QuietHabit Sensitive Information Policy
Effective Date: April 1, 2026
1. Overview
QuietHabit is a wellness and personal care service that helps users record urine test results, track wellness marker history, and build personal self-care habits.
QuietHabit is not a medical diagnosis, treatment, disease prevention, or professional medical advice service.
Because the Service may process health-related information, certain data may be considered sensitive information under applicable law. This Sensitive Information Policy explains how the Company processes and protects such information.
2. Purpose and Scope of Sensitive Information Processing
The Company processes sensitive information only to provide the Service and only within the scope necessary for the purposes described below.
| Category | Items Processed | Purpose | Retention Period |
|---|---|---|---|
| Health Test Result Data | Urine test results, scan results, test history | Storing urine test results, managing history, displaying previous records | Deleted upon account termination |
| Wellness Marker Values | Urobilinogen, glucose, bilirubin, ketone, specific gravity, occult blood, pH, protein, microalbumin, creatinine, nitrite, leukocytes and related result values | Providing wellness trend analysis and self-monitoring features | Deleted upon account termination |
| Personal Care Records | Test frequency, wellness routine records, self-monitoring history | Supporting personal care routines and wellness habit formation | Deleted upon account termination |
| User-entered Health-related Notes, if provided | Notes, symptoms, memo, or other voluntarily entered information | Helping Users manage personal wellness records | Deleted upon account termination |
3. Legal Basis for Processing Sensitive Information
The Company processes sensitive information based on the User's separate consent in accordance with applicable personal information protection laws, including Article 23 of the Personal Information Protection Act of Korea where applicable.
Users may refuse to consent to the processing of sensitive information. However, if consent is not provided, certain core features of the Service, including test result storage, history management, wellness trend analysis, and personal care routine support, may not be available.
4. Purpose of Sensitive Information Processing
The Company processes sensitive information for the following purposes:
- Recording and storing urine test results
- Displaying test history and wellness marker trends
- Providing optional AI-generated non-medical wellness summaries through Anthropic Claude with the User's explicit consent
- Providing self-monitoring and wellness tracking features
- Supporting personal care routines and wellness habit formation
- Providing reminders, result-related notifications, and service guidance
- Improving the accuracy, usability, stability, and quality of the Service
- Responding to User inquiries related to test results or app usage
- Preventing misuse, technical errors, and abnormal data processing
The Company does not use sensitive information for medical diagnosis, medical treatment, disease prediction, disease monitoring, insurance evaluation, employment screening, credit evaluation, or other unrelated purposes.
5. Wellness and Medical Disclaimer
QuietHabit is a wellness and personal care service.
The Service is intended to help Users build wellness habits, record personal wellness indicators, and monitor changes over time for general self-care purposes.
The Service does not provide medical diagnosis, medical treatment, disease prevention, disease monitoring, or professional medical advice.
The test results and wellness information provided through the Service are for general informational, personal care, and self-monitoring purposes only.
Users should consult a qualified healthcare professional if they have abnormal results, symptoms, medical concerns, or questions about diagnosis, treatment, medication, or medical decisions.
The Company does not guarantee that the Service can detect, diagnose, treat, prevent, monitor, or cure any disease or medical condition.
6. Analytics and Advertising Use of Sensitive Information
The Company does not intentionally use sensitive information for targeted advertising, insurance evaluation, employment screening, credit evaluation, or discriminatory decision-making.
The Company may use analytics tools such as Google Analytics 4 to analyze general service usage, improve app functionality, and understand how users interact with the Service.
The Company may use Google Ads SDK and related Google advertising tools to measure advertising performance, app installs, and campaign conversions.
Where analytics or advertising tools are used, the Company will take reasonable steps to avoid sending directly identifiable sensitive health information to such tools unless permitted by law and consented to by the User where required.
Analytics and advertising processing is intended for service improvement and campaign performance measurement, not for medical diagnosis, treatment, disease prediction, or medical decision-making.
Users may limit advertising tracking or reset advertising identifiers through their device settings.
7. Third-Party AI Service: Anthropic Claude
With the User's explicit consent, QuietHabit may use Anthropic Claude, a third-party AI service provided by Anthropic, to generate non-medical wellness summaries and personal care insights based on the User's urine wellness marker values.
Sensitive information may be processed by Anthropic Claude only for the limited purpose of generating wellness and personal care summaries requested through the Service. The AI-generated summary is provided for self-monitoring and general wellness reference only.
Data that may be sent to Anthropic Claude includes:
- Urine wellness marker values, such as urobilinogen, glucose, bilirubin, ketone, specific gravity, occult blood, pH, protein, microalbumin, creatinine, nitrite, and leukocytes
- Test date and test history context necessary to generate a wellness summary
- General app context needed to provide the requested AI wellness summary
- A pseudonymous user ID where necessary for service operation, abuse prevention, or technical support
QuietHabit does not intentionally send the User's name, email address, password, precise location, payment information, contact list, or government-issued identification information to Anthropic Claude for AI wellness summary generation.
Users may decline AI processing. If the User does not consent, QuietHabit will not send the User's sensitive information to Anthropic Claude, and AI wellness summary features may be unavailable.
Anthropic Claude is not used to provide medical diagnosis, medical treatment, disease prediction, disease monitoring, insurance evaluation, employment screening, credit evaluation, or discriminatory decision-making.
The Company manages and supervises third-party AI processing to ensure that sensitive information is processed securely and only within the scope necessary to provide the AI wellness summary feature.
8. Consignment of Sensitive Information Processing
The Company may entrust sensitive information processing to external service providers only to the extent necessary for service operation.
| Vendor | Entrusted Work |
|---|---|
| Supabase Inc. | Health data storage, database management, authentication-related data management |
| Google Firebase | Push notification delivery, crash analytics, app performance monitoring |
| Google Analytics 4 | Service usage analytics and app event analysis, excluding direct medical diagnosis or treatment use |
| Google Ads SDK / Google Ads | Advertising performance measurement, app install attribution, and campaign conversion tracking, excluding medical diagnosis or treatment use |
| Anthropic Claude | Optional AI-generated non-medical wellness summary and personal care insight generation with the User's explicit consent |
| Cloud infrastructure and hosting providers used by the Company | Secure server hosting, storage, backup, and system operation |
The Company manages and supervises entrusted vendors to ensure that sensitive information is processed securely and only within the entrusted scope.
9. Third-Party Disclosure of Sensitive Information
The Company does not provide sensitive information to third parties in principle.
Sensitive information may be provided to a third party only in the following cases:
- The User has provided separate prior consent
- Disclosure is required by applicable law, court order, government request, or legal procedure
- Disclosure is necessary to protect the life, safety, or rights of the User or others, within the scope permitted by law
The Company does not sell, rent, or trade sensitive information.
10. International Transfer of Sensitive Information
Some sensitive information may be stored or processed through global cloud infrastructure or service providers located outside the User's country of residence.
The Company may process sensitive information internationally through service providers such as Supabase, Google Firebase, Google Analytics 4, Google Ads SDK, Google Ads, Anthropic Claude, and cloud infrastructure providers where necessary for service operation, storage, analytics, notification delivery, advertising performance measurement, and optional AI wellness summary generation.
The Company takes reasonable measures to ensure that such service providers apply appropriate safeguards for sensitive information protection.
11. Protection Measures for Sensitive Information
The Company takes reasonable technical, administrative, and physical measures to protect sensitive information, including:
- Secure storage of health-related data
- Encryption or equivalent protective measures where applicable
- Access restriction based on authorization
- Minimization of internal access to sensitive information
- Use of security-managed cloud infrastructure
- Monitoring and prevention of unauthorized access
- Deletion of sensitive information upon account withdrawal, unless retention is required by law
Access to sensitive information is restricted to the account holder and authorized personnel or service providers only where necessary for service operation, security, or support.
12. Retention and Deletion of Sensitive Information
Sensitive information is retained only while the User maintains an account or as otherwise required by law.
Upon account withdrawal, sensitive information, including test result history and wellness marker records, will be deleted without undue delay unless retention is required by applicable law.
Users may also request deletion of sensitive information at any time by contacting the Company.
Analytics and advertising-related event data may be retained according to the retention settings of Google Analytics 4, Google Ads, Google Ads SDK, and applicable legal requirements. AI wellness summary processing data may be retained only for the period necessary to provide the requested feature or as otherwise required by law. The Company does not intentionally use such data for medical diagnosis, treatment, disease prediction, disease monitoring, or discriminatory decision-making.
13. User Rights
Users may exercise the following rights regarding sensitive information at any time:
- Request access to sensitive information
- Request correction of inaccurate information
- Request deletion of sensitive information
- Request suspension of processing
- Withdraw consent to sensitive information processing
- Withdraw membership and delete related data
- Limit advertising tracking through device settings where available
- Decline or withdraw consent for AI processing through in-app settings or by contacting the Company
Users may exercise these rights through:
In-app: Settings > Withdraw
Email: support@myquiethabit.com
The Company may request identity verification before processing such requests.
14. Notice of Changes
If this Sensitive Information Policy is amended, the Company will notify Users at least 7 days in advance through an in-app notice, website notice, email, or other reasonable method.
If changes materially affect the processing of sensitive information, the Company may obtain separate consent where required by law.