Health by Murano · Last updated: October 1, 2026
Health by Murano (the "App") is provided by MAS SOFT YAZILIM. This policy explains what data we use, why, and how. In short: your data is yours. No ads, no tracking, no selling of data.
What we read (with your permission): sleep duration and stages, heart rate variability (HRV), resting heart rate, heart rate, steps, active energy, exercise minutes, weight, height, VO2 max, date of birth (only to show your age), biological sex, workouts, workout distance and routes of outdoor workouts (to show them on a map).
What we write (with your permission): your workouts and the routes of outdoor workouts; calories, protein, carbohydrates and fat from your food log; water.
Why: daily readiness score, recovery status, training and weight suggestions, progress charts.
HealthKit data is never used for advertising, never given to third parties and never stored in iCloud (other than Apple Health's own sync). You can change permissions at any time in iPhone Settings → Health → Data Access & Devices.
Your workout logs, program, daily counters, body measurements, food log, scanned packaged products, coach chat and progress photos are kept in the App's on-device storage. A short summary for the Home Screen and watch face widgets (today's workout, readiness score, streak) is written only to a shared folder on your device. Sync between iPhone and Apple Watch uses Apple's encrypted connection. Progress photos never leave your phone.
If you start an outdoor walk, run, ride or hike on your watch, your location is used only during the workout to record your route and distance. The route is saved only to Apple Health; it is not sent to our server.
If you sign in with Apple or Google, the following is stored on our server:
Why: backup, moving your data to a new phone, and, if you connect it, letting your AI assistant read your data.
Infrastructure: Supabase (database and sign-in). Data is transferred over encrypted connections (HTTPS). Each record can only be read by your own account (row-level security).
When you use this feature, the photo you choose and any short description you add are sent through our server (Cloudflare) to Anthropic's Claude model to estimate calories and macros. The photo is not stored or saved; only the estimate is returned to you. Under its commercial API terms, Anthropic does not use this content to train its models. You don't have to use this feature; you can also add foods by searching the list.
When you scan a product's barcode, only the barcode number is sent to the open, free Open Food Facts database (openfoodfacts.org) to look up nutrition values. Your account, name and health data are not sent. Found products are stored on your phone so they can be found offline next time.
If you ask the in-app coach a question, your messages and a short summary (your workouts from the last 3 weeks, your program, records, 14-day averages of sleep/HRV/resting heart rate/steps, today's readiness score and food totals) are passed through our server (Cloudflare) to Anthropic's Claude model to generate a reply. Your name, email and location are not sent. Messages and the summary are not stored or logged on our server, and under Anthropic's commercial API terms they are not used to train models. You're asked for consent before first use. The chat stays only on your phone and you can delete it anytime. The coach does not give medical advice.
If you turn on Friends, the username and display name you choose can be searched by other users. People who follow you see only your weekly totals: number of workouts, number of sets, total weight lifted, streak and level. Health data such as sleep, heart rate, HRV and weight, and your workout details, are never shared. You can make your profile unsearchable, remove followers, block and report users. When you turn the feature off, your profile, follows and shared weekly totals are deleted from the server. Reports are kept only to review abuse.
If you share your program with a link, only the program (days, exercises, sets and reps) is stored on our server for one year and anyone with the link can view it. Your notes, weekly adjustments and health data are not shared. Sharing as a file does not use our server.
If you connect your own Claude account to the App's server, Claude can read your data and suggest program changes only through the connection you approved. You can remove the connection at any time in Claude's settings.
Payments are handled entirely by Apple. We never receive your card or payment details; the App only sees whether a purchase is valid.
The App is not a medical device and does not provide medical advice. The readiness score, coach replies, suggestions and calorie estimates are for information only. If you have a health condition, or before starting a new exercise program, consult a doctor.
The App is not directed at children under 13, and we do not knowingly collect data from them.
You have the right to access, correct, delete and export your data, and to object to its processing. The App includes CSV export, full backup and account deletion. For any other request, contact us; we will reply within 30 days.
If we update this policy, we will publish the new version on this page with its date. We will also announce significant changes in the App.
MAS SOFT YAZILIM · muranocrew@gmail.com