1. Data controller
Corpora is published by Noel Val de Casas, an independent developer established in France, who is the controller for the processing described here.
For privacy questions or rights requests: corpora@nvdc.ovh.
2. Scope and principles
This policy applies to the Corpora iPhone application, its widgets, its Apple Watch complications and this public website.
- Only useful permissions and data are requested.
- Calculations take place on-device, without a remote personal-data database.
- Health data is never sold, rented, monetised or used for advertising.
- Permissions, exports and deletion remain understandable and accessible.
Corpora requires no user account. The publisher does not receive your Apple Health data, Corpora scores, optional first name or Journal content.
3. Data processed on your devices
Apple Health data
If you select Apple Health mode and grant the relevant permissions, Corpora may read:
- resting heart rate;
- heart-rate variability (HRV/SDNN);
- one-minute heart-rate recovery;
- sleep analysis and stages;
- respiratory rate;
- wrist temperature during sleep;
- blood oxygen saturation and VO₂ max;
- physical effort when provided by a compatible Apple Health source;
- active energy, step count and Apple exercise minutes.
Corpora may also read measurement dates, periods and technical source information to assess freshness, availability and consistency. Access is strictly read-only.
Corpora estimates
Using available data and a personal baseline, the app locally calculates estimates including daily state, energy, recovery, load, activity balance, confidence and freshness. These results are never written to Apple Health.
Entries and preferences
- Journal: feeling check-ins, optional dimensions, mood qualifiers, timestamped events, notes and compatible measured context you choose to record.
- Personalisation: optional first name, appearance, Demo or Health mode, and display choices.
- Operation: refresh preference, reminders, widget masking, Watch integration and onboarding status.
- Local protection: biometric lock and delay. Corpora never accesses biometric templates.
Sensitive Journal factors
Sexual activity, alcohol, pain or discomfort, felt illness, menstrual cycle and treatment changes are individually disabled by default. You may enable each factor and mask its label in the timeline. They remain local, never alter scores, are never written to Apple Health and never appear in notifications, widgets or complications.
Links shown between feelings, measurements and events are indicative observations. They establish neither causation nor diagnosis.
Demo mode
Demo mode uses fictional, deterministic scenarios that are clearly labelled. It does not access Apple Health.
4. Purposes and legal bases
Data is processed to display requested wellbeing estimates, show history and intraday evolution, remember local preferences, provide optional reminders and share a limited snapshot with enabled widgets or Watch complications.
Where European law applies, access to health data relies on your explicit consent, expressed through your choice in Corpora and Apple Health permissions. Local preferences are processed to deliver the features you request. Notifications are optional and may be disabled at any time.
5. Storage, retention and deletion
Corpora data is stored locally in protected app storage and, where needed, in the signed App Group shared with widgets. Corpora uses no CloudKit database and no remote health-data store.
- Data remains until you delete it in Settings or uninstall the app.
- Journal entries and local snapshots can be deleted in full.
- Original Apple Health data remains in Apple Health; Corpora cannot delete it.
- An encrypted iCloud or Finder backup may include some local app data according to your Apple settings.
Export
You may prepare a JSON export containing the snapshot and Journal data, including any sensitive factors and measured contexts you chose to record. It remains local until you choose a destination in the iOS share sheet. The selected destination then controls its retention and security.
7. Apple Health permissions
Permissions are requested by category and remain controlled by Apple. You may deny some, grant them later or revoke them in Health and system Settings.
For privacy reasons, Apple does not let an app distinguish reliably between denied read access and an absence of data. Corpora therefore explains missing information without guessing why it is unavailable.
Revoking access prevents new reads but does not automatically remove already-calculated local snapshots. Use “Delete my data” in Corpora to erase local data.
8. Widgets, Lock Screen and Apple Watch
If enabled, the iPhone locally shares a limited snapshot containing only values needed by widgets and complications. Calculations remain on the iPhone.
- You can disable Watch transmission in Settings.
- You can mask sensitive widget and Lock Screen values.
- Unavailable or stale values are labelled or hidden.
9. Security
Corpora relies on iOS app isolation, file protection, HealthKit permissions and Apple-signed App Groups. An optional Face ID, Touch ID or device-passcode lock is evaluated by iOS; Corpora never receives or stores biometric data.
No system can guarantee absolute security. Keeping iOS and watchOS current, protecting your passcode and controlling exports or backups helps protect your data.
10. Your rights
Depending on applicable law, including the GDPR, you may have rights of access, correction, erasure, restriction, objection, portability and withdrawal of consent. The app directly lets you view information, edit or delete Journal entries and preferences, export Corpora data, delete all local data and revoke Health permissions.
Because the publisher has no user account or remote database, the publisher generally cannot identify or retrieve data held only on your device. Contact corpora@nvdc.ovh for policy-related requests. You may also complain to your competent supervisory authority; in France, this is the CNIL.
11. Children
Corpora is not specifically directed at children. Where local law requires a guardian’s authorisation to consent to health-data processing, the app should only be used with that authorisation.
12. Medical limitations
Corpora is a general wellbeing and fitness application. Its scores are informative estimates based on available data and a personal baseline. Corpora is not a medical device and does not diagnose, treat, prevent or monitor disease.
If you have symptoms, concerns or health questions, consult a qualified healthcare professional. Never delay care solely because of information displayed by Corpora.
13. Changes to this policy
This policy may change to reflect modifications to Corpora, the law or Apple platform requirements. The version date at the top will be updated. Material changes to data processing will receive more prominent notice in the app.
14. Contact
Publisher and controller:
Noel Val de Casas, independent developer established in France
Privacy:
corpora@nvdc.ovh