Phenometrics is operated by Shelton Performance LLC (doing business as Phenometrics) ("Phenometrics," "we," "us"). This policy describes what we collect, why, and the choices you have. It applies to phenometrics.app, app.phenometrics.app, and related services (together, the "Service").
Phenometrics is a health and performance platform. We treat your health information as the most sensitive category of data we hold, and this policy is written to be read — not skimmed past.
You may choose to connect third-party health accounts. If you do, we receive the data you authorize on the provider's consent screen, which may include heart rate, sleep, activity, recovery, body composition, and related metrics from:
You can disconnect any provider at any time in the app, which stops all further collection from that provider. Deleting your account removes the stored tokens that make collection possible.
We do not use third-party advertising trackers on the Service.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Some features use large-language-model providers to generate summaries, insights, and coaching support. Before health information is sent to an AI provider, we de-identify it: names, email addresses, phone numbers, and dates of birth are replaced with neutral placeholders, and the response is re-identified only inside our systems. AI providers we use are contractually restricted from using this data to train their models under the API terms we operate on.
We share personal information only with:
Health records stored by the Service are encrypted at rest (AES-256) and in transit (TLS). Access is limited by role, and administrative access to health records is logged in a tamper-evident audit trail. No system is perfectly secure, but we build as if your data were our own — because ours is in here too.
We keep your information while your account is active. You may request deletion of your account and associated personal information at any time by emailing jeremy@phenometrics.app; we will delete it within 30 days except where a longer period is required by law (for example, audit records) or for de-identified data that no longer identifies you.
California residents: under the CCPA/CPRA you have the rights to know, access, correct, delete, and to be free from discrimination for exercising them. We do not sell or "share" personal information as those terms are defined in the CCPA. To exercise any right, email jeremy@phenometrics.app. We will verify your request via your account email.
Phenometrics is not a healthcare provider. Where we handle health information on behalf of a healthcare provider under a Business Associate Agreement, we comply with the obligations that agreement and HIPAA impose on us. For consumer health data outside HIPAA, we honor the FTC Health Breach Notification Rule: if a breach of identifiable health data occurs, we will notify you and, where required, the FTC.
The Service is intended for adults 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
If we make material changes, we will notify you by email or an in-app notice before they take effect. The effective date at the top always reflects the current version.
Shelton Performance LLC (dba Phenometrics)
Email: jeremy@phenometrics.app