What we collect
From Apple Health or Health Connect, only if you connect one and only the types you turn on: workouts (type, start and end time, distance, the app that recorded it, and whether it was entered by hand), daily step count, that you weighed in, and that you logged food, with the name of the app you used. To notice a weigh-in or a food log your phone reads the number, but Sandbox keeps your weight or the calories only if you turn on "Show the number" or "Show calories" for a task. To suggest a step goal, your phone reads your last 14 days of steps once and Sandbox keeps nothing. There is no daily distance total. From Apple's Journaling Suggestions on iPhone, only the moment you pick, such as a workout's type, time and distance, or a step count. From you: tasks that may describe health activities in your own words (for example "morning run"), the notes, photos, videos and voice notes you add to them, the mood you check in with, and interests you choose (for example "Manage anxiety"). We also know which health types you turned on.Where it comes from
From your phone's health store (Apple Health or Health Connect, and through it the watches and apps that recorded the data), from Apple's Journaling Suggestions when you pick a moment, and from what you type, say, record or upload in Sandbox.How we use it
To show what you did on your Today screen so you can add it to your day. To mark a task done that you linked to a type, in the background if you turn on "Add it automatically". To put your step count in your own evening reminder, if you turn that on. To show your teammates what you post and share (see How we share it). If you use AI suggestions (Premium), to suggest tasks: that feature reads the names of your tasks, your recent notes and what you say when you add tasks by voice, which can mention your health. It never reads what came from Apple Health or Health Connect. To keep Sandbox working and make it better: our analytics record which health types are on and how many items synced, never your measurements, and error reports help us fix bugs. We do not use consumer health data for advertising, and we do not use it to train AI models.How we share it
With your teammates. Sandbox is for sharing your day with a few friends, so the tasks you create and complete, with their notes, photos and videos, and your mood check-ins are posted to your team. Anything about your health that you write or attach there is seen by them. Numbers from Apple Health or Health Connect reach your team only when you share an item, or turn on "Add it automatically" for a task. Your teammates' notification for a shared workout or step count can show its distance and time, or the count. With service providers that process it only on our instructions: Supabase (database and storage), Stream (team chat, its notifications and the photos in it), Expo, Apple and Google (notification delivery), OpenAI (AI suggestions and voice transcription), Cloudinary (video and audio processing), PostHog (product analytics and screen recordings used to fix problems) and Sentry (error reports). We have no affiliates that receive it. We do not sell consumer health data, we do not share it with data brokers or advertisers, and we do not let third parties collect it about your activity over time or across other websites and apps.How long we keep it
Your Today list is read from your phone when you open the app. If tasks that fill themselves in are on for you, Sandbox also saves a daily total for each type you turned on, and a summary of each workout, to your account. These stay until you turn that type off, tap "Delete what Sandbox imported", or delete your account. Numbers saved on a task you completed, and anything you posted or shared, stay with that task and in your team's chat; turning a type off does not remove them. If you delete your account we delete your health data from our database straight away, and your posts stay in your team's chat without your name. Copies in backups are deleted as the backups expire, and never later than six months. PostHog and Sentry keep analytics and error records for a limited time; ask us and we will have the ones linked to you deleted.Your consent
Each health type is its own switch in Settings, and each one asks your phone for that one type. Turning one on is your consent for Sandbox to collect it. Sharing is a separate choice: you tap "Share with your team" after seeing what your team will see, or turn on "Add it automatically" for one task. We record each switch you flip with the time and the version of the wording you saw. You can withdraw consent at any time by turning the switch off in Sandbox, or in your phone's health settings.Your rights
Wherever you live, you can see in Settings which types are on, how many tasks are linked and when Sandbox last synced, turn any type off (which also deletes what was imported for it), delete what was imported, and delete your account. You can also ask us to confirm whether we collect, share or sell your consumer health data and send you a copy of it; to give you a list of every third party and affiliate we shared it with, and how to contact each one; to correct it (data from your phone is corrected in Apple Health or Health Connect and syncs again); or to delete it, and we will tell our service providers to delete it too. To ask, email legal@getsandbox.app with the phone number on your account. We may ask you to confirm it is you. We answer within 45 days. If we need more time we will tell you why, and take no more than 45 more days. Requests are free twice a year. If we decline, you can appeal by replying to our answer; we decide appeals within 45 days and explain why. If we deny your appeal, you can contact the Attorney General of your state, for example in Washington, Nevada or Connecticut.Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect. If a change means collecting or sharing consumer health data in a new way or for a new purpose, we will ask for your consent first.Contact
Sandboxed, Inc., 171 Chrystie St, Apt 4D, New York, NY 10002, United States, legal@getsandbox.app.