Your data lives with you. That is the whole design.

Effective 26 August 2026. This policy covers entrainhealth.com and the Entrain app, on the web and in the iOS and Android apps. Entrain is operated by SOX MEDIA LLC, a Nevada limited liability company. You can reach us any time at hello@soxnews.net.

The short version

There are no accounts. Your logs, readings and settings live in your own browser or on your own phone, not on our servers.
We never sell your data, and there is no advertising, no ad trackers and no third-party analytics anywhere on Entrain.
A few features reach out to other services when you use them: Oura sign-in, Ask Entrain, and the Sunday Letter. Each is described plainly below, and each is optional.
You can export everything as one file, or erase everything, from Settings inside the app at any moment.

What stays on your device

Everything you record in the Entrain app is stored locally on the device you use it on: your check-ins, moods, sleep and readiness readings, workouts and training sessions, weight, meals, lab values you type in, cycle dates, supplement routines, protocols, trips, your Ask Entrain conversation, and your settings. There is no Entrain account and no Entrain database holding this. If you use Entrain on two devices, each keeps its own copy.

Because the data lives with you, it also leaves with you. The app's Settings offer an export of every log, setting and cached reading as a single JSON file, and an erase that removes all of it from the device immediately and completely. Connection credentials are never included in an export.

The Bloodwork Mirror on this site works the same way: a lab PDF you drop in is read on your device, and nothing is uploaded.

Oura

If you connect an Oura ring, you sign in on Oura's own pages using OAuth. With your permission, Entrain reads your profile, daily summaries, sleep, heart rate, workouts and blood oxygen from the Oura API. The access tokens Oura issues are kept only on your device. Because Oura's API cannot be called directly from a browser, requests pass through a small relay we run; the relay forwards your token and Oura's reply without storing either, and never writes them to a log.

Readings fetched from Oura are cached on your device so the app works offline. Disconnecting Oura in Settings deletes the tokens and every cached reading from the device. You can also withdraw Entrain's access from your Oura account at any time on Oura's website, under authorised applications.

Apple Health and Health Connect

On iPhone and Android, Entrain can ask your permission to read from Apple Health (HealthKit) or Android Health Connect, so sleep, steps, workouts, heart rate, resting heart rate, heart rate variability, body temperature, blood oxygen, weight and active energy from your other wearables can appear in Entrain. Access is read-only; Entrain never writes to your health records. These readings follow the same rule as everything else: they stay on your device, cached exactly like the Oura readings. We do not transmit HealthKit or Health Connect data to our servers, we never use it for advertising or marketing, and we never sell it or share it with data brokers. You can withdraw permission at any time in your phone's health settings, disconnect inside Entrain to delete the cached readings, and erasing the app's data removes everything that was read.

Ask Entrain

When you ask a question, the app builds a small summary of your own data on your device, things like recent sleep averages, training totals, lab trends and cycle phase, and sends it with your question to our server, which passes it to OpenAI to compose the answer. Our server adds nothing, stores nothing and keeps no record of your question. OpenAI processes the request to generate the reply under its API terms, which do not permit using the content to train its models. Ask is optional, and only what appears in that summary and your question travels; if there is something you would rather keep entirely on your device, simply leave it out of your question.

If you choose to use your own OpenAI key instead, it is stored only in your browser and requests go directly from your device to OpenAI.

The Ask, Hypothesis and Shelf Audit tools on this site work similarly: what you type, select or photograph is sent to our server and on to OpenAI to compose the answer, and is not stored by us. The Shelf Audit also looks products up in the NIH Dietary Supplement Label Database.

The Sunday Letter

If you subscribe to our weekly email, your email address goes to Mailchimp (an Intuit company), which we use to send the letter. That is the only thing it is used for. Every letter carries an unsubscribe link, and unsubscribing ends it. You can also ask us to delete your address from the list entirely by emailing hello@soxnews.net.

Hosting and server records

Entrain is hosted on Vercel. Like almost every service on the internet, Vercel's infrastructure keeps short-lived technical records of requests, such as IP address, browser type and the page requested, which we rely on for security and to keep abusive traffic out. We use these only to run the service. We do not build profiles from them, and we place no analytics or advertising scripts on any page.

Location

The app can use your location, only if you grant it, to set local sunrise and sunset times. The coordinates are kept on your device with your other settings and are not sent to us. You can always pick a city by name instead.

What we never do

We never sell your personal information, and we never share it for advertising.
We show no ads and run no ad or analytics trackers.
We do not use your health data to train any model.
We do not follow you across other apps or websites.

Your rights and choices

Because your records live on your device rather than with us, the most direct way to exercise your rights is inside the app: export gives you a complete copy, erase deletes everything, and disconnecting Oura removes that link and its cache. For anything we do hold, the Sunday Letter list and messages you have sent us, you can ask us to access, correct or delete it by writing to hello@soxnews.net.

Depending on where you live, laws such as the EU and UK GDPR, the California Consumer Privacy Act and Washington's My Health My Data Act give you specific rights over personal and health information, including access, correction, deletion and portability, and protection from discrimination for exercising them. We honour these requests for everyone, wherever you live, and we respond within the timelines those laws set. Since we do not sell or share personal information for advertising, there is nothing to opt out of, but you may still ask and we will confirm it in writing.

Retention

Your records stay on your device until you erase them or remove the app's stored data. Ask Entrain requests are processed and not retained by us. Vercel's technical request records are kept briefly by Vercel under its own retention practices. Your Sunday Letter address stays with Mailchimp until you unsubscribe or ask us to delete it. Emails you send us are kept as long as needed to help you and to meet our legal obligations.

Children

Entrain is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, please use Entrain with a parent or guardian involved. If you believe a child has given us personal information, write to us and we will delete it.

International visitors

Entrain is operated from the United States, and the services we use, Vercel, OpenAI and Mailchimp, process requests there. If you use Entrain from outside the United States, the small amount of information that does travel, an Ask request or a newsletter address, is processed in the United States under this policy.

A note on medical privacy laws

Entrain is a wellness companion, not a healthcare provider or health plan, so the information you keep in Entrain is not held under HIPAA. The protections described on this page, local-first storage, no sale, no advertising, and your rights above, are what apply.

Changes to this policy

If we change how Entrain handles information, we will update this page and its effective date, and for meaningful changes we will say so clearly on the site and in the app before they take effect.

Who we are

SOX MEDIA LLC, a Nevada limited liability company.
Business address: 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States.
Registered agent: 732 S 6th St STE R, Las Vegas, NV 89101, United States.
Email: hello@soxnews.net