Privacy Policy

Your account

When you finish onboarding, Sage creates an anonymous account with Google Firebase Authentication, so you can start without an email address. It stores a random device identifier that Sage generates, plus the account type.

If you later link Sign in with Apple or Google Sign-In, Sage stores the email address and name those services share with it, so you can sign in on another device and keep your data. With Apple you can choose to hide your email.

During onboarding and in your profile you can add your age, gender, height, weight, goals, dietary pattern, allergies, foods to avoid, health conditions, activity level, medications and daily targets for sleep, steps, energy, water and weight. These are stored with your account so your scores and suggestions fit you. Every field beyond the basics is optional.

What you log

Everything you track in Sage is saved to your account in Google Cloud Firestore, so it survives a reinstall and follows you to another device:

Security rules on the database allow each account to read and write only its own records.

Apple Health

With your permission, Sage reads steps, activity rings, workouts, active energy, sleep, heart rate, heart rate variability, resting heart rate, respiratory rate, VO2 max, weight and water from Apple Health. Raw samples are read and scored on your device. What is saved to your account are the daily results listed above: steps, sleep duration, bedtime, the scores, and the HRV, resting heart rate and respiratory rate values behind them.

The only thing Sage writes to Apple Health is the water you log. It never writes any other health data.

Health data is used only to provide Sage’s features to you. It is never used for advertising, never sold and never shared with data brokers. You can turn off any category at any time in the Health app under Sharing → Apps → Sage.

The AI coach

The AI tools are part of Sage Pro, and Sage asks for your consent before the first request. Requests go from the app to our own backend, which runs on Google Cloud Run in the EU (Belgium, europe-west1) and is reached with your sign-in token. The backend sends the request to an AI model provider, OpenAI or Google Gemini, and returns the answer. The app never talks to those providers directly.

Depending on the tool, a request can include:

• Photos: a meal for Snap and log or “Should I eat this?”, a menu (with the restaurant name) for Eating out.
• Lab reports you upload, as an image or PDF, so the markers can be read out. Only the values you confirm are saved to your account; the file itself is not stored in Sage.
• Text: your question, the food or recipe you ask about, product data from a barcode, and your chat history with the coach.
• Context: your profile (age, gender, height, weight, goals, diet, allergies, health conditions, activity, medications), your supplement list and your AI profile, so the answer fits you.
• Scores, for the daily insight on the Body tab: Recovery, Sleep, Strain, Energy, Bio Age, your HRV and resting heart rate baselines, sleep and supplement adherence. This runs only if you have already given AI consent.

AI providers and retention

Photos, menus and lab reports are read by Google Gemini; text questions, recipes, the coach chat and daily insights are answered by OpenAI. Our backend does not save your requests, photos, files or the answers: they are held in memory only while the request is processed and are not written to any database, file or storage bucket. To cap costs it keeps daily and hourly counts of AI calls per feature, with no account identifier and no content, and a per-account daily counter in memory that resets every day. Like any Google Cloud service, it writes operational logs: time, endpoint, response status, duration, IP address, the app’s user-agent and error messages, never the content of your requests or your photos. Google Cloud Logging deletes these logs automatically after 30 days.

OpenAI does not use data sent through its API to train its models. It keeps API requests and responses for up to 30 days to detect abuse, then deletes them unless the law requires otherwise.

Google Gemini is used through Google’s paid Gemini API. Under Google’s terms for paid use, Google does not use prompts or responses to improve its products and logs them for a limited time only to detect misuse. Neither provider receives your name, email or Sage account identifier from us.

AI answers are for general wellness and are not medical advice.

Purchases

Sage Pro is sold through the App Store. Apple handles payment; we never see your card details. Sage uses RevenueCat to check your subscription. Once you have linked Apple or Google, RevenueCat receives your Sage account identifier so your subscription follows you; before that it uses its own anonymous identifier. Sage sends RevenueCat no email, name or health data. Your subscription status (product, purchase and expiry dates, RevenueCat identifier) is also saved to your account.

On your device

• Notifications for supplement reminders, fasting and eating windows, streaks and summaries are scheduled locally. Sage does not use push tokens or a push server.
• Widgets and the Live Activity get today’s scores, fast, supplements, water, steps and targets through an App Group on your device.
• Barcode lookups send only the barcode number to Open Food Facts to get the product details.
• Camera and photos are used only when you take or pick a meal, menu or lab report photo.
• Preferences and daily AI usage counters are kept in the app’s local storage.

Who processes data

Each processes data only to provide its part of the service, under its own terms and privacy policy.

What Sage never does

• Show ads, or share data with advertisers or data brokers.
• Sell your data.
• Use Apple Health data for anything other than your own features.
• Include analytics or tracking SDKs, or track you across other apps and websites.
• Record audio.

Access and deletion

In the app: Settings → Profile → Delete account permanently deletes your Sage account and all data linked to it: your profile, supplements, meals, coach chats, scores, lab results, water, fasting history, settings and everything else listed under What you log. It also signs you out and clears Sage’s data and notifications from your device. This cannot be undone.

By email: to get a copy of your data, or to ask about anything held outside the app, such as the backend’s operational logs, email privacy@coursion.studio from the address on your account, or include your Sage account details from Settings. We reply within 30 days.

You can also revoke Apple Health access in the Health app, camera and photo access in iOS Settings, and stop using the AI tools at any time. Deleting the app does not cancel a subscription; manage it in your Apple ID settings.

Depending on where you live, you may have rights to access, correct, delete, restrict or move your data and to object to its use, and to complain to your data protection authority. Write to us and we will help.

Security and location

Data travels over encrypted connections and is stored by Google Firebase, which encrypts it at rest. The AI backend runs in the EU; Firebase, RevenueCat and the AI providers may process data in the United States and other countries, under the safeguards in their terms. We keep your data while your account exists and delete it when you delete your account, as described above.

Children

Sage is not intended for children under 13 and we do not knowingly collect their data. If you think a child has created an account, email us and we will delete it.

This website

sage.coursion.studio is a static site. It uses no cookies, no analytics and no third-party scripts, and its fonts are served from this site. The host may keep standard server logs, such as IP addresses, for security.

Changes and contact

If this policy changes, we will update the date at the top and, for material changes, tell you in the app. Questions or requests: privacy@coursion.studio. For help with the app: support@coursion.studio.