Last updated 17 October 2026
Cevren Health LLC (“Cevren,” “we,” “us,” or “our”) provides the Cevren mobile application and related services. This Privacy Policy explains what information we collect, how we use it, when we disclose it, how long we keep it, and the choices available to you.
Cevren is designed to help you organize and understand information you choose to track, including protocols, daily observations, laboratory results, and health and fitness information. Some of that information can be sensitive. We have designed Cevren so that certain information remains on your device, while other information is stored or processed by our service providers only when needed to provide the features you choose to use.
If you are a Washington resident, or Washington law otherwise applies to your consumer health data, please also review our Consumer Health Data Privacy Policy, which provides additional disclosures and rights under Washington’s My Health My Data Act.
The information Cevren collects depends on the features you choose to use.
When you create an account using Sign in with Apple, we receive the information Apple makes available based on your choices, such as an account identifier and, if you choose to share them, your name and email address.
We use this information to create and maintain your account, authenticate you, communicate with you, and operate the Service.
Cevren allows you to enter information relating to the protocols and information you choose to track. This may include the names of supplements, medications, peptides, hormones, or other substances; amounts and units; schedules and timing; protocol start dates; and records of whether you took an item on a particular day.
You may also enter daily observations such as energy, mood, sleep quality, recovery, and free-text notes. If you use the menstrual-cycle feature, you may enter menstrual-cycle information.
This information is used to provide the tracking, history, scoring, trend, and analysis features you choose to use.
During onboarding, you may optionally identify your sex as female, male, or other. You can edit this information later through your Profile or Settings.
Your selected sex is stored on your device only. Cevren’s server does not maintain a database field containing this information.
If you use AI Insights, your selected sex may be included in the information transmitted as part of that particular AI Insights request because it can provide context for the analysis. Cevren does not retain a separate server-side copy of your selected sex after the request is processed.
You may enter laboratory values manually or upload a photograph or PDF of a laboratory report.
When you upload a laboratory report, the entire document is transmitted to our AI provider, Anthropic PBC (“Anthropic”), so that laboratory information can be extracted. Laboratory documents commonly contain identifying information such as your name, date of birth, healthcare provider information, or other information appearing on the report. The disclosure shown before your first laboratory-document upload explains this processing.
The uploaded document is processed in memory for the request. Cevren does not save a copy of the original laboratory file to its database or file storage. We store the laboratory information you choose to retain after extraction, such as laboratory markers, values, units, reference ranges, and associated dates.
You should review extracted information against the original laboratory report before saving or relying on it. Automated extraction can make mistakes.
If you choose to permit access, Cevren can read laboratory results that you have connected to the Health app on your iPhone, including results made available through connected healthcare or laboratory sources. We don’t request diagnoses, conditions, procedures or any other clinical records, even where your provider makes them available. Conditions and procedures are only ever things you choose to type in yourself.
Cevren requests access only to Lab Results through the Apple Health Records permission flow. For those results, Cevren reads laboratory information such as the test or marker name, value, unit, reference range, and date. Cevren does not request access through this feature to other categories of clinical records, and Cevren does not write information to your Apple Health records.
Laboratory results you import from Apple Health Records are stored with your other laboratory data and are subject to the same retention and deletion practices.
Importing a laboratory result from Apple Health Records does not, by itself, send the underlying Health Records data to Anthropic. Apple provides the laboratory observations to Cevren in structured form. If you later separately request an AI Insights analysis, laboratory markers included in the context for that analysis may be transmitted to Anthropic as described in Section 3.
You control access to Apple Health Records through Apple’s Health permissions. Revoking access stops Cevren from reading additional information through that permission but does not automatically delete laboratory information you previously imported into Cevren. You can delete previously imported information through Cevren as described below.
If you choose to connect Apple Health, Cevren may read categories of fitness and wellness information for which you grant permission, including sleep duration and stages, heart rate variability, resting heart rate, steps, active energy, exercise minutes, blood oxygen saturation, blood pressure, body weight, body fat percentage, lean body mass, and waist measurement.
These ordinary Apple Health fitness and wellness metrics are read from Apple Health on your device for Cevren’s scoring, trend, and related features. Cevren does not persistently store these ordinary Apple Health metrics in its server database.
If you separately request AI Insights, relevant recent Apple Health metrics may be included in that AI request as described below.
This treatment of ordinary Apple Health fitness and wellness metrics is different from Apple Health Records laboratory results, which you may choose to import and store with your laboratory history as described in Section 1.5.
Cevren writes to Apple Health in one situation only: when you type a blood pressure or body weight reading into Cevren and choose “Save to Apple Health.” This is optional and requires a separate iOS write permission covering only those two data types, which Cevren requests the first time you use the feature and which you can decline or revoke at any time in the Health app. Saved readings are marked as user-entered. Cevren does not write any other information to Apple Health, writes nothing in the background, and never writes to your Apple Health Records.
If you type a weight or blood pressure and Apple Health isn’t available, or you haven’t allowed Cevren to write to it, the reading is stored only on your device. Cevren uses it in the same places as a reading from Apple Health; a reading from Apple Health for the same day takes priority.
Cevren may allow you to photograph a Supplement Facts panel so that information from the label can be extracted.
When you use this feature, the photograph is transmitted to Anthropic for processing. The image may contain information other than the label itself, including objects or surroundings that appear within the frame. Whatever appears in the photograph may therefore be processed as part of the request.
Cevren does not retain the original label photograph after the request. We retain the extracted information you choose to use or save through Cevren.
Automated label extraction can make mistakes, and the underlying manufacturer's label may itself be inaccurate or outdated. You should verify extracted information against the product in your possession.
Cevren generates information from data you provide or make available, including scores, trends, summaries, and, when you request them or turn on automatic weekly reports, AI-generated narrative analyses.
These outputs may reflect or reveal information about your health, habits, protocols, or other sensitive information. We treat them accordingly.
If you record them, your health conditions, your year of birth (year only), and an upcoming procedure with its date. All are optional. They are stored only on your device. They are used to give context to your AI analyses, and they are sent to Anthropic whenever you request an AI analysis. We never use them to recommend anything.
If you choose to connect an Oura ring, Cevren reads each night's sleep (duration, stages, efficiency, and bedtime and wake time), heart rate variability, lowest heart rate, Oura's readiness score, and the night's temperature change from your own baseline. That information comes to your device and is kept there; it is not stored on Cevren's servers. On our servers we keep only what is needed to stay connected: your encrypted Oura login, when it expires, and which permissions you granted. Disconnecting Oura, or deleting your account, deletes those and revokes Cevren's access at Oura.
Oura information is shown to you in Cevren but is not sent to our AI provider. If you have allowed Oura's own app to write data to Apple Health, Cevren treats that data like any other Apple Health data, and it may be included in AI Insights requests as described in Section 3.
We keep a record of each AI request you make, including when it was made and what kind of request it was, together with any rating you give an answer (for example, "Did this help?") and any answers you give to in-app surveys. This record does not include the text of your question or of the answer. These records are linked to your account. We use them to provide the Service, to apply usage limits, and to understand, in aggregate, which features are useful. We do not use them for advertising, and we do not share them for tracking.
Cevren does not use third-party advertising networks or advertising SDKs to track you across apps or websites. We do not use your health information for targeted advertising.
Cevren does not sell your personal information or consumer health data.
Our website. cevren.app uses Cloudflare Web Analytics to count visits to the site. It uses no cookies, does not identify you, and does not track you across other websites.
Cevren does not collect precise geolocation information through the Service.
We do not currently use third-party behavioral analytics or crash-reporting SDKs that collect your health information or monitor your activity across unrelated services.
Certain limited operational records may be created when necessary to operate and secure the Service, including the record of AI requests and ratings described in Section 1.11. These records are not used for advertising or cross-service tracking.
AI Insights is optional. Cevren does not send information to Anthropic for AI Insights merely because you have an account.
Before AI Insights is first enabled on a device, Cevren presents a disclosure explaining the information that will be transmitted and asks you whether you want to continue.
When you request AI Insights, Cevren may transmit information relevant to the requested analysis, including your chosen goal, laboratory markers, protocol items, medications or other substances you have recorded, recent daily logs, free-text notes (sent exactly as you wrote them), recent Apple Health metrics if connected (sleep, heart rate variability, resting heart rate, steps, activity and weight, which can include sleep that other apps, such as Oura's, write to Apple Health), menstrual-cycle phase where applicable, the optional sex information stored on your device, and any health conditions, year of birth, and upcoming procedure and date you have chosen to record.
When an answer needs published reference information about a substance, such as how it is commonly used, Cevren looks it up using only the substance's name. Nothing about you is included in that search. The reference notes it produces are shared across all users and deleted after 30 days.
AI Insights are only sent when you request them, or, if you turn on automatic weekly reports, once a week for that report. Automatic weekly reports are off unless you turn them on, and you can turn them off at any time.
Cevren does not include your name, email address, or Cevren account identifier in the AI analysis content sent to Anthropic. This means the analysis request is unnamed, but it should not be treated as anonymous. Health information, free-text notes, laboratory values, and combinations of other information can themselves be sensitive or potentially identifying.
Your free-text notes are sent as written when included in an AI Insights request. You should not enter information in those notes that you do not want processed in this manner.
Anthropic processes AI requests under its commercial API terms. Anthropic states that commercial API inputs and outputs are generally retained for up to 30 days, subject to exceptions that may apply where content is flagged for safety or policy enforcement. Those exceptions may result in certain information or associated safety records being retained for longer periods.
Your full reports are stored. Full AI Insights reports are kept on our servers with your account so you can read them again. Because they’re about you, they can repeat things you’ve told us, such as a condition or a procedure date. They are deleted automatically 12 months after they are created. Deleting a report, or your account, deletes it from our servers straight away, and a deletion request covers them too. Other AI answers (answers to your saved questions, weekly reports and stack reviews) are stored only on your device. Insights answers are held encrypted on our servers until your device collects them, and are then deleted; they are never held for more than 7 days.
Cevren does not use your information to train its own general-purpose AI model, and Cevren does not authorize Anthropic to use Cevren API data to train general-purpose models except to the extent expressly agreed by Cevren.
AI-generated responses returned to the application may be stored on your device and may be included in device backups depending on your Apple and device settings.
AI-generated information can be inaccurate and is not medical advice. Additional information about appropriate use of AI Insights appears in our Terms of Service.
We use a limited number of service providers to operate Cevren.
Railway Corporation provides cloud infrastructure and database hosting for Cevren. Cevren’s active backend infrastructure and database are hosted in Virginia, United States.
Railway processes information stored or transmitted through Cevren’s backend as necessary to provide infrastructure services to us. Railway acts under a data processing agreement with Cevren Health.
Cevren previously operated backend infrastructure in Amsterdam during a limited pre-launch testing period. The active service and point-in-time recovery environment were reprovisioned in Virginia in September 2026. A residual approximately 26 MB backup bucket created by Railway’s tooling remained in Amsterdam after migration and was not accessible through Cevren’s ordinary dashboard or command-line tools. Cevren requested deletion from Railway on September 18, 2026. Until Railway confirms deletion, that residual backup should be understood as potentially remaining within Railway’s infrastructure.
Anthropic provides the AI-processing functionality described in this Policy. Anthropic processes information when you choose features that require its services, including AI Insights, laboratory-document extraction, and Supplement Facts label extraction.
Apple Health Records imports do not independently use Anthropic merely to import structured laboratory results.
RevenueCat, Inc. provides subscription and entitlement-management infrastructure. RevenueCat receives an internal identifier and information concerning subscription or entitlement status as needed to manage access to paid features. RevenueCat does not receive the health-information categories described in this Policy for that purpose.
Apple, rather than RevenueCat or Cevren, processes your App Store payment transaction.
Apple provides Sign in with Apple, Apple Health and Apple Health Records permissions and data access, and App Store payment functionality.
Information Apple processes in connection with its own services is subject to Apple's applicable terms and privacy practices.
We use information collected through Cevren to provide and operate the features you request; create and authenticate your account; store and display information you choose to track; generate scores, trends, summaries, calculations, requested AI analyses, and automatic weekly reports you turn on; import and process laboratory information; extract information from documents and labels; administer subscriptions and feature entitlements; maintain the security and integrity of the Service; enforce reasonable usage limits; diagnose and address technical issues; respond to support requests; comply with applicable law; and protect the rights, safety, and security of Cevren, our users, and others.
We do not use consumer health data for targeted advertising.
We do not sell consumer health data.
We do not use your information to make eligibility decisions concerning employment, housing, credit, insurance, or similar services.
We disclose information only as described in this Policy, when you direct or authorize us to do so, when necessary to provide a feature you request, or when disclosure is otherwise permitted or required by law.
Information may be processed by Railway as our infrastructure provider and by Anthropic when you use a feature requiring Anthropic processing. RevenueCat receives limited account and subscription information for entitlement management. Apple processes information in connection with the Apple services you choose to use.
We may also disclose information where reasonably necessary to comply with applicable law, regulation, legal process, or valid governmental request; protect the rights, property, or safety of Cevren, our users, or others; investigate fraud, security incidents, or misuse; or establish, exercise, or defend legal claims.
If Cevren Health is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable law. Consumer health data will remain subject to applicable legal restrictions and rights.
We do not disclose your health information to healthcare providers merely because a healthcare provider told you about Cevren. If you choose to provide a Cevren-generated export to a healthcare professional, that sharing is initiated by you. Cevren's clinician export is generated on your device and is not automatically transmitted by Cevren to the clinician.
We retain account information and information stored in your Cevren account while your account remains active, unless a shorter retention period applies to a particular category or processing activity.
Protocol information, daily logs, stored laboratory results, and other account data generally remain available until you delete the applicable information or delete your account.
Original laboratory documents and Supplement Facts photographs submitted for extraction are not retained by Cevren after the applicable processing request as described above.
Ordinary Apple Health fitness and wellness metrics are not persistently stored in Cevren's server database.
Full AI Insights reports are deleted automatically 12 months after they are created, or sooner if you delete them or your account. Backup copies expire within 35 days after that.
Anthropic's retention of information submitted through its commercial API is governed by the processing practices described in Section 3.
Encrypted Cevren backups may retain deleted information for up to 35 days before being overwritten or otherwise removed through the ordinary backup lifecycle.
We may retain limited information for longer where reasonably necessary to comply with law, resolve disputes, prevent fraud or abuse, enforce agreements, or maintain security, but only to the extent permitted by applicable law.
You can choose whether to use optional features involving sensitive information.
You may decline to enable AI Insights, decline to upload laboratory documents or label photographs, decline Apple Health or Apple Health Records access, and remove permissions through Apple's applicable settings.
Where Cevren stores an imported or entered item, revoking the source permission generally prevents future collection from that source but does not automatically delete information already imported. You can delete stored items through Cevren where that functionality is available or delete your account.
You may edit certain information through your Profile or Settings.
You can delete an individual saved AI report in the app. You can add, change or remove your health conditions, year of birth and upcoming procedure at any time, and turn automatic weekly reports on or off in Reminders.
If you want to exercise rights relating specifically to consumer health data under Washington law, please review our Consumer Health Data Privacy Policy.
You can delete your Cevren account through Settings > Delete Account.
Account deletion removes the account and associated stored information from Cevren's live systems. Deleted information may remain in encrypted backups for up to 35 days before being overwritten or removed through the backup lifecycle.
Where applicable, we notify service providers of deletion requests and direct them to delete information they process on our behalf, subject to applicable law and the provider's contractual and technical obligations.
Deleting your Cevren account does not automatically cancel an App Store subscription. You must separately manage or cancel your subscription through Apple.
Cevren may also provide controls for deleting individual laboratory results, protocol items, logs, or other stored information without deleting the entire account.
If you remove Cevren from your device without deleting your account, server-side information associated with your account is not automatically deleted.
Some Cevren information is stored locally on your device rather than in Cevren's server database. This may include certain settings, sex information, ordinary Apple Health and Oura data read for local use, and AI-generated information, depending on the feature and current application architecture. It also includes your health conditions, year of birth and upcoming procedure; weight and blood pressure readings kept on your device when Apple Health isn’t used; and answers to your saved questions, weekly reports and stack reviews.
Removing local information from the Cevren application does not necessarily remove copies contained in your device backups or other Apple services. Those copies are controlled by your device and Apple account settings.
Cevren may provide a Clear Local Data function for information stored on your device. Clearing local data is different from deleting your Cevren account and server-side information.
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.
These safeguards include measures appropriate to the nature of the information and the Service, including encrypted communications and access controls. Access credentials and tokens used for supported integrations are handled according to the applicable implementation and security requirements.
No method of electronic transmission, processing, or storage is completely secure. We therefore cannot guarantee absolute security.
If we discover a security incident involving information subject to legally required breach notification, we will provide notice as required by applicable law.
Cevren is intended only for adults age 18 and older.
We do not knowingly permit individuals under 18 to create or use Cevren accounts. New users may be required to confirm that they are at least 18 as part of account creation.
If you believe a person under 18 has provided personal information to Cevren or is using the Service, contact us at [email protected].
Cevren is currently intended for users in the United States.
Cevren's active backend infrastructure is hosted in the United States. If you access the Service from outside the United States, you understand that information may be processed in the United States and by the service providers described in this Policy, subject to applicable law.
The limited historical Amsterdam-hosting period and residual backup described in Section 4 occurred during Cevren's pre-launch testing period.
Certain information processed through Cevren may constitute “consumer health data” under applicable state law.
Cevren maintains a separate Consumer Health Data Privacy Policy addressing the categories of consumer health data Cevren collects, the sources and purposes of collection, applicable disclosures, and consumer rights under Washington's My Health My Data Act.
That policy is intended to supplement this general Privacy Policy rather than replace it.
We may update this Privacy Policy as Cevren changes or as necessary to reflect changes in our practices or applicable law.
If we make material changes, we will provide notice appropriate to the nature of the change. Where applicable law requires consent before Cevren collects, uses, or discloses information for a materially different purpose, we will obtain that consent as required.
The “Last Updated” date at the top of this Policy indicates when the current version became effective.
If you have questions about this Privacy Policy or Cevren's privacy practices, contact:
Cevren Health LLC 7901 4th St N #35717 St. Petersburg, FL 33702 United States [email protected]
Cevren Health LLC
7901 4th St N #35717
St. Petersburg, FL 33702
United States