Privacy Policy

Last updated: September 12, 2026

1. Introduction

FinchQ is a health and wellness application for iPhone, iPad, and Apple Watch developed by Tightwire, Inc. (“Tightwire,” “FinchQ,” “we,” “us,” or “our”).

This Privacy Policy explains how information is processed when you use the FinchQ application, FinchQ-related services, and the website at iwantfinch.com.

Privacy is built into FinchQ. Much of the health and wellness information used by FinchQ is processed locally on your Apple devices. Certain optional and connected features require limited information to be transmitted to Tightwire or service providers acting on our behalf.

FinchQ does not use iCloud or CloudKit to store Apple Health information, FinchQ Scores, FinchQ Functional Age™ information, or other personal health information.

By using FinchQ or our website, you acknowledge the practices described in this Privacy Policy.

2. Privacy at a Glance

FinchQ is designed around the following principles:

• You choose which Apple Health information FinchQ may access.

• Much of FinchQ’s health and wellness processing occurs locally on your device.

• FinchQ does not use iCloud or CloudKit to store your personal health information.

• Certain connected features—including Q, Premium verification, My People text messaging, push notifications, support, and location-related features—require limited information to be transmitted off your device.

• FinchQ does not display third-party advertising.

• FinchQ does not sell your personal information or consumer health data.

• FinchQ does not use Apple Health information for advertising, advertising measurement, or cross-app tracking.

• You choose what information to share and with whom.

• You may revoke Apple Health, Contacts, Location, and Notification permissions through your Apple device settings.

• You may request access to or deletion of qualifying information maintained by Tightwire.

• Joining Function & Freedom by email is optional and separate from using FinchQ.

3. Information Processed on Your Apple Devices

Depending on the features you use and permissions you grant, FinchQ may process information on your iPhone, iPad, or Apple Watch.

Apple Health information

FinchQ may request permission to read or write selected information through Apple Health, including information relating to:

• Walking and mobility

• Walking speed

• Step length

• Walking asymmetry

• Double-support time

• Activity, steps, and distance

• Workouts

• Heart rate and heart-rate recovery

• Heart-rate variability

• Respiratory information

• Blood oxygen

• Electrocardiogram information

• Blood pressure

• Blood glucose

• Weight and body measurements

• Falls and mobility-related history

• Other health and wellness categories supported by FinchQ features

The exact categories available depend on your device, Apple Health information, FinchQ version, and permissions you grant.

Apple Health provides permission controls for individual information types. You may grant, deny, or later revoke those permissions through Apple Health or your Apple device settings.

FinchQ does not use Apple Health information for advertising, marketing, or cross-app tracking. Apple likewise restricts HealthKit information from advertising, marketing, and use-based data mining. 

Information you provide

FinchQ may also process information that you enter or make available to the app, including:

• Name or preferred name

• Date of birth or age

• Health and mobility preferences

• Personal goals

• Check-ins and responses

• Manual wellness entries

• Personal norms

• Tool and feature settings

• Notification preferences

• Reports you create

• Q conversation information

• Information about people you select through My People or My Doctors

Certain information is maintained locally on your device.

4. Local Storage, Apple Health, and iCloud

FinchQ uses local application storage for certain information required to operate the app.

FinchQ does not use iCloud or CloudKit to store:

• Apple Health information

• FinchQ Scores

• FinchQ Functional Age™ information

• FinchQ health-derived records

• Personal health or wellness information maintained by FinchQ

This reflects Apple’s current requirement that apps not store personal health information in iCloud. 

Apple itself may synchronize Apple Health information between Apple devices depending on your Apple Account and device settings. Any Apple-controlled synchronization is governed by Apple’s systems and privacy practices and is separate from FinchQ.

Deleting FinchQ does not necessarily delete information independently maintained by Apple Health.

5. Information Transmitted From Your Device

FinchQ does not transmit every item available to it through Apple Health.

Information leaves your device only when needed to provide a connected feature you choose to use or for limited operational purposes described below.

App-generated identifiers and service records

FinchQ may create an internal identifier associated with your installation.

That identifier may be used with limited server-side records needed for:

• Premium and trial access

• Subscription verification

• Q usage limits

• My People invitations and status

• Push-notification delivery

• Messaging controls

• Fraud and abuse prevention

• Service reliability and troubleshooting

We may also process limited technical information such as app version, request dates, service responses, errors, and operational usage counts where necessary to provide and protect FinchQ services.

6. Premium Access and App Store Purchases

Purchases and subscriptions are processed by Apple.

FinchQ does not receive or store your payment-card number, Apple Account password, or complete Apple billing information.

Apple may provide FinchQ with limited transaction information needed to determine and restore Premium access, including:

• Product identifier

• Subscription status

• Transaction identifiers

• Original transaction identifier

• Purchase or expiration date

• App Store environment

• Renewal or entitlement status

Tightwire may maintain this information together with an app-generated identifier to provide subscription access, restore purchases, prevent fraud, and resolve support issues.

7. Q

Q is FinchQ’s plain-language assistant.

When you choose to use Q, your request and selected FinchQ context needed to respond may be transmitted through Tightwire-operated infrastructure to OpenAI.

Depending on your request, information transmitted may include:

• Words you type or speak

• FinchQ Score or FinchQ Functional Age™ information

• Selected health or wellness measurements

• Trends, summaries, or personal norms

• Relevant profile context

• Recent conversational context

• Technical information needed to operate Q

You control whether to use Q.

Before FinchQ sends personal information to OpenAI, FinchQ presents an in-app disclosure that identifies OpenAI, describes the categories of information that may be transmitted and why, and asks for your explicit permission. If you decline, FinchQ does not send your personal information to OpenAI, and the app’s non-AI features remain available. You may withdraw this permission through FinchQ’s privacy controls; future transmissions to OpenAI will remain blocked unless you grant permission again.

Do not enter passwords, payment-card information, government identification numbers, complete medical records, or information you do not want transmitted for processing.

Tightwire may maintain limited operational information such as usage counts, request dates, status information, and error information as necessary to provide Q, enforce service limits, prevent misuse, and troubleshoot problems.

OpenAI states that data submitted through its API is not used to train its models by default unless the customer affirmatively opts in. 

FinchQ does not use Q conversations or health information for advertising.

Q may produce incomplete or incorrect information. Q is not an emergency service and is not a substitute for professional medical evaluation or advice.

Contacts, My People, and Text Messaging

My People allows you to select trusted contacts and use connected communication features.

FinchQ may request access to your Contacts so you can find and choose people to include in My People. Granting Contacts permission does not cause FinchQ to upload your entire address book. Contacts information is read on your device to help you select a person.

When you choose to invite a specific person to My People, FinchQ may transmit information about that selected person, including:

• Name

• Selected telephone number

• Relationship or contact label, where applicable

• Invitation status

• Consent or opt-out status

• Message-delivery information

• Information needed to associate the invitation with your FinchQ installation

Before an invitation or reinvitation is sent, FinchQ explains that the selected person's name and telephone number will be transmitted and asks you to confirm the action.

FinchQ transmits the selected information through Tightwire-operated server infrastructure and may provide the telephone number and communication information needed to Twilio, our text-messaging service provider, to deliver and manage My People invitations and messages you choose to send.

FinchQ may also use the selected telephone number to determine invitation status and manage the My People relationship.

When you choose to send a My People check-in or other supported message, information necessary to provide that communication may be processed through Tightwire-operated infrastructure and Twilio.

FinchQ does not upload your entire Contacts list merely because you grant Contacts permission.

Mobile telephone information, SMS opt-in information, and messaging consent are not sold, rented, or provided to third parties for their own marketing or promotional purposes.

Recipients may opt out of applicable text messages using the instructions provided in the message. Message and data rates may apply.

9. Fall and Safety-Related Communications

If you authorize access to fall-related health information, FinchQ may use that information to help calculate your FinchQ Score, provide mobility and fall-risk wellness insights, and support selected My People sharing features.

You remain in control of the information you choose to share and the people with whom you share it.

FinchQ is not an emergency-response service or professional monitoring service and should not be relied upon as a substitute for emergency services or professional medical-alert monitoring.

10. Push Notifications

If you enable notifications, FinchQ and its notification service provider may process:

• Push-notification tokens

• App-generated or provider-generated identifiers

• Device and app information

• Notification content

• Delivery information

• Information about interaction with a notification

FinchQ may use notifications to provide health and wellness alerts, reminders, safety-related notices, feature or service updates, and other information related to FinchQ features you use.

FinchQ currently uses OneSignal to help provide push-notification services.

You may disable notifications or change notification-preview settings through your Apple device settings.

Because notification content can appear on a locked device, consider disabling previews if other people may be able to view your screen.

11. Location Information

If you grant location permission, FinchQ may use approximate or precise location information for location-dependent features, including:

• showing or recording supported walking routes;
• determining your county or region for Health Alerts relevant to your area; and
• supporting selected information you choose to share through FinchQ features.

For regional Health Alerts, FinchQ may transmit latitude and longitude to a third-party geographic lookup service, currently the FCC Census API, to determine a county or regional code such as a FIPS code. FinchQ may store the resulting county or regional code locally so that location-relevant features can continue to operate.

To provide regional health information, FinchQ sends your device’s latitude and longitude to the Federal Communications Commission (FCC) Census Block API to determine the county FIPS code for your location. FinchQ then sends only that county or state code—not your coordinates—to Carnegie Mellon University’s Delphi Epidata API to retrieve public health statistics. FinchQ does not include your name, contact information, or FinchQ app-generated user or device identifier in either request.

FinchQ does not use location information for advertising or cross-app tracking.

You may change or revoke FinchQ’s location permission through your Apple device settings.

12. Reports and Sharing

FinchQ may allow you to create reports containing selected health, movement, wellness, or functional information.

Reports are created for your use. You decide whether to share them and select the recipient or destination.

When you share information:

• You select the recipient or destination.

• The information leaves FinchQ under your direction.

• Tightwire does not control how a recipient subsequently stores, uses, or redistributes it.

• The service through which you send the information may apply its own privacy practices.

Review report contents and recipients before sharing.

13. Website and Support Information

Website

Our website is hosted by Squarespace.

When you visit iwantfinch.com, Squarespace and related website services may process ordinary website information such as:

• IP address

• Browser and device information

• Pages viewed

• Date and time of visits

• Referring information

• General geographic information

• Cookies or similar website identifiers

Where applicable, website cookie controls may allow you to limit non-essential cookies.

FinchQ does not combine Apple Health information with website advertising profiles.

Support

When you contact FinchQ Support, we may receive information you choose to provide, including:

• Name

• Email address

• Device type

• Operating-system version

• FinchQ version

• Description of an issue

• Error information

• Screenshots or files you submit

• Content of your communication

Do not submit passwords, verification codes, payment information, government identification numbers, or complete medical records through support.

Function & Freedom Email Signup

You may voluntarily provide your email address on our website to join Function & Freedom.

Function & Freedom is separate from using FinchQ. You do not need to provide an email address to use FinchQ, and joining Function & Freedom does not create a FinchQ account.

If you subscribe, we may use your email address to send:

• The weekly Bird’s-Eye-View podcast

• Occasional blog posts and Function & Freedom notes

• Important FinchQ news and product updates

• Notice when FinchQ becomes available on the App Store

We currently use Squarespace Email Campaigns to manage the Function & Freedom mailing list and send these communications.

New subscribers may be asked to confirm their subscription by email before being added to the mailing list.

You may unsubscribe at any time using the unsubscribe link included in our emails.

FinchQ Launch Notification

You may voluntarily provide your email address on our website to be notified when FinchQ becomes available on the App Store.

This signup is separate from using FinchQ and separate from joining Function & Freedom. It does not create a FinchQ account.

We use the email address you provide for this purpose to send the requested FinchQ launch notification. We currently use Squarespace Email Campaigns to manage this mailing list and deliver the notification.

14. Service Providers

Tightwire uses service providers where necessary to operate FinchQ.

Depending on the feature you use, these may include:

Apple
Apple Health, Apple Watch functionality, platform services, notifications infrastructure, and App Store transactions.

Amazon Web Services
Tightwire-operated server infrastructure supporting connected FinchQ services.

OpenAI
Processing requests you choose to submit through Q.

Twilio
Applicable SMS and text-message delivery.

OneSignal
Push-notification delivery and related services.

Squarespace
Website hosting, website forms, Function & Freedom mailing-list management, and email campaign delivery.

Service providers receive information appropriate to the function they perform.

Service providers that process personal information on Tightwire’s behalf do so under applicable service agreements and data-processing terms. Those terms require appropriate limitations on use, confidentiality and security safeguards, and compliance with applicable data-protection law. Through these contractual requirements, Tightwire requires service providers to provide the same or equivalent privacy protection for personal information they process on FinchQ’s behalf, appropriate to the services they perform.

Tightwire requires service providers that process personal information on its behalf to protect that information in a manner consistent with this Privacy Policy and applicable law, to provide the same or equivalent level of privacy protection, and to use the information only as necessary to perform services for Tightwire, except where otherwise required by law.

Tightwire does not authorize service providers to use FinchQ Apple Health information for their own advertising.

Apple requires apps to disclose third-party data sharing and to ensure appropriate protection of user information. 

15. How We Use Information

We use information described in this Policy as reasonably necessary to:

• Provide FinchQ features you request

• Access authorized Apple Health information

• Calculate and display FinchQ information

• Personalize your FinchQ experience

• Provide Q responses

• Verify trials, purchases, and subscriptions

• Deliver My People invitations and applicable communications

• Deliver notifications

• Provide location-dependent features

• Create reports and facilitate sharing you initiate

• Enforce usage and messaging limits

• Prevent fraud, spam, misuse, and security incidents

• Diagnose errors and maintain service reliability

• Respond to support and privacy requests

• Comply with legal obligations

• Protect users, Tightwire, and others

FinchQ does not use Apple Health information or consumer health information to create advertising profiles.

16. When Information Is Disclosed

Information may be disclosed:

At your direction

When you choose to:

• Ask Q a question

• Invite someone through My People

• Send an applicable communication to a trusted contact

• Share a report

• Share information with a healthcare professional

• Use an Apple sharing tool

• Contact support

To service providers

When reasonably necessary to perform the connected service you request.

For legal, security, or safety purposes

We may preserve or disclose information where reasonably necessary and permitted or required by law to:

• Respond to valid legal process

• Meet regulatory obligations

• Protect FinchQ systems

• Prevent or investigate fraud, abuse, or unlawful activity

• Protect the rights or safety of users, Tightwire, or others

• Establish, exercise, or defend legal claims

Business transactions

Information may be transferred as part of a merger, acquisition, financing, restructuring, sale, or similar transaction, subject to applicable law and appropriate protections.

Mobile-message opt-in and consent information will not be transferred for third-party marketing or promotional purposes.

17. What FinchQ Does Not Do

FinchQ does not:

• Sell personal information

• Sell consumer health data

• Sell Apple Health information

• Display third-party advertising

• Sell or rent mobile telephone information

• Share SMS consent for third-party marketing

• Use Apple Health information for advertising

• Use personal health information for cross-app advertising tracking

• Share personal health information with data brokers

• Store personal health information in iCloud or CloudKit

• Upload your entire contact list merely because Contacts permission is granted

• Collect your Apple Account password

• Collect your complete payment-card information

18. Storage and Retention

Information stored locally

Certain FinchQ information is stored locally on your device.

Local information may remain until it is deleted through FinchQ, removed through applicable device controls, or removed when application storage is deleted, subject to Apple Health and other Apple-controlled systems.

Deleting FinchQ does not necessarily delete:

• Information independently maintained by Apple Health

• Reports you previously shared

• Information already received by another person

• Server-side subscription or entitlement records

• Messaging consent or opt-out records

• Push-notification service records

• Support communications

Information maintained by Tightwire

Tightwire retains server-side information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining security, preventing abuse or fraud, documenting messaging consent, resolving disputes, complying with legal obligations, and protecting legal rights.

When information is no longer reasonably necessary, we delete, deidentify, or otherwise dispose of it as appropriate, subject to legal and operational requirements.

Service providers may retain information according to their contractual, security, operational, and legal requirements.

Function & Freedom subscriber email addresses and subscription status

Function & Freedom subscriber information is retained while you remain subscribed and as reasonably necessary to maintain unsubscribe or suppression records, comply with legal obligations, and prevent unwanted future communications.

19. Security

Tightwire uses reasonable administrative, technical, and organizational safeguards designed to protect information appropriate to its nature.

These may include:

• Encrypted network connections

• Access controls

• Restricted administrative access

• Limited service credentials

• Data minimization

• Rate limits and abuse controls

• Security measures used by our service providers

No electronic system can be guaranteed completely secure.

If a security incident requires notification under applicable law, Tightwire will provide the required notifications. The FTC’s current Health Breach Notification Rule expressly addresses qualifying health apps and related technologies.