Privacy Policy

1. In short

NewMe Hertz runs entirely inside your iPhone and your Apple Watch. There is no account to create, nothing is sent to any server of ours or anyone else's, there is no analytics, no advertising and no third-party SDK collecting data.

• We do not sell your data, and we do not share it with anyone.
• There is no server: no copy of your readings exists outside your devices.
• There is no iCloud sync of wellness data; it is only part of your encrypted iCloud device backup if you have that enabled.
• Every permission is optional: the app works, with fewer signals, if you grant none.

The only information that leaves your device is what you deliberately send: for example, if you write to our support email, or if you fill in the early-access form on this website (name, email and country). That is separate from the app.

2. What data the app accesses

Every permission is requested separately, can be revoked at any time from iOS Settings, and none is required. Without a permission, that signal simply does not enter the estimate.

Your calendar event titles, notes and attendees are never read. The app only needs to know when something starts and ends.

3. Face data (TrueDepth camera / ARKit)

This section describes the facial check, the only feature of the app that uses the TrueDepth camera and the ARKit face-tracking API. It is optional: it only happens if you enable it and start it, and the app works fully without it. The Apple Watch has no camera and its app does not use ARKit.

1. (a) What is collected. For about ten seconds, ARKit computes on your iPhone the facial-expression coefficients ("blend shapes"): numbers between 0 and 1 describing gestures such as smiling, frowning, or opening the eyes or jaw. The app reads only those numbers. It does not capture, process or store any photograph, video, depth map, 3D face mesh or any other image data from the camera.
2. (b) Purpose. The coefficients are summarised on the spot into three aggregate values — positivity (valence), activation and tension — plus a tracking-quality score, which are combined with the other signals you have authorised to refine your wellbeing estimate. They are not used for any other purpose.
3. (c) Where it is processed and stored. All processing happens on your iPhone, in memory. The individual coefficients are discarded when the check ends and are never written to disk. The only things kept are the three aggregate values and their tracking quality: they are saved, with the date and a snapshot of the estimate at that moment, in your "check-in log" (Registro de chequeos), a file inside the app's local storage on the iPhone; they are also held in memory for up to 30 minutes so they can feed the next estimate.
4. (d) Retention. The raw coefficients: only while the check runs (about ten seconds). The three aggregate values: for as long as that entry exists in your check-in log, under the retention policy you choose in the app (by default the last 500 entries; alternatively 90 days, or unlimited), or until you delete it.
5. (e) Deletion. In History › check-in log (Historial › Registro de chequeos) you can delete a single entry or all of them at once; "Erase all my data" ("Borrar todos mis datos"), in the privacy panel, removes the whole log; and uninstalling the app removes all of its data from the iPhone.
6. (f) Sharing and third parties. None. Face data never leaves your iPhone: it is not sent to us (we operate no servers), to Apple, or to any third party; it is never sold or used for advertising, and the app includes no third-party SDKs. It is not transferred to the Apple Watch: the watch receives only the resulting combined estimate, never the face values. If the resulting estimate is saved to Health as a "State of Mind" sample (section 4, only with your write permission), what is saved is the estimate, not the face data.
7. (g) No identification. Face data is not used to identify, authenticate or recognise you, nor to compare you with anyone. The coefficients do not contain your image and cannot be used to reconstruct it.
8. (h) No other use. The app does not use face data for any purpose other than the facial check described in this section, in accordance with the Apple Developer Program License Agreement (§3.3.3(K)). Your profile photo is a separate feature: it is an image you choose or take, stored as a file inside the app on your iPhone, and it is never analysed with ARKit or any other face-analysis technology.

4. Health data (HealthKit)

If you grant read access to Health, the app reads the signals listed in the table in section 2 (heart rate, heart-rate variability, respiratory rate, sleep, wrist temperature, activity and date of birth) to estimate your wellbeing and the confidence of that estimate.

Writing to Health. With your write permission, which is requested separately from the read permission, the app saves to Health: (i) breathing exercises and journeys of 3 minutes or longer as “Mind and Body” workouts, with their mindful minutes; and (ii) your estimated mood as a “State of Mind” sample. You can revoke this permission at any time in iOS Settings › Health; samples already written live in Health and are deleted from the Health app. The app never writes images, audio or face values to Health.

• If your date of birth is in Health, the app reads it to calibrate the heart-rate variability reading; it is not used for anything else.
• HealthKit data is not used for advertising or any marketing purpose.
• HealthKit data is not shared with third parties and is not sold.
• HealthKit data does not leave your device.
• HealthKit data is used solely to estimate your emotional-wellness state inside the app and, if you authorise it, to save your sessions and your estimated mood to Health.

You can review and withdraw read and write access at any time in Settings › Health › Data Access & Devices › NewMe Hertz, or from the Health app.

5. Apple Music and Spotify

If you turn music on, the app uses MusicKit to search your library and the Apple Music catalogue and play music alongside the session tone; playing from the catalogue requires an Apple Music subscription.

The catalogue query is a generic musical term — a genre or a tempo, for example “slow ambient” — derived from the goal you choose, or the artist or genre you type. It never includes health or mood values. That search is handled by Apple under the Apple Music authorisation you grant, and is governed by Apple Music's terms and privacy policy.

Spotify is not integrated: the app only opens a link in the Spotify app or website. From there Spotify's terms and privacy policy apply.

6. Notifications

Notifications are optional and enabled with an explicit permission. They offer you a reading before a meeting, tell you when the passive estimate changes, and suggest a measurement or a break. If you enable passive estimation, the app takes up to three brief readings a day in the background using the health signals you consented to; everything is computed on the device and notifications never leave it.

No notification contains calendar content: no titles, no notes, no attendees.

7. Retention and deletion

Your data lives on your devices for as long as the app is installed. There is no copy on any server, so there is nothing to ask us to delete.

• “Erase all estimator data”, in the app's settings, permanently deletes the baseline, your self-reports, the places you labelled, the temporal memory and your personal adjustment stored on the iPhone.
• Session history is cleared separately, with its own button in History.
• Data the Apple Watch stores locally is removed when you uninstall the app from the watch or unpair it.
• Uninstalling the app removes all of its data from the device.
• There is no iCloud sync; if you have iCloud backup enabled for the device, this data is part of that encrypted backup.

Step-by-step instructions are on the data deletion page.

8. Children

NewMe Hertz is not directed to children under 13 and we do not knowingly collect data from children under that age. The minimum age to use the app under the Terms of Use is 16.

9. The website: cookies, storage and the form

This section is about newmehertz.com, which is independent of the app.

The site uses no cookies: none of its own, none from third parties, no analytics, no advertising and no social-media cookies, and it loads no third-party scripts that could set them. The only thing it stores lives in your browser's local storage (localStorage), which does not travel with requests and cannot identify you:

You can change your choice at any time from the “Cookies” link in the footer, or by clearing the site's data in your browser.

Beta signup form

If you register as a tester we send to our server the name, email and country you type, together with the page language, the date and, if you choose them, your test purposes (optional). We keep it to register you as a beta tester and to show you the download link; we do not use it for anything else and we do not share it with anyone. The legal basis is your consent (the checkbox in the form), and you can withdraw it and ask us to delete your data by writing to support@newmehertz.com.

Alongside the record we store a salted hash of the IP address, used only to limit abuse of the form; the address cannot be recovered from it.

Beta feedback form

If you test the beta through TestFlight, we may send you a personal link to a short form (newmehertz.com/feedback) to tell us how it went. The link carries a signed identifier, not your email in the clear. When you submit it we store on our server your email, your answers, the build and version you tested and the language of the form, together with the date, a salted hash of the IP address and the browser type. We use it solely to improve the app and decide what to fix; we do not combine it with app data, which never leaves your device, and we do not share it with anyone. We keep it for 24 months at most and delete it earlier if you ask us by writing to support@newmehertz.com. The legal basis is your consent, which you give when you submit the form.

Server logs

Like any web server, ours writes to its technical logs the IP address, the page requested, the date and the browser type of each visit. They are used only for security and to diagnose faults, are not combined with any other information, and rotate automatically.

10. Changes to this policy

If we change this policy we will update the effective date shown above and publish the new version at this same address. If the change materially affects how your data is handled, we will also say so inside the app.

11. Contact

Controller: Nexxus Tech SAS. For any privacy question, write to support@newmehertz.com.