Understand the data model before you join.
Symptovue is planned around optional sources, no screen-content capture, explicit AI consent, and deletion controls. The privacy story should be visible in the product, not hidden in legal copy.
On your device
- Raw photos/media
- Posture check-ins where possible
- Local review
Your private account
- Pain logs
- Derived usage aggregates
- Exports and settings
Only with separate consent
- AI pattern review
- Food photo sent to a named vendor
- Peak-privacy zero-retention route
- Later cohort contribution
Data source controls
What is required, optional, and separately consented.
| Data | Required? | Where it lives | User controls |
|---|---|---|---|
| Pain logs and body-map points | Core app data | Your private account; raw user photos stay private/local where possible | Edit, export, delete |
| Food photo sent for vendor analysis | Separate opt-in | A named third-party vendor receives the photo or its minimized derivative; on-device analysis sends it nothing | Stored consent required before any send; withdraw at any time |
| Desktop work-session metrics | Optional | Derived aggregates only | Pause, disconnect, uninstall |
| Camera or posture check-ins | Optional | On device wherever possible | Intentional sessions only |
| AI pattern review | Separate opt-in | Minimized structured observations | Consent required before use |
| Peak-privacy cloud AI | Paid tier plus AI opt-in | Zero-retention/no-training endpoint; metadata-only provider-call logs | Subscription state, AI consent, deletion |
| Later cohort contribution | Separate opt-in | De-identified aggregate store | Off by default; opt out later |
Food photos
Analysing a photo here is not the same as sending it away.
Analysis that runs on your device sends no photo, image bytes, OCR text, or anything derived from the image to a third party. Sending a photo, or a minimized derivative of it, to a named third-party vendor is a separate act that needs your stored consent — and declining that consent never switches off analysis that never left your device.
Today: No analysis provider is enabled. No food-photo analysis provider is enabled yet — not on this device and not in the cloud. Your picture is not sent anywhere and nothing is derived from it. This is the state Symptovue is in today.
| State | What it means | What leaves your device | Active today? |
|---|---|---|---|
| Analysis that runs on our servers, not a vendor's | The photo is uploaded to our own service, where a provider we run reads it. It does not go to any third-party vendor, and nothing derived from it does either — you do not consent to cloud AI to get this. It is not analysed on your device: the photo does leave it, to us. | The photo, to our own service only — never to a third-party vendor | Not until an analysis provider ships |
| Analysis by a named vendor, because you agreed to it | You gave stored consent for cloud analysis, so the photo or a minimized derivative of it is sent to the third-party vendor named on the consent screen. That send is the only way an image leaves your device, and you can withdraw the consent at any time. It is a separate route from the cloud AI pattern review, which carries derived, minimized observations and never a photo. | The photo or its minimized derivative, to the named vendor only | Not until an analysis provider ships |
| You declined the vendor route | No photo, and nothing derived from one, is sent to any third-party vendor. Declining covers the vendor route only: where an on-device provider is available, the analysis that never left your device is unaffected. | Nothing — no photo, image bytes, OCR text, or derived image payload | Not until an analysis provider ships |
| No analysis provider is enabled | No food-photo analysis provider is enabled yet — not on this device and not in the cloud. Your picture is not sent anywhere and nothing is derived from it. This is the state Symptovue is in today. | Nothing — no photo, image bytes, OCR text, or derived image payload | Yes |
Peak-privacy cloud AI
The paid privacy tier adds a zero-retention route.
When a peak-privacy user consents to cloud AI, Symptovue routes only derived-only, minimized structured observations to a configured zero-retention, no-training endpoint — the provider is contractually bound by a data-processing agreement (DPA) to store nothing and never train on the data. Symptovue stores provider-call metadata such as model, latency, estimated tokens, and cost, but not prompt or response content for that peak-privacy call.
Free and standard users keep the same private-by-architecture defaults: on-device-first behavior, explicit AI consent, minimized cloud payloads, and no raw photos, motion frames, screen content, keystrokes, URLs, or window titles in cloud AI requests.
Privacy FAQ
Specific answers beat vague reassurance.
What does the computer companion collect?
The planned desktop companion collects derived work-session metrics such as active computer time, longest unbroken session, breaks, and late-night use.
Does it watch my screen?
No. The planned companion does not capture keystrokes, screenshots, URLs, clipboard contents, document names, window titles, or screen content.
What about iPhone screen time?
Apple keeps exact iPhone screen-time totals sealed. Symptovue will use platform-dependent phone context where available; iPhone support should be considered coarse daily bands, not exact minutes.
Does the camera run continuously?
No. Posture and desk setup ideas are framed as intentional check-ins, not continuous monitoring. Camera-derived work should stay on device wherever possible.
Can I delete my data?
Yes. The product plan requires account and data deletion controls, plus clear explanations of what is optional and what happens when data sources are disconnected.
What gets sent to AI?
AI pattern review is planned as explicit opt-in. The privacy model calls for minimized structured observations, not raw media or hidden third-party sharing.
Pre-launch waitlist
Help shape the pain tracker for desk workers.
Join for product updates and research invitations. The first release is being built, and concept visuals are labeled until real screenshots exist.
- No spam; product updates only
- Unsubscribe anytime
- No health details collected here