Privacy Policy
Effective date: 4 October 2026
Telos is a personal health and longevity tracker. It brings your own data (sleep, training, nutrition, protocols, blood results and related measures) into one place so you can see how it connects over time. This policy explains what we collect, why, who handles it, how long we keep it, and the control you have. It is written plainly on purpose.
Telos is operated by Marcus Caminiti ("Telos", "we", "us"), based in Australia. For any privacy question, contact hello@telossystem.com.
The short version
- We collect the health information you choose to log or connect, plus what is needed to run your account.
- Other members cannot see your data. We do not sell it, we do not show ads, and we do not run analytics or advertising trackers.
- Three features send content to an AI provider (Anthropic) when you use them: reading a lab report, estimating a meal from a photo, and writing notes on a finished workout. Details are in the AI section below.
- You can export your data, disconnect any source, and permanently delete your account from inside the app.
- Telos is for adults aged 18 and over. It is not medical advice.
What we collect
Account information. Your email address and an account identifier. If you sign in with Google, we receive your email address, name and profile basics from Google, and nothing more. We never see your Google password. Passwords you create with us are stored by our authentication provider in hashed form and are not readable by us.
Health and lifestyle information you enter. Depending on what you use, this can include sleep scores and sleep stages, weight, steps, resting heart rate, heart rate variability, workouts and exercise sets, food entries and calorie and nutrient estimates, habits, supplements and other protocols, blood test results, mood, energy and stress ratings, notes, your goals, and profile details such as name, date of birth, sex, height, country and activity level.
Information from sources you connect. If you connect Android Health Connect or Oura, we receive the data described in their sections below. Nothing is read from a source until you connect it.
Files and photos you choose to analyse. A lab report (photo or PDF) or a meal photo that you submit. See the AI section.
Feedback. Notes you send from the Feedback screen: the type, title, text, and your first name. If you ask for an idea to appear on the member board, its title is visible to other members. Your name is not shown with it.
Technical information. Our hosting and database providers automatically record standard operational data such as your IP address, the time of a request, and basic error details. We use it to run and secure the service.
What we do not collect. Your location, contacts, microphone, advertising identifier, or browsing history. Telos has no third-party analytics, advertising or tracking code.
How we use your information
- To run your account and sign you in.
- To store and show what you log, and to work out the estimates, trends and insights the app provides, such as calorie targets and charts.
- To provide the features you choose to use, including the AI features and connected sources.
- To respond to your feedback and support requests.
- To keep the service secure, fix faults, and meet legal obligations.
We do not sell or rent your information, we do not use it for advertising, and we do not use it to train any model of our own.
Health data from Android Health Connect
If you choose to connect Health Connect in the Android app, Telos asks Android for read access to: steps, sleep, resting heart rate, heart rate variability and weight. Telos only reads this data. It never writes anything to Health Connect. You can turn any of these permissions off at any time in Android Settings or in the Health Connect app, and Telos will stop receiving that data.
We use this data only to show it to you inside Telos and to calculate your trends and targets. The data is stored in your Telos account, protected as described under Security, and removed when you delete your account.
Telos's use and transfer of information received from Health Connect adheres to the Google Play User Data Policy, including its Limited Use requirements. In particular, we do not sell this data, we do not use it for advertising or to work out credit or insurance eligibility, and we do not transfer it to others except to run the service for you (our hosting and database providers), to comply with the law, or with your consent. People at Telos do not read your health data except where you ask us to look at a problem, where it is needed for security or abuse, or where the law requires it.
Oura
If you connect Oura, you sign in to Oura and approve access on Oura's own page. Telos stores the access token Oura issues so it can keep your data up to date, and reads daily sleep, activity, readiness, workouts, blood oxygen and heart health measures such as VO2 max. The token is held on our servers only and is never shown in the app. Disconnecting in Telos revokes the token with Oura and deletes it from our systems. Data already synced stays in your Telos record until you delete it or your account.
AI-powered features
Three features send content to Anthropic, an AI provider, through our own servers. Each runs only when you use it.
- Reading a lab report. The photo or PDF you submit is sent so the values can be read out and put into your blood results.
- Estimating a meal from a photo. The photo you take or choose is sent to estimate the foods and amounts.
- Workout notes. A summary of one finished session (exercises, sets, and your sleep, heart rate, steps and food figures around that day) is sent to write a short note about it.
Your account details (such as your email) are not sent with these requests. We use Anthropic's commercial API, and under its current terms content sent this way is not used to train Anthropic's models. Anthropic may keep it for a limited period for safety and abuse monitoring, as its own terms describe. The results are automated estimates and can be wrong. Check anything that matters, and do not use them for medical decisions. If you would rather not use these features, do not use them; the rest of Telos works without them.
Estimates are estimates
Figures Telos shows you, such as calorie targets, blood marker scores, insights and AI-generated notes, are calculated or estimated from standard formulas and the information you provide. They are not a prescription and not medical advice. Telos is not a medical device and does not diagnose, treat, or replace professional care. Decisions about your health should be made with a qualified professional.
Who handles your data
We use a small set of providers to run Telos. Each handles only what its job needs:
- Supabase: database and authentication. Stores your account and everything you log. Access is restricted at the database level so each account can only read and write its own records.
- Vercel: hosting and the server functions that run Telos.
- Google: sign-in, if you choose "Continue with Google". The app also loads its fonts from Google Fonts, which means Google can see your IP address when the app loads.
- Anthropic: the three AI features above.
- Oura: only if you connect it.
- USDA FoodData Central and Open Food Facts: when you search for a food or scan a barcode, the search words or barcode are sent to these public food databases through our servers. Your account details are not sent.
- Resend: sends a short notice to the operator when someone creates an account (the email address, sign-in method and time). It does not send email to you.
Telos is free and has no advertising, so no data is shared with advertisers or data brokers.
Who can see your data
Other members cannot. In the app, only you can see your records. As the operator, I can technically access the database in order to run and repair the service, and I do so only for support you ask for, security or abuse, or where the law requires it. I may disclose information if the law requires it or to protect people from serious harm.
If Telos is ever sold or merged with another business, your information could move to the new owner. You would be told first and could export or delete your data beforehand.
Reminders and notifications
If you turn on reminders in the Android app, they are scheduled on your phone itself. No notification service, push token or advertising network is involved, and no information about you is sent anywhere to produce them. You can turn them off in Telos or in Android Settings.
Storage on your device
Telos uses only the storage needed to keep you signed in and to run the app. It does not use advertising cookies or cross-site tracking.
Where your data is stored
Our providers may store and process data outside Australia, including in the United States and Europe. By using Telos you understand that your information may be handled in other countries under those providers' terms and security practices.
How long we keep it
We keep your data while your account is active. When you delete your account, your logs, settings, connected-source tokens and feedback are permanently removed from our live database. Our providers may keep routine backup copies for a limited period before they are overwritten, and they are not used for anything in that time. Server logs kept by our hosting providers are kept for the periods their own policies set. Content sent to Anthropic is kept only as described in the AI section.
Your choices and rights
- Access and export. Download a copy of your data from About me, then Data and privacy.
- Correct. Edit your profile and entries directly in the app.
- Disconnect a source. Disconnect Oura in Telos, and turn off Health Connect permissions in Android Settings.
- Delete. Delete your account and everything in it from About me, then Data and privacy. If you cannot sign in, email us from the address on the account and we will delete it within 30 days. The page at telossystem.com/delete-account explains this.
- Withdraw consent. You can stop using any feature, source or reminder at any time.
If you are in a place with specific data rights, such as under the Australian Privacy Principles or the GDPR, those rights apply and you can use them through the in-app controls or by contacting us. Health information is sensitive. By entering or connecting it, you agree to us handling it as described here. If you believe we have mishandled your information, contact us first, and you may also contact the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority.
Security
Data is encrypted in transit. Access to each account's records is restricted at the database level, and the keys for our AI features and connected sources are held only on our servers, never in the app. No system is perfectly secure, so we cannot promise absolute security. If a breach is likely to cause you serious harm, we will tell you and the relevant authority as the law requires.
Children
Telos is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will remove it.
Changes to this policy
If we change this policy, we will update the effective date above and, for material changes, tell you in the app or by email before they apply. If you do not accept a change, you can delete your account.
Contact
Marcus Caminiti · hello@telossystem.com · Australia