Privacy Policy
Last updated 1 September 2026
Humo is built around a simple idea: the most personal information about you should stay on your phone. This policy explains what that means in practice, what little we do receive, and what you can do about all of it.
We have tried to write this in plain language. If anything is unclear, email privacy@humo.health and we will explain it.
1. Who is responsible for your data
Humo is operated by Max Chernousov Advisory Services (KvK 97206261), a sole trader registered in the Netherlands, trading as Humo.health. Under the GDPR we are the "controller" of the personal data described here.
Contact: privacy@humo.health
We have not appointed a Data Protection Officer. We are not required to at our current size, and we will revisit that if Humo grows materially.
2. The short version
| Stays on your phone, always | Your Apple Health data, your calendar and reminders, your answers to every check-in and reflection, and every score, trend and insight Humo calculates from them. |
| Reaches our servers | Your login details, a record of the privacy choices you made, and any routines you write yourself. |
| We never do | Sell your data. Share it with advertisers. Use it to train anything. Show you ads. |
Humo calculates everything on your device. Your health and calendar information is not transmitted to us, so we cannot read it, cannot lose it in a breach of our systems, and cannot hand it to anyone who asks us for it.
3. What stays on your device
This information is processed entirely on your phone and is never sent to us:
- Apple Health data — sleep, steps, active energy, stand hours, workouts and mindfulness minutes, where you have connected Health and given permission.
- Calendar and reminders — event titles, times, and your reminder lists, where you have connected them.
- Your check-ins and reflections — every answer you give in any questionnaire in the app, including reflections on personality, relationship patterns, and how you have been feeling about work and energy.
- Everything Humo works out from the above — your scores, balance and burnout signals, trends over time, and the way your calendar time is categorised.
Why this matters: because we never receive it, this data is not part of any transfer to another country, is not accessible to us or to any supplier, and disappears entirely when you delete the app.
What this also means: if you lose your phone or delete the app without exporting your data first, this information is gone. We have no copy to restore.
4. What we receive, and why
4.1 Your account
What: your email address, and — if you sign in with Apple or Google — the identifier and basic profile they give us, such as a display name. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address.
Why: so you can sign in on a new phone and keep your subscription.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
4.2 Your privacy choices
What: for each category you can connect — Health, Calendar, Reminders — whether you turned it on or off, when, and which version of this notice was in effect at the time. It records the decision, never the data. No health value, calendar entry or answer is stored here.
Why: the law requires us to be able to demonstrate that you agreed before we processed anything sensitive, and to show when you changed your mind.
Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
4.3 Routines you create
What: the title, description, tags and settings of any routine or practice you write yourself, plus which ones you have marked as favourites.
Why: so your own routines follow you to a new phone or survive reinstalling the app.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
Please note: these are free-text fields. Whatever you type into a routine is stored on our servers. We do not ask you for health information there and we would rather you did not put any in, but we cannot inspect or filter what you write.
4.4 Your subscription
What: whether you have an active subscription. Our payment provider receives an anonymous identifier for your account — not your name, not your email, and none of your health or reflection data.
Why: to unlock the features you have paid for.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
5. Sensitive data and your explicit consent
Health information receives special protection under European law (Article 9 GDPR), and we treat your reflections and check-ins the same way even though we never receive them.
Before Humo reads anything from Apple Health, your calendar or your reminders, we ask you separately for each one, and everything starts switched off. That is your explicit consent under Article 9(2)(a), together with Article 6(1)(a).
You can change your mind at any time, for any category independently, in Settings → Privacy. Turning a category off is as easy as turning it on was, and takes effect immediately — Humo stops reading that source straight away.
Insights Humo has already worked out stay on your phone unless you delete them. If you would rather remove those too, deleting your account clears everything Humo holds on the device.
Withdrawing consent does not make our earlier processing unlawful.
6. Who else is involved
We keep the list of suppliers deliberately short.
| Supplier | What they do | What they can see |
|---|---|---|
| Supabase | Hosts our database and sign-in | Your account details, privacy choices, and any routines you wrote |
| Apple | App Store, subscriptions, and the Health and Calendar permissions on your phone | Standard App Store and subscription information. Apple does not receive your Humo data from us |
| RevenueCat | Manages subscription status | An anonymous account identifier from us, plus purchase and device information Apple provides to them directly through the App Store |
We use no advertising networks, no analytics services, and no crash-reporting service that receives your data.
7. Where your data is stored
Our database is hosted in the European Union, in Frankfurt, Germany.
Both suppliers are based outside the European Union, so there is a theoretical possibility that authorities in their countries could compel one of them to hand over data held for us. We manage this by:
- keeping everything sensitive off our servers entirely — the exposure is limited to your email address, your privacy choices, and routines you wrote yourself;
- storing data in the EU rather than moving it abroad;
- relying on contracts with both suppliers that include the European Commission's Standard Contractual Clauses.
We assess this risk in writing and review it at least annually, or sooner if the law changes.
8. How long we keep things
| On your device | Until you delete it, delete your account, or remove the app |
| Account details | Until you delete your account |
| Routines you created | Until you delete them, or delete your account |
| Record of privacy choices | While your account exists. Deleted with everything else when you delete your account |
Deleting your account removes your data from our systems and clears the Humo data on your device — your answers, your scores, your routines, and the index of how Humo categorised your calendar. We keep nothing back.
9. Your rights
You have the right to access your data, receive a copy in a portable format, correct it, delete it, restrict or object to how we use it, and to withdraw consent at any time.
Two of these you can exercise yourself, immediately:
- Get a copy of your data — Settings → Privacy → Save a Copy of My Data. Because most of your data lives on your phone, the app assembles the file locally so it contains what you actually have, not just the little we hold. The file tells you what it includes and what it does not.
- Delete everything — Settings → Manage Account → Delete Account. This removes your account and your data from our systems and clears the Humo data on your phone. It cannot be undone.
For anything else — or if you no longer have the app installed — email privacy@humo.health. We will respond within one month. If your request is complicated we may take up to two further months, and we will tell you within the first month if so.
We do not charge for this, and we will not ask you for more identifying information than we need.
One honest limitation: we cannot give you data we never received. For everything that lives only on your phone, the in-app copy is what we can give you — and the file itself lists exactly what it contains and what it leaves out. Two things are not in it today: the detailed history of how Humo categorised your calendar, and the list of event names Humo learned from your corrections.
10. Complaints
If you think we have handled your data badly, please tell us first — we would like the chance to fix it.
You also have the right to complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live elsewhere in the EU or the UK, you can complain to your own national authority.
11. Age
Humo is intended for people aged 16 and over. The questionnaires and guidance assume an adult context of work and relationships.
We do not knowingly collect data from anyone under 16. If you believe a child has created an account, email privacy@humo.health and we will delete it.
12. Security
Your most sensitive information never leaves your phone, which removes most of the risk outright. For the little we do hold: connections are encrypted in transit, data is encrypted at rest, and access rules mean one account cannot read another's data.
Data on your phone is protected by your device passcode and Apple's encryption. Please keep a passcode set.
If a breach occurs that is likely to put your rights at risk, we will notify the Dutch authority within 72 hours and tell you directly where required.
13. Automated decisions
Humo calculates scores and trends from what you give it, and this happens automatically on your phone. These are reflections to help you notice patterns — they are not decisions about you, and they have no legal or similarly significant effect. Nothing is decided about you by automated means in the sense of Article 22 GDPR.
Humo is not a medical device. It does not diagnose, treat, cure or prevent any condition, and it is not a substitute for professional advice. If you are worried about your health, please speak to a qualified professional.
14. Changes
If we change how we handle your data, we will update this notice and change the date at the top. If a change means we would be using your information for something new, we will ask for your consent again rather than assume the old answer still applies.
Version 1.0 — effective 1 September 2026.