Thyroid Compass — Privacy Policy

Effective date: August 21, 2026

Last updated: August 21, 2026

This Privacy Policy explains what information Thyroid Compass (the "App") collects, how we use it, who we share it with, and the choices you have. We've written it in plain language because the people who use this app — chronic illness patients — deserve to understand exactly what's happening with their health data.

1. Who we are

Thyroid Compass is developed and operated by Dylan Schob, an independent developer ("we," "us," "our"). Our mailing address is:

Dylan Schob
296 Beauvoir Rd, Ste 100 #5516
Biloxi, MS 39531
United States

You can reach us at support@thyroidcompass.app.

2. What the App is for

Thyroid Compass helps you track your thyroid-related lab results and symptoms over time, and uses AI to surface patterns and prepare you for conversations with your doctor. The App is a wellness tool. It is not a medical device, does not diagnose or treat any condition, and is not a substitute for medical advice from a qualified clinician.

3. What information we collect

We collect only the information you explicitly provide or that the App needs to function:

• Profile information you enter during onboarding or in the Edit Profile screen: first name, thyroid-related condition (e.g., Hashimoto's, Graves'), year of diagnosis (optional), and current medications.
• Profile photo, if you upload one. Stored as a file on your device.
• Lab result images you photograph or upload. We use these to extract values for thyroid markers (TSH, Free T3, Free T4, antibodies, ferritin, vitamin D, vitamin B12, and a few others).
• Extracted lab values: the marker name, numeric value, unit, and reference range pulled from each lab.
• Symptom check-in entries you log: numeric scores (0–10) for fatigue, brain fog, cold sensitivity, and mood, plus any free-text notes you write.
• AI-generated interpretations, Action Plans, and Insights derived from the data above.
• Subscription state: whether you are on the free tier, in a trial, or have a paid subscription. We do not collect or store your payment information — that is handled entirely by Apple via the App Store.
• Notification preferences (whether you've opted into daily check-in reminders or lab refresh reminders, and the time of day you chose).
• App preferences: your selected theme (light/dark/system) and accent color.

We do not collect: your full name, postal address, phone number, government IDs, exact location, contacts list, photos other than the ones you choose to upload, microphone or camera access except when you explicitly initiate it.

4. Where your data is stored

By default, all data described above is stored locally on your device, in the App's private storage. It is not synced to a server, not visible to us, and not accessible by anyone else who does not have your unlocked device.

The single exception is described in section 5 below.

5. How AI processing works

The lab interpretation, Action Plan, Insights, and doctor-visit-prep features rely on a large language model called Claude, operated by Anthropic, PBC. When you trigger one of these features:

• The relevant data (your profile, lab values, symptom log, and — for lab uploads — the image itself) is sent to Anthropic's API.
• Anthropic returns the AI response, which we save locally on your device.
• Anthropic does not use API inputs to train their models when accessed via the standard API tier.
• We do not retain copies of this data on any server we operate.

Please read this carefully: we do not currently have a Business Associate Agreement (BAA) with Anthropic. A BAA is a contract that imposes HIPAA-level obligations on a service provider handling health information. Without one, your lab data is processed under Anthropic's standard commercial terms rather than HIPAA-specific protections.

We think you should know that before you upload anything. If you are not comfortable with your lab values being processed under those terms, please don't use the AI features — you can still use the App to record and track your results manually.

Anthropic's privacy policy is available at https://www.anthropic.com/legal/privacy.

We intend to put a BAA in place as the App grows, and we will update this policy and notify you within the App if that changes.

6. What we do with your information

We use the information you provide solely to:

• Provide the features of the App (extraction, interpretation, trends, reminders, etc.).
• Maintain your profile, history, and preferences across app sessions.
• Send you the local notifications you have opted into.

We do not sell your data, share it with advertisers, use it for ad targeting, or share it with any third party other than Anthropic for the AI processing described in section 5.

7. Subscription and payment information

If you choose to subscribe to Thyroid Compass Premium, your payment is processed by Apple via the App Store. We never see, collect, or store your credit card or payment details. We receive only an anonymized confirmation from Apple that your subscription is active, in trial, or canceled.

8. Your rights and choices

You have full control over your data:

• Export. Tap Settings → Data → Export as JSON to download everything stored about you. The file is yours to keep.
• Edit. Edit your profile, medications, individual lab dates, and other entries at any time from within the App.
• Delete. Tap Settings → Danger Zone → Erase my data to permanently delete every piece of data described in section 3, except your subscription state and preferences. This is irreversible.
• Subscription cancellation. Manage or cancel your subscription anytime in iOS Settings → [Your Name] → Subscriptions. Cancellation prevents future charges; deleting the App alone does not cancel.

If you are in the EU, UK, or California, you may have additional rights under GDPR, UK GDPR, or CCPA, including the right to request access, correction, or deletion of your personal information, and to object to certain processing. Contact support@thyroidcompass.app to exercise these rights.

9. Data security

Because your data is stored locally on your device, its security depends on the security of your device. We recommend you keep your device locked with a passcode, Face ID, or Touch ID. Data sent to Anthropic for AI processing is transmitted over HTTPS (TLS 1.2 or higher).

10. Children

Thyroid Compass is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it.

11. Medical disclaimer

Thyroid Compass is for informational purposes only. The AI-generated interpretations, Action Plans, and Insights are not medical advice, diagnosis, or treatment. Always discuss your lab results and any health decisions with a qualified healthcare provider. Do not start, stop, or change any medication based on information from the App.

If you are experiencing a medical emergency, call 911 (in the US) or your local emergency number.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. If we make material changes, we will notify you within the App.

13. Contact us

Questions, concerns, or requests about this Privacy Policy or your data?

support@thyroidcompass.app

Dylan Schob

296 Beauvoir Rd, Ste 100 #5516

Biloxi, MS 39531

United States