FlarelyPrivacy policy
The short version
- Your symptom log, journal and photos stay on your iPhone and in your own iCloud. Health data never leaves your iPhone. We can't see any of it.
- Ember, the assistant, and voice input run on your iPhone.
- FlareClub, the optional community, runs on our server. It has what you share there: your handle, picture, profile, posts and messages.
- Before others see it, what you share in FlareClub is checked by Claude, an AI made by Anthropic. You agree to this when you join.
- No ads, no tracking, no analytics, and we never sell your data.
1. Who we are
Flarely is an iPhone and Apple Watch app made by Hero Jones Labs ("we", "us"). This policy covers the app and this website. Questions go to privacy@myflarely.com.
Flarely is a way to keep track of how you feel. It isn't medical care and it doesn't diagnose anything.
2. What stays on your iPhone
Most of Flarely never reaches us. This stays on your devices, and in your own iCloud when Sync with iCloud is on:
- Check-ins, symptoms, flares, body areas, journal entries and lab results.
- Rash photos. Photos you take in Flarely or pick from your library are saved without location or other metadata.
- Your profile on the device: name, birth date and health history.
- Ember's chats and what it remembers, and your settings.
iCloud. Sync uses your private iCloud database, which Apple keeps for you under your Apple Account. We can't read it. You can turn sync off in Settings on iPhone. The Apple Watch app always syncs through iCloud so your watch and phone stay in step.
Apple Health. If you allow it, Flarely reads sleep, resting heart rate and heart rate variability to show next to your symptoms. It never writes to Health. Health data stays on your iPhone: it isn't synced to iCloud, never sent to us, and never used for advertising or shared with anyone.
Ember and your voice. Ember uses Apple's on-device language model. Speech is turned into text on your iPhone, and Ember's voice is generated on your iPhone. None of it is sent to us or to another company.
Camera, photos and contacts. Used only when you choose to: the camera for rash photos and your picture, your library to pick a photo, and the contact picker to borrow a contact's photo for your picture. We don't read your contacts.
Face ID. The lock uses Apple's Face ID or Touch ID. Flarely never sees your face data.
Reports and exports. The doctor report and data export are made on your iPhone. They go only where you send or save them.
3. Your account
You sign in with Apple. Flarely asks Apple only for your name, and keeps it with your profile on your devices and in your iCloud, to greet you. We never ask for your email address.
When you sign in, our server creates an account even if you never join FlareClub. It stores:
- an account id and the anonymous user id Apple gives us,
- an encrypted token from Apple, used only to disconnect Sign in with Apple when you delete your account,
- when you joined and when you were last signed in.
Sign-in sessions are stored only as one-way hashes. Your device keeps its own copy in the iPhone Keychain.
4. FlareClub
FlareClub is optional and for adults 18 and over. If you join, our server stores what you share there so other members can see it:
| What | Details |
|---|---|
| Profile | Handle, picture, bio, energy, what brings you here, story chapters, status, and the circles you join. |
| Joining | The guidelines version you accepted and when. You confirm you're 18 or older; we don't store your birth date. |
| Posts | Posts, replies, campfire answers, reactions and photos you post (resized, without location or other metadata). |
| Snapshots | If you share a chart from your log: the symptom name, 30 or 90 days, and the shape of the line. No dates or scores. |
| Chats | Your messages and reactions, and what you've read, for one-to-one chats and circle rooms. |
| People | Who you've said hi to, passed on, blocked or muted, and your Flarelies. |
| Presence | When you were last active (to show "here now") and your time zone offset. |
| Safety | Reports you file, appeals, moderation decisions and strikes on your account. |
| Notifications | Your device's push token and which notifications you want. |
Members see your handle, picture and profile, and what you post. Messages in a one-to-one chat are seen by the two of you; circle room messages by members of the room. Your symptom log never goes to FlareClub unless you share a snapshot or photo yourself.
Test members. While FlareClub is being tested it includes a few test members whose replies are written by Claude. When you chat with one, or post in a room with one, the last few messages there, with the handles of the people who wrote them, are sent to Claude to write the reply.
5. Moderation and Claude
To keep FlareClub safe, everything you share there is checked before others see it: your handle, picture, bio, story chapters, posts, replies, campfire answers, photos and chat messages. The check is done by Claude, an AI model made by Anthropic, which we reach through Anthropic's API. You agree to this when you join, and you're asked again if it changes.
- We send the text or image, and the kind of item. We don't send your account id or other profile details along with it.
- Anthropic processes it for us under its commercial terms, which don't allow it to train its models on this content.
- We log each decision with a one-way fingerprint of what was checked, never the text or image itself, and a short reason.
People. A small team of moderators reviews anything held back, appealed or reported. They see the item, the author's handle and recent strikes, and the reason for a report, never who filed it. A moderator reads a private chat message only if it was held back, you asked for a review, or someone reported it.
Crisis. If something reads as someone in crisis, it is never blocked. The author sees helplines, and moderators get an alert, without the content, so they can look soon. Helpline links open in your phone or browser; we don't share anything with them.
6. Notifications
If you allow them, FlareClub notifications are sent through Apple's push service. A notification for a chat message or a reply to your post includes the sender's handle and the text, cut short, so it may appear on your lock screen. A hi or a new Flarely shows only the handle. Notifications never include anything from your log. You can turn each kind off in FlareClub, or all of them in iOS Settings.
7. Who processes data for us
| Company | For |
|---|---|
| Apple | Sign in with Apple, iCloud sync (your private database), push notifications, Health, and the on-device features. |
| Cloudflare | Hosts our server, the FlareClub database and this website. |
| Anthropic | Checks what's shared in FlareClub, and writes test members' replies. |
Each works on our behalf only. We don't sell or rent personal data, share it for advertising, or let anyone track you across apps. Our server and providers may process data in the United States and other countries. We'd disclose data only if the law requires it, and would tell you if we're allowed to.
Logs. Our server writes short operational logs (for example "a post was published"), with ids but not your posts or messages. Cloudflare keeps them for a few days. To limit sign-in abuse, your IP address is counted briefly at sign-in; we don't store it. This website has no cookies, analytics or trackers.
8. How long we keep data
- Until you delete your account: your account and everything in FlareClub, including posts you removed (hidden from everyone at once, kept so moderators can act on reports) and photos you uploaded but didn't post.
- Sessions: stop working after 90 days without use, and are deleted at your next sign-in or with your account.
- Push tokens: deleted when you sign out or when Apple says the token is no longer valid.
- After you delete your account: reports you filed about someone else's post stay so moderators can act on them, with your identity and note removed. Moderation decisions stay as fingerprints and reasons, no longer linked to you.
9. Your choices and rights
- Delete your account: Settings, then Account, then Delete account. This removes your account and your FlareClub data from our server, including your profile, posts, replies, photos and messages. One-to-one chats you were in are removed for both people. It also disconnects Sign in with Apple. Stopping Sign in with Apple for Flarely in your iPhone's Settings deletes the account the same way.
- Delete your log: Settings, then Delete all data removes it from your iPhone and your iCloud.
- Get a copy: Settings, then Export everything for your log. For a copy of what our server has about you, write to us.
- Leave things out: skip any question, keep iCloud sync off, keep Health off, choose what Ember can use, and turn off notifications.
Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or move your data, and to object to or limit how it's used. Write to privacy@myflarely.com and we'll answer within 30 days. We'll never treat you differently for using these rights. You can also complain to your local data protection authority.
Where the law asks for a reason to use your data: we keep your account and FlareClub content to run the service you asked for, check what's shared because you agreed to it and to keep members safe, and keep logs and reports for safety and security.
10. Age
Flarely isn't meant for children under 13, and we don't knowingly collect data from them. FlareClub is only for adults 18 and over. If you think a child has joined, write to us and we'll remove the account.
11. Security
Data on your iPhone is protected by iOS file protection and, if you turn it on, Flarely's Face ID lock. Traffic to our server is encrypted. Apple's token is encrypted on our server, and sessions are stored as hashes. Moderators' access is limited to what they need. No system is perfect; if we learn of a breach that affects you, we'll tell you.
12. Changes and contact
If we change this policy, we'll update the date above. If a change affects what we collect or who sees it, we'll tell you in the app first, and ask again where your agreement is needed.
Privacy questions or requests: privacy@myflarely.com. Anything else: support@myflarely.com.