Last updated: July 25, 2026
This Privacy Policy explains how Phoenix ("we," "our," "the App") collects, uses, shares, and protects information when you use our mobile application, available on the Apple App Store, Google Play, Cafe Bazaar, Myket, and our website.
By using Phoenix, you agree to the collection and use of information as described in this policy. Phoenix is intended for users 18 years of age and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected personal data from a person under 18, we will delete that information promptly.
We collect only the information necessary to provide and improve the App's core functionality. We do not collect your phone number.
When you use Phoenix, you may voluntarily enter health-related information, such as symptoms, wellness notes, questions, or other content you submit within the app's chat or tracking features. This may be considered sensitive personal data under laws such as the GDPR and CCPA, and we treat it accordingly.
If the App requires an account, we collect an email address to create and secure your account. We do not collect your phone number or require it for registration.
We automatically collect certain technical information when you use the App, including:
If you purchase a subscription, our payment processor (see Section 3) collects purchase history, subscription status, and a device identifier to manage your subscription. We do not directly collect or store your payment card details.
We use third-party providers to operate parts of the App (see Section 3). These providers may process information on our behalf or independently generate diagnostic data (e.g., crash reports).
We use the information we collect to:
We do not sell your personal data. We do not use your health-related inputs to build advertising profiles about you. Phoenix does not currently display third-party advertising.
If our AI-powered features detect language suggesting you may be in emotional distress or crisis, the App will encourage you to reach out to a trusted person and may display general safety information and crisis-support resources appropriate to your app's language setting. Phoenix does not have access to your precise location or identity beyond your email address, and cannot contact emergency services on your behalf. If you are experiencing a medical or safety emergency, please contact your local emergency services directly.
Phoenix integrates with the following categories of third-party services. Each provider processes data under its own privacy policy and terms:
| Category | Purpose | Data Shared |
|---|---|---|
| AI / Large Language Model providers (AvalAI, Groq, and self-hosted Ollama as a fallback) | To process your inputs and generate the App's AI responses. If a provider is unavailable, requests automatically fall back to the next provider in this order. | The content you submit to the AI features (which may include health-related text) |
| Analytics, crash reporting, and push notifications (Firebase: Core, Crashlytics, Analytics, Cloud Messaging) | To understand app usage, fix bugs/crashes, and deliver push notifications. Firebase is not used for authentication or data storage — these are handled by our own servers (see Section 6). | Device identifiers, usage events, crash logs, push notification tokens |
| Subscription and payment processing (RevenueCat) | To manage subscriptions and in-app purchases across the App Store, Google Play, and web | Purchase history, subscription status, device identifier |
| App distribution platforms (Apple App Store, Google Play, Cafe Bazaar, Myket) | To distribute, install, and update the App on your device | Device/install identifiers and data required by each platform's own store policies |
We require our service providers to protect your data and use it only for the purposes we specify. We do not control how these third parties independently use anonymized or aggregated data for their own service improvement, subject to their own privacy policies.
We may share information:
We retain your information only as long as necessary to provide the App's services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time (see Section 9).
We use reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Account authentication and storage of your health-related content are handled by our own dedicated servers, rather than a third-party identity or database platform, so we can apply security controls tailored to sensitive wellness data.
For users accessing Phoenix through our Iran-specific distribution channel (Cafe Bazaar/Myket), the App and its Persian-language content are served through infrastructure operated for that market. All other users are served the full, multilingual version of the App (10 languages) through our global infrastructure.
Depending on your location, you may have the right to:
To exercise any of these rights, contact us using the details in Section 10.
You have the right to know what personal information is collected, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell your personal information.
Our legal basis for processing your data includes your consent, the necessity of processing to provide the App's services, and our legitimate interests in improving and securing the App.
We are committed to handling personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Because our App may collect sensitive information (including health and emotional/mental wellbeing information), we only collect this with your consent and take reasonable steps to keep it secure. If a data breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
Phoenix does not currently display third-party advertising of any kind. If this changes in the future, we will update this Privacy Policy before any such feature is introduced, and will describe what data, if any, is shared with advertising partners at that time.
You can request deletion of your account and personal data by contacting us at support@myphoenix.app, or directly from the app under Profile > Delete Account. We will process deletion requests within a reasonable timeframe, except where we are required to retain certain data for legal or legitimate business purposes.
When you delete your account, your name, email, and other identifying information are permanently deleted and cannot be recovered. Certain app data, such as journal entries and assessment results, may be retained only in an anonymized form that cannot be linked to your identity, for statistical analysis and to improve our services.
Phoenix is not directed to, and does not knowingly collect personal information from, individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.
If you have questions about this Privacy Policy or your data, contact us at:
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above and, where appropriate, through an in-app notice. Continued use of the App after changes take effect constitutes acceptance of the revised policy.