ComoApp is built so that your health information stays on your own device by default. Nothing about your conditions, foods or plans needs to be sent to us to be useful to you. This page explains, in plain terms, what "local-only" means, why we chose it, and how it fits with your rights under data-protection law.

What "local-only" actually means

Local-only means the sensitive details you enter — your conditions, your tolerances, the swaps the app suggests — are stored on your device, not gathered on a central server tied to your name. In practice: the reconciliation happens where you are, and your list of conditions is not something we hold, sell, or mine. If it lives on your phone, it cannot leak from ours.

Health data is special — the law says so too

This is not only our preference. Under the EU General Data Protection Regulation, data concerning health is "special category" data, given extra protection precisely because it is so sensitive (GDPR, Art. 9). Data-protection law also rests on data minimisation — collecting only what you genuinely need (GDPR, Art. 5). The most reliable way to honour both is not to collect the data centrally in the first place.

Your health should not be a growth channel

Many free health apps are built on a quiet exchange: the tool is free because your data is the product. We think that trade is wrong for something this intimate. The value of ComoApp is helping you reconcile conflicting advice — not accumulating a profile of your illnesses to monetise. When your data never leaves your device, there is nothing to sell, and no incentive to collect more than you need. It also changes the incentives behind the whole product: with nothing to harvest, every design choice can be about serving you, rather than about keeping you — and your data — around for as long as possible.

What this means for you in practice

  • You hold your data. Your conditions and plans stay on your device; you are not building a health profile on our servers.
  • Less to breach. Data we never collect is data that cannot be leaked, subpoenaed, or sold in a bankruptcy.
  • Yours to clear. Because it is local and yours, you can wipe it or move on without asking us to delete a copy we were keeping.

Honest limits

Local-only is not magic. Data on your device is only as safe as the device itself, so a screen lock and up-to-date software still matter. And if we ever add a feature that genuinely needs to send something off-device, we will say so plainly, ask first, and keep it to the minimum — never quietly switch the default. ComoApp is a wellness guide, not a medical service, and that same plainness applies to how we treat your data.

The safest data is the data we never hold. Privacy-first is not a feature we added — it is a decision we made before writing the first line.