address and the account message Sign-in codes and account emails
Apple Purchase verification; push notifications (no health content) Payments, notifications
The device companies you connect Token revocation when you disconnect Disconnecting
Authorities Only where the law requires it Legal obligations

If we are involved in a merger or sale, your data may transfer to the new owner under this policy. We will tell you before that happens.

9. How long we keep data

Data Kept
Your account, health summaries, workouts, insights, memories, AI messages While your account exists
Ask conversations We plan to keep them for 90 days, then turn them into a summary you can see and delete. We will confirm this before launch
WHOOP data Only as long as WHOOP's terms allow
Data from a source you disconnect We plan to delete it after 30 days, unless you choose to keep it. We will confirm this before launch
Device tokens for a source you disconnect Revoked and deleted at once
Memories you delete Removed from the AI at once; deleted within 24 hours, including from conversation summaries
Exports 7 days
Notification log; usage events 90 days; 13 months
Reports and moderation records We plan to keep them for 12 months. We will confirm this before launch
Purchase records and proof of consent Kept after account deletion in pseudonymised form. We will set this period before XYNDAA launches and update this policy
Backups Up to 35 days

10. Your choices and rights

10.1 Export

In the app or a signed-in web session, after you confirm your identity again. We email you "Your export is ready" (the email never contains a download link); you download it inside your signed-in session within 7 days.

10.2 Delete your account

In the app (You → Account) or on the web, after you confirm your identity again. When you delete:

  • Sign-in sessions end and your content is hidden at once; tokens for connected devices are revoked immediately.
  • Your data is deleted within 30 days (our target is 24 hours), including AI memory, conversations and their summaries, and your encryption key is destroyed.
  • Copies in backups are gone within 35 days; if a backup were ever restored, deletions are re-applied before it serves anyone.
  • Copies kept by the AI provider after a safety flag (§5.5) are outside our control and may be kept for up to 2 years.
  • Apple Health is not changed.

10.3 Other choices

Switch cloud AI, per-source AI, Garmin AI, crew sharing, sensitive categories and human safety review on or off at any time in the app. Withdrawing a consent stops that processing within 1 minute and does not delete your data unless you ask.

10.4 State rights

Depending on where you live, you may have rights to access, correct, delete or get a copy of your data, to withdraw consent, and to appeal our decision on a request. We give these rights to all US users. To make a request or an appeal, email privacy@xyndaa.com or use the export and delete options in the app.

11. Consumer health data (Washington and other states)

We treat all health data, including data derived from it by our algorithms, as consumer health data for every US user, and design to the strictest state health-data laws, including Washington's My Health My Data Act:

  • We collect consumer health data only with your separate consent for stated purposes (scores, insights, AI explanations); accepting the Terms does not count as that consent.
  • We share it only with your separate consent (for example with your crews, or with our AI provider when you switch cloud AI on) or with service providers that work for us.
  • We never sell it. We do not use geofencing.
  • Categories collected: §3. Purposes: §4. Who receives it: §8. How to exercise your rights: §10.

12. Security

Encryption in transit; each user's health data, tokens and tracks are encrypted with that user's own key; strict separation between users at the database level; no staff tool that shows health data except a reported message, with every view logged. If a breach affects your health data, we will notify you and regulators as the law requires. No system is perfectly secure.

To report a security problem, email security@xyndaa.com.

13. Children

XYNDAA is for adults only. You must confirm you are 18 or over before any health, location or AI feature. If we learn that an account belongs to someone under 18, we delete it.

14. Where data is processed

We are a company in India. Your data is stored and processed in the United States: our database in the US East region (Supabase), our servers in Ashburn, Virginia (Hetzner), file storage and backups in Cloudflare's US jurisdiction, and AI processing in the United States (§5.2). Staff of Lazy Objects Private Limited in India may support the service under the access limits in §5.6 and §12.

15. Changes

If we change this policy in a way that affects how we use health data, we will tell you in the app before the change takes effect and, where the law requires, ask for your consent again. We will update this policy before XYNDAA launches.

16. Contact

Lazy Objects Private Limited (Intentstack), address in §1.