We built ConvoAct with privacy at the foundation, not as an afterthought. Here's exactly how we protect your data.
Last updated: February 18, 2025
ConvoAct LLC ("ConvoAct," "we," "us," or "our") operates the ConvoAct mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
ConvoAct is built with privacy at its foundation. We believe your health data belongs to you and only you. Our architecture is designed so that we never need to access your personal health information.
We use the information we collect to:
ConvoAct uses Apple Foundation Models and on-device machine learning for task breakdown, mood analysis, and energy forecasting. All processing happens locally on Apple's Neural Engine. No personal data is sent to external AI services.
When you interact with AI coaching features that require cloud processing, your data is encrypted before transmission and processed in a way that prevents identification of individual users.
We implement robust security measures to protect your data:
Sensitive data is encrypted using military-grade AES-256-GCM encryption. Encryption keys are stored exclusively in your device's Keychain.
Data synced to the cloud is stored as encrypted blobs. Our servers cannot decrypt or read your personal data.
Encryption keys never leave your device and are protected by the iOS Keychain and Secure Enclave.
The App is fully functional offline. Data syncs only when you have an internet connection and have opted into sync.
Your data is stored in the following locations:
We do not store your health data, tasks, or personal content on our own servers.
The App integrates with the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Apple HealthKit | Reading health & wellness data | None — stays on device |
| Apple CloudKit | Optional encrypted sync | Encrypted blobs only |
| Plausible Analytics | Privacy-friendly website analytics | No personal data |
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
We may share information only in the following limited circumstances:
You have the following rights regarding your data:
Access all your data directly within the App at any time. Since data is stored on your device, you always have full access.
Delete your data at any time by removing it within the App or by deleting the App. iCloud data can be managed through your Apple ID settings.
Revoke HealthKit access at any time through Settings > Health > Data Access on your device.
Website analytics are cookie-free and don't track individuals. Use a browser ad blocker to block analytics entirely.
Opt out of non-essential communications at any time.
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. As noted above, we do not sell personal information.
To exercise your California privacy rights, please contact us at privacy@convoact.com.
If you are located outside the United States, please be aware that the App is operated from the United States. By using the App, you consent to the transfer and processing of your information in the United States in accordance with this Privacy Policy. Since your data remains on your device and in your private iCloud container, minimal data crosses international borders.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App or on our website and updating the "Last updated" date at the top of this page. Your continued use of the App after any changes constitutes acceptance of the updated Privacy Policy.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: