Effective date: September 21, 2026
Attune is built on a simple principle: what you record stays on your device. There is no Attune account and no copy of your diary on our side. The limited exceptions are described precisely below, and they are few: the bare fact that an entry was made, without anything that describes it; two short answers you give while setting the app up; and, if you use the blood pressure diary, the bare fact that you used it that day.
Attune has no accounts and no sign-up. Everything you log — hot flashes, doses, symptoms, bleeding, blood pressure readings, notes — and everything read from Apple Health lives in the app's private database on your iPhone. The content of your diary is never sent to us. What we do send is a small set of usage events tied to a random installation identifier, and one of them is the bare fact that a hot flash entry was made. Because that fact is health-related, we set it out in full under Analytics below, including what it does not contain.
With your explicit permission, Attune reads sleep, steps, resting heart rate and hot flashes you have already recorded from Apple Health, to give your charts a starting point before your first log. Two more are asked for separately, only where they are used and only if you go there: heart rate variability on the chart that shows it, and blood pressure together with heart rate on the blood pressure screen — the heart rate only so a reading from your monitor keeps the pulse it was recorded with. Attune reads nothing else: not your workouts, not your weight, not your clinical records. This data is processed entirely on your device. Attune never writes to Apple Health and never transmits Health data anywhere. Health data is never used for advertising or shared with third parties, in accordance with Apple's HealthKit guidelines.
Events you log on Apple Watch are transferred directly to your paired iPhone using Apple's on-device Watch Connectivity — not over the internet.
Purchases are processed by Apple. Attune verifies your subscription on-device through StoreKit and receives no payment details, name, or address. See Apple's Privacy Policy for how Apple handles purchase data.
Dose reminders and check-ins are scheduled locally on your device. No push servers are involved.
Attune sends a small set of usage events (for example, "onboarding completed" or "report exported") to our own server so we can improve the app. These events carry a random installation identifier, the app version and your language. The identifier is the same across events from one installation, so those events can be grouped together; it is not linked to your name, email, or device — never your name, email, or a device identifier. The identifier is not linked to you and resets if you reinstall the app. We use no third-party analytics SDKs and no advertising trackers. Events are kept for as long as we need them to understand how the app is used, and you can ask us to delete yours: write to the address on our support page and we will remove every row carrying your install identifier.
To be precise about where the line sits: we can see that the app was opened, which screen you looked at, how many days have passed since you installed it, whether an Apple Watch is paired, that a report or a data export was produced, whether a purchase succeeded or failed, and that a hot flash entry was made — the bare fact, so that we can tell an app in use from one installed and forgotten. There is one more health-related answer, and we would rather name it than hide it: during onboarding, if you choose to say when your last hot flash was, the app sends that answer as one of five fixed options — now, earlier today, yesterday, this week, or can't recall. There is a second one, added in September 2026. When you finish setting up your therapy during onboarding, the app sends how many medications you entered and the list of forms they take, with repeats removed — patch, gel, pill, spray or injection, from that fixed list and nothing outside it. It is sent when you finish that step — if you go back and finish it again, it is sent again. We added it for one reason: we cannot tell how many people use a patch, and without that we keep guessing which schedules are worth building. The name of the medicine, the dose, the strength, the brand and the schedule itself are never sent. Nothing else about your health is sent. Not how severe an episode was, not what you tagged as its trigger, not a symptom, not a score, not a note. Nothing read from Apple Health is transmitted. Nothing calculated from it is transmitted either, with one exception we would rather name than hide: if you use the blood pressure diary, we send the bare fact that it was used that day and whether the reading came from Apple Health or from your own typing — at most once a day for each. That fact does tell us your Apple Health held at least one blood pressure reading. The readings themselves, how many there are, when they were taken and which device recorded them are never sent.
The pages on attunehrt.pages.dev count how often each page is opened. Each view sends the page path, a word describing where you arrived from — search, direct, a link on this site, or a link elsewhere — and your browser's language. That is the whole record.
There are no cookies and nothing is stored in your browser. The identifier attached to a view is generated fresh on every page load and thrown away, which means we count views and cannot count people, cannot follow you from one page to the next, and cannot recognise you on a later visit. We do not store your IP address, your User-Agent, or the referring address itself — the referring address can contain the words you searched for, and we have no use for them. Clicking a link from here to the App Store records only which link was clicked and when. No third-party analytics, no advertising trackers, no Google Analytics.
Attune has a “Write to the developer” link in Settings, and from time to time a banner on the Today screen inviting you to say what is missing. Both simply open your own email app with a blank message; nothing is sent until you press send in your mail app, and you can edit or delete anything in it first. The message arrives at almazic91@gmail.com, which Almaz Nurmukhametov reads himself.
Because it is ordinary email, your address is visible to us, and your message is not anonymous. We keep correspondence only as long as we need it to answer you and to fix what you reported, and we never connect it to the usage events described above — that identifier is not in the message. Please do not include details about your health in it: we do not need them to fix a bug, and email is not a secure channel for that.
You can export all of your data as CSV at any time from Settings. Deleting the app deletes your diary completely: there is no server copy of it. The usage events described above are the one thing that stays, because they carry a random install identifier and nothing else; ask us and we will delete those rows too.
Attune is intended for adults and is not directed at children under 13.
If this policy changes, the new version will be posted at this address with an updated effective date.
Attune is built by Almaz Nurmukhametov, an independent developer.
Questions: almazic91@gmail.com