Cathexis Privacy Policy

Somatic and Therapeutic Data: All somatic check-in data, body map selections, sensation records, session data, pattern observations, prediction data, program progress, and intervention responses are stored exclusively on your device using Apple’s SwiftData framework. We never collect, transmit, or store this data on any server.

Account Information: If you subscribe to a paid tier, Apple processes your payment through the App Store. We receive a transaction confirmation from Apple but never receive your payment card details, billing address, or Apple ID.

Crash and Stability Data: We use Sentry for crash analytics to improve app stability. Before any crash report leaves your device, a privacy-allowlist scrubber removes all somatic content, body zone data, sensation records, and therapeutic information. Only technical diagnostic information (device model, OS version, stack traces, error codes) is transmitted. You may opt out of crash reporting entirely in the App’s Settings.

HealthKit Data: With your explicit permission, the App may read sleep data, heart rate variability, respiratory rate, and menstrual cycle data from Apple HealthKit. This data is processed entirely on your device to power biometric pattern detection. It is never transmitted off-device. You can revoke HealthKit permissions at any time via iOS Settings > Privacy & Security > Health > Cathexis.

On-device somatic and therapeutic data is used solely to provide you with the App’s therapeutic features: somatic check-ins, adaptive interventions, pattern detection, prediction tracking, program progression, and session reports. This data never leaves your device.

Crash analytics data is used solely to identify and fix bugs that affect app stability.

HealthKit data is used solely to enhance biometric pattern detection (circadian disruption, respiratory rate correlation, menstrual cycle correlation). This processing occurs entirely on your device.

Website analytics are used to understand how visitors find and use the Site, and to improve its content.

Email addresses are used to send product updates, launch announcements, and educational content related to somatic awareness. We do not sell, rent, or share email addresses with third parties.

All somatic and therapeutic data is stored on your device using Apple’s SwiftData framework with iOS Data Protection. When your device is locked, this data is encrypted with your device passcode via hardware-backed encryption. There is no cloud sync, no server-side database, and no backup to our systems.

If you delete the App, all on-device somatic and therapeutic data is permanently deleted. We cannot recover it because we never had access to it.

In a future version, we plan to offer an optional Research Commons feature that allows you to contribute anonymized somatic data to scientific research. Participation will require a three-stage informed consent process. All data will pass through a seven-step anonymization pipeline that runs entirely on your device before any data is shared. You will be able to review exactly what data would be shared before consenting. You may withdraw consent at any time. This feature is not currently active.

The App integrates with the following third-party services: Apple App Store (payment processing for subscriptions, governed by Apple’s Privacy Policy), Apple HealthKit (on-device health data access with your permission, data remains on-device per Apple’s HealthKit guidelines), and Sentry (crash analytics, receives only technical diagnostic data after privacy scrubbing, governed by Sentry’s Privacy Policy).

We do not use any advertising networks, data brokers, behavioral tracking SDKs, or social media analytics tools.

Cathexis is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@cathexis.health.

Because your somatic and therapeutic data is stored exclusively on your device, you have complete control over it at all times. You can delete all data by deleting the App. You can export session reports via the App’s Session Report feature. You can opt out of crash analytics in the App’s Settings. You can revoke HealthKit permissions via iOS Settings. You can unsubscribe from emails via the unsubscribe link in any email.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). Because we do not collect, sell, or share personal somatic data, most CCPA provisions are not applicable to on-device data. For any data we do hold (email addresses, crash analytics), you may request access or deletion by contacting support@cathexis.health.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Site and updating the “Last Updated” date. Your continued use of the App after any changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at:

Email: support@cathexis.health

Cathexis • Justin DeGarbo, Founder & Clinical Director

Los Angeles, California