Terms of Service

Sensus - Body Literacy. Powered by You.

Effective Date: February 19, 2026  |  Last Updated: June 24, 2026

---

1. Agreement to Terms

1.1 Acceptance

By downloading, installing, accessing, or using the Sensus mobile application ("App"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the App.

1.2 Eligibility

You must be at least 13 years of age to use the App. If you are between 13 and 18 years of age (or the age of majority in your jurisdiction), you must have permission from a parent or guardian who agrees to these Terms on your behalf.

By using the App, you represent and warrant that you meet these eligibility requirements. The App is rated 13+ on the Apple App Store and enforces a 13+ minimum through an in-app date-of-birth check during onboarding.

1.3 Updates to Terms

We may update these Terms from time to time. We will notify you of material changes through the App at least 30 days before they take effect. Your continued use of the App after changes become effective constitutes acceptance of the updated Terms.

1.4 Operator

The App is operated by Leilani Matovina, sole trader, Sydney, New South Wales, Australia ("Sensus," "we," "us," or "our").

2. Description of Service

2.1 What Sensus Is

Sensus is a wellness tracking application that enables you to:

• Log and track body sensations, discomfort, and wellness observations via a rapid check-in flow with AI-assisted data extraction
• Review, edit, and correct AI-extracted data before saving
• Answer optional micro-questions during check-in to provide additional context across dimensions such as social connection, stress sources, nutrition quality, routine disruption, medication status, substance use, and (if opted in) menstrual cycle phase
• If your onboarding profile indicates competitive athlete activity level, complete an optional daily two-question structured follow-up at the end of your check-in flow covering validated sport-science dimensions
• View a daily Body Forecast - a prediction of how your body may feel based on your patterns, health data, weather data, and community trends, computed on your device
• Respond to your daily Body Forecast with a one-tap "Daily React" (Spot on, Better, or Worse, or "something's off" which opens the full check-in): a quick subjective note of how today feels compared with the App's read
• View Movement Capacity - an on-device estimate of how recovered each muscle group is after your workouts, shown as qualitative recovery states and a soft "ready when" window (never a precise per-muscle number); optionally tell the App which split a strength workout trained or whether an area still feels sore (one-tap categorical inputs)
• Search your body with Ask Sensus and SensusAI - get grounded answers from your data and community research
• Receive Discovery Cards - automated insights surfaced from your data that connect patterns you may not have noticed
• Track your journey through progressive milestones that indicate when new analytical capabilities become available based on your unique logging days
• View patterns, trends, and at-a-glance statistics derived from your logged data
• Receive on-device automated pattern detection, including flare prediction, seasonal pattern analysis, phantom correlations, and recovery trajectory comparisons
• Optionally read health metrics from Apple Health (read-only) to enrich your check-in context
• View cross-modal body signals that correlate your Apple Health metrics with your logged body states (computed entirely on your device)
• Receive fitness-aware cardiac interpretation - the App adjusts what it considers typical ranges for health metrics based on your self-reported activity level (computed entirely on your device)
• Optionally allow reduced-accuracy location access (city-level, approximately 5 km) so the App can retrieve local weather data via Apple WeatherKit to provide weather-body context for your check-ins
• Explore movements and exercises organised by body region, and rate your response to them
• View automatically inferred verified outcomes that track how your body responded to movements over 28-day windows
• Generate healthcare provider summaries for your personal use
• Optionally contribute de-identified data to community insights ("Consensus") via automatic upload to Google Cloud Firestore
• View community health metric signals showing what health metrics correlate with how people feel, based on aggregated categorical health pattern flags from consenting contributors
• View population-level wellness research drawn from peer-reviewed studies, clinical guidelines, and established medical resources, presented as research findings rather than personal recommendations
• View "The Consensus" cohort visualisation (introduced v1.8): a contextual surface that places your own position among a constellation of peer positions representing the cohort that has been matched to you by similarity of pattern signatures. The visualisation displays only aggregate counts and bucketed distributions; no per-peer identity, signature, or check-in is ever exposed. Cohort matching is only surfaced when at least 5 sufficiently similar peers have contributed. If you have not enabled community sharing, the surface shows a locked preview only - no real cohort data is displayed - with an option to opt in. If you have opted in but do not yet have enough data (or too few similar peers have contributed), the surface falls back to population-level wellness research drawn from medical literature.
• Optionally create an account by signing in with Apple or Google to save a contact identity - entirely optional, with "Maybe later" always available so you can use the App fully without one (see Section 6.6). Your account, contact record, and all app data can be deleted in-app at any time.
• Optionally link a practitioner ("Care Team", introduced v1.8.3): if you are working with a physiotherapist, clinician, or other practitioner who uses Sensus, you can link with them by invite code so they can follow your check-ins between appointments, and exchange in-app messages with them (see Section 3.19)
• Optionally use AI-powered features (powered by Google Gemini via Firebase AI / Vertex AI) for personalised insights, Body Forecast narratives, weekly reports, post-check-in intelligence, and conversational chat
• Receive optional notifications for check-in reminders, daily morning Body Forecast alerts, pattern alerts, streak reminders (opt-in), evening check-ins, movement follow-ups, body-memory notifications ("Sensus Noticed"), and - if you have linked a practitioner - a push notification when they message you

2.2 What Sensus Is NOT

3. Health and Medical Disclaimer

3.2 No Healthcare Provider Relationship

Use of the App does not create a doctor-patient, therapist-patient, or any other healthcare provider relationship between you and Sensus or its affiliates.

3.3 Consult Healthcare Providers

3.4 Emergency Situations

3.4.1 Mental Health Emergencies

3.5 Movement and Exercise

The movement suggestions in the App are for educational exploration only. Before beginning any movement or exercise program:

• Consult with your healthcare provider, especially if you have existing health conditions
• Stop immediately if you experience pain, discomfort, or adverse symptoms
• Listen to your body and work within your own limitations
• Understand that results vary and are not guaranteed

3.6 Pattern Detection, Predictions, and Alerts

The App may identify patterns in your logged data, including "Red Flag" alerts, flare predictions, recovery trajectory comparisons, cross-modal body signals, fitness-aware cardiac interpretation, seasonal or weather-related patterns, phantom correlations, verified outcomes, and cohort matching outputs (the Consensus visualisation introduced in v1.8). These are:

• Observations from your data, presented with your specific data points, and in the case of recovery trajectories and cohort matching, drawn from aggregated community signal and published research
• NOT diagnoses, prognoses, or medical assessments
• NOT substitutes for professional evaluation
• NOT prescriptive health advice or directives
• NOT guarantees of future outcomes. Flare predictions, recovery trajectories, body signals, verified outcomes, and cohort matches are statistical estimates only
• Intended only to support your awareness and prompt discussion with healthcare providers

3.7 Verified Outcomes

The App may automatically infer how your body responded to a movement intervention by comparing your logged pain intensity in the 7 days before you started the movement with your intensity at days 7, 14, and 28 after. These outcomes (e.g., "sustained improvement", "temporary relief", "no change", "worsened") are:

• Automatically inferred from your logged data - not reported by you directly
• Based on intensity comparisons only, which may be affected by confounding factors (e.g., other treatments, natural fluctuation, lifestyle changes)
• NOT clinical evaluations of treatment effectiveness
• NOT recommendations to continue or stop any movement or treatment
• If you have opted into community sharing, your de-identified outcome classification and movement frequency may be uploaded to improve community insights

3.8 Phantom Correlations

The App may display "phantom correlations" - delayed effects and protective factors detected across community data. These are:

• Observational correlations only, NOT causal relationships
• Based on aggregated community patterns subject to minimum contributor thresholds
• May reflect regression-to-the-mean, coincidence, or confounding rather than genuine effects
• NOT medical findings, diagnoses, or treatment guidance
• Intended for general awareness and discussion with your healthcare provider

3.9 AI-Generated Content

If you enable AI features (powered by Google Gemini via Firebase AI / Vertex AI), the responses generated, including conversational chat (Ask Sensus, SensusAI), weekly reports, post-check-in insights, and pattern analysis, are:

• For informational purposes only
• NOT medical advice or clinical recommendations
• Generated by artificial intelligence with inherent limitations
• Not reviewed by healthcare professionals before delivery
• Stateless. No conversation history is retained on any server

3.10 AI-Assisted Data Extraction

When you check in using natural language, the App uses AI to extract structured data from your sentence. You acknowledge that:

• AI extraction is not perfect and may miss, misidentify, or misinterpret elements of your input
• You are presented with a confirmation screen where you can review, edit, add, or remove any extracted data before saving
• You are responsible for reviewing and correcting the extracted data if needed
• Once you confirm and save, the data is treated identically in storage, analysis, and any community uploads

3.11 Body Forecast and Discovery Cards

The Body Forecast is a daily prediction of how your body may feel, computed on your device from your patterns, health data, weather data, and community trends. Discovery Cards are automated insights surfaced from your logged data. They are:

• NOT clinical health scores, medical measurements, or diagnostic indicators
• NOT comparable to clinical scales or medical assessments
• NOT indicators of your physical health, fitness, or medical condition
• Observational and informational tools only

The optional one-tap "Daily React" (introduced v1.8.6) is your own subjective response to the Body Forecast: a quick note of whether today feels Spot on, Better, or Worse than the App's read. It is a self-report only, recorded to capture the difference between how you feel and what your data suggests. It is observational and informational, NOT a clinical assessment, NOT a diagnosis, and NOT a directive about whether, when, or how to act. Where you have opted in to community sharing, the felt-versus-data tendency it produces is one categorical input to the Pattern Signature described in Section 3.18.

3.12 Apple Health Data

If you grant permission for the App to read data from Apple Health, you acknowledge that:

• The App reads Apple Health data in read-only mode. It never writes to or modifies your Apple Health data
• Raw Apple Health values are stored locally on your device by default, and are never shared with advertisers, data brokers, insurers, or employers
• Raw Apple Health values are never uploaded to Sensus community storage. If you opt in to community data sharing, only categorical labels derived from your health data may be uploaded.
• Exception - AI features (separate opt-in): If you enable AI features, relevant raw Apple Health values may be included in prompts sent to Google Vertex AI at the moment of generating an AI response. Google does not retain this data for training or advertising. If you do not enable AI features, no Apple Health values leave your device. See our Privacy Policy for details.
• Apple Health data is used to provide personal context alongside your check-ins, to power on-device cross-modal body signals, and to enable fitness-aware cardiac interpretation
• When multiple data sources exist in Apple Health for the same metric, the App may prioritise the source it determines to be most accurate. This selection occurs entirely on your device.
• The App's use of Apple Health data does not constitute medical monitoring or clinical data collection
• When you disable Apple Health access in the App, a confirmation dialog is shown explaining what the App will no longer be able to do (recovery trends, body-memory notifications, cardiac-fitness adjustments, sleep/HRV/activity correlations). You can confirm or cancel.
• You can revoke Apple Health access at any time via iOS Settings > Health > Sensus

3.13 Weather and Location Data

If you grant location permission, the App uses reduced-accuracy location (city-level, approximately 5 km) to retrieve local weather conditions via Apple WeatherKit. You acknowledge that:

• Location is requested on a one-shot basis during check-in only and is not continuously tracked or stored
• Categorical weather labels are stored locally alongside your check-in entries. The App also keeps a rolling local timeline of recent barometric pressure readings on your device for trend computation; these readings are never transmitted off your device.
• Weather data is used to identify potential weather-body correlations in your patterns
• If you also opt in to community data sharing, only categorical weather labels may be uploaded - never your location coordinates, city names, or raw numeric readings
• You can revoke location access at any time via iOS Settings > Privacy & Security > Location Services > Sensus, and the App will continue to function without weather data

3.14 Community Health Metric Signals

The App may display aggregated health metric signals based on categorical health pattern flags contributed by consenting community members. The App also presents population-level wellness research drawn from peer-reviewed studies and clinical guidelines. These signals and research findings are:

• Based on categorical labels only (for community signals) or published research (for wellness findings), never on raw health values from any contributor
• Statistical aggregations across multiple contributors, subject to minimum contributor thresholds (k-anonymity)
• NOT individual medical findings, diagnoses, or personalised clinical advice
• NOT prescriptive health recommendations or directives
• Observational patterns that may not apply to your individual circumstances
• Intended for general awareness only, not as a basis for health decisions

3.15 Micro-Questions and Sensitive Data

The App may present optional micro-questions during check-in covering dimensions including social connection, stress sources, nutrition quality, routine disruption, medication status, substance use, and menstrual cycle phase. You acknowledge that:

• Micro-questions are optional and you may skip them at any time
• Menstrual cycle phase questions are only shown if you opted into cycle tracking during onboarding
• Your responses are stored locally on your device and used to identify correlations between these factors and how you feel
• If you opt in to community sharing, only the dimension name and selected option are uploaded, never free-text responses
• Micro-question insights are observational correlations, not medical or psychological assessments

3.16 Athlete Follow-Up Prompts

If your onboarding profile indicates competitive athlete activity level, the App may present a daily two-question follow-up screen at the end of your check-in flow. You acknowledge that:

• The follow-up prompt is shown only for the competitive athlete archetype, derived from your onboarding activity level. You may change your activity level via in-app settings to disable the prompt.
• Responses use pre-defined chip categories only; no free-text input
• Responses are stored locally on your device alongside your check-in entry
• If you have opted in to community sharing, only categorical chip values, the archetype label, and a day-of-week / hour bucket are uploaded to community storage; exact dates and personally identifying information are never uploaded
• Athlete follow-up signals are observational structured self-reports intended to support pattern recognition over time. They are NOT clinical assessments, NOT medical advice, and NOT a substitute for evaluation by a qualified sports-medicine professional or healthcare provider

3.17 Notifications

The App may send local notifications (with your permission) including check-in reminders, daily morning Body Forecast alerts, pattern alerts, streak reminders (opt-in), evening check-ins, movement follow-ups, optional post-workout Movement Capacity recovery notices ("your legs are recovering"), and body-memory notifications ("Sensus Noticed"). These notifications are:

• Generated and scheduled entirely on your device, with one exception: practitioner-message notifications (Section 3.19) are delivered via push when a linked practitioner messages you, and never contain the message content. All other notification content is produced on-device, and notification text shown on your lock screen is deliberately generic - it never names body regions, sensations, triggers, or health metric specifics
• For informational and motivational purposes only
• NOT urgent medical alerts or emergency notifications
• NOT clinical advice or directives
• Configurable and can be disabled entirely in More > Notifications & Alerts or via iOS Settings

3.18 Cohort Matching ("The Consensus" / Living Map)

The App includes a community-facing surface (introduced in v1.8) called "The Consensus" (also referred to as the Living Map). When you have opted in to community data sharing and have enough check-in history, the App computes a categorical Pattern Signature on your device and uploads it to a Sensus-managed cloud collection. A scheduled server-side process matches your signature against the signatures of other consenting users and returns aggregate statistics about your matched cohort. You acknowledge that:

• The Pattern Signature uploaded to enable matching contains only bucketed values: region focus, body-state fractions, top trigger CATEGORY, sleep bucket, directional trend labels for HRV, resting heart rate, and step count, an optional recovery-speed bucket, a directional felt-versus-data gap tendency label derived from your Daily React responses, and a sample-size count. It does not contain free-text, check-in dates, raw health values, individual check-in content, or directly identifying information. (A single timestamp recording when the signature was computed is included; see our Privacy Policy for the full specification.)
• Cohort match results returned to your device contain only privacy-gated aggregate statistics: cohort size (gated to a minimum of 5 peers), average similarity score, and a rolling 60-day cohort state distribution (with each day independently gated). No peer identifiers, no peer signatures, and no per-peer trajectory information are ever returned.
• Peer dot positions in the visualisation are stylised. They are deterministic placements arranged around your central position for legibility, not real spatial projections of any individual peer's pattern.
• Cohort observations (size, distribution, trajectory) are statistical aggregations and may be subject to confounding, regression-to-the-mean, or sampling effects. They are NOT clinical findings, diagnoses, or personalised medical advice.
• Cohort matching is only surfaced when the privacy threshold is met. If you have opted in but the threshold has not yet been met, the surface falls back to population-level wellness research from medical literature. If you have not opted in to community sharing, the surface shows only a locked preview with an option to opt in - no real cohort data is displayed.
• You can revoke community sharing at any time. When you revoke, no further signature uploads occur, your existing match document is no longer updated, and your anonymous community identifier is automatically rotated so any future re-opt-in produces a fresh, unlinked match cohort. De-identified data previously contributed to community pools cannot be retrieved or deleted.

3.19 Practitioner Linking & Sharing ("Care Team")

The App allows you to optionally link with a practitioner (for example, a physiotherapist or clinician) using an invite code they give you, so they can follow your progress between appointments and exchange messages with you. By linking a practitioner, you acknowledge and agree that:

• Sharing is at your direction and explicit, per-practitioner opt-in. Before anything is shared, the App shows you which practitioner and clinic the code belongs to and asks for your consent. What is shared: your display name, your check-ins from the time of linking plus recent history (body state, intensity, regions, sensations, contexts, your personal notes, and categorical weather labels), and health-derived values relevant to your care (sleep, heart rate variability, resting heart rate, steps, and gait metrics). This is the only feature through which identifiable health information leaves your device. See our Privacy Policy (Section 8.10) for full details.
• Your practitioner is an independent professional, not Sensus. Practitioners are not employees, agents, or representatives of Sensus. They are solely responsible for the professional services and advice they provide to you, for how they use the shared data, and for meeting their own professional, ethical, and legal obligations (including their own privacy obligations). Sensus provides the data-sharing and messaging facility only and does not supervise, verify, endorse, or assume responsibility for any practitioner's care, advice, qualifications, or conduct.
• Messaging is NOT for emergencies or urgent clinical needs. In-app messages are not monitored by Sensus, are not guaranteed to be read by your practitioner within any particular timeframe, and must not be used for urgent symptoms or emergencies. In an emergency, contact your local emergency services (Section 3.4). For urgent clinical concerns, contact your practitioner or another healthcare provider directly through their normal channels.
• No availability guarantee. We do not guarantee that any practitioner will view your shared data, respond to messages, or take any action based on them. Sharing data with a practitioner does not create any obligation on Sensus to monitor your data or alert anyone about its contents.
• Practitioner reports. Your practitioner may use the shared data to generate progress summaries or reports (for example, a summary for your GP) as part of their professional service to you. Such reports are produced by and are the responsibility of your practitioner.
• Unlinking deletes everything. You can unlink a practitioner at any time (More > Care Team). Unlinking stops all sharing and deletes all shared check-ins, the message thread, and your client record from the practitioner's view. "Delete All My Data" does the same for every linked practitioner.
• Push notifications. When your practitioner messages you, a push notification is delivered to your device (via the Apple Push Notification service and Firebase Cloud Messaging). It never contains the message content. A device push token is stored against your account solely to deliver these notifications and is removed when you unlink your last practitioner or delete your data.
• Identity separation is preserved. Practitioner sharing uses your signed-in account identity and is kept strictly separate from the anonymous community identifier. Linking a practitioner never connects your identity to your de-identified community contributions, Pattern Signature, or cohort matches.

3.20 Movement Capacity (Muscle Recovery)

The App includes a feature (introduced in v1.8.5) called Movement Capacity, which estimates how recovered each of your muscle groups is after activity. It maps the workouts recorded in Apple Health (type and duration) to muscle groups and applies a recovery model, optionally refined by your own health signals (such as heart-rate-variability trend, sleep, and age band) and by one-tap inputs you may provide (which split a strength workout trained, and whether an area still feels sore). You acknowledge and agree that:

• It is an estimate, shown as qualitative states only. Movement Capacity presents general recovery states (for example "recovering," "sore," "recovered") and a soft "ready when" window. It never shows, and you should not infer, a precise per-muscle recovery percentage or any clinical measurement. A muscle group is shown only when the App has a real signal for it; absence of a reading is not a statement that a muscle is fully recovered.
• It is observational and educational, NOT medical or training advice. Recovery estimates are NOT diagnoses, NOT clinical assessments of tissue healing or injury, NOT physiotherapy or rehabilitation guidance, and NOT a prescription of whether, when, or how hard to train. They are derived from general population research and proxies (such as workout duration and your own signals) and may be inaccurate for your individual circumstances.
• Do not use it to decide whether to train through pain or injury. Movement Capacity must not be relied on to determine readiness to exercise, to return to sport, to load an injured or painful area, or to skip professional assessment. A muscle group reading as "recovered" does not mean it is safe to load, and a reading of "aggravated" or "sore" is not a diagnosis. For any pain, injury, or training-load decision, consult a qualified healthcare or sports-medicine professional (Section 3.3). In an emergency, see Section 3.4.
• The lifting estimate depends on your input and may be incomplete. Apple Health reports only that a "strength" workout occurred, not which muscles it trained. Where you have not told the App what you trained, it shows a general whole-body read rather than guessing specific muscles. Any split the App predicts for you is a convenience guess that you can always correct.
• Community recovery signals are de-identified and statistical. If you have opted in to community sharing, answering a recovery self-check contributes one anonymous, categorical data point (a body area, a coarse age band, an HRV trend label relative to your own baseline, a general training-type label, and a "still sore" value) used to improve estimates for people with similar profiles. It contains no raw values, no dates, and no identifying information, and is aggregated into a qualitative per-cohort tendency surfaced only when at least 5 distinct contributors are present. These community tendencies are statistical aggregations subject to confounding and sampling effects - they are NOT clinical findings or personalised advice. See our Privacy Policy (Sections 3.2 and 5.4) for details. You can turn community sharing off at any time.

4. User Responsibilities

4.1 Accurate Information

You agree to provide accurate and complete information when using the App and to keep this information current. When the App presents AI-extracted data for your confirmation, you are responsible for reviewing and correcting any inaccuracies before saving. Data you add, edit, or confirm is treated as your input.

4.2 Device Security

You are responsible for maintaining the security of your device and access to the App, including:

• Keeping your device passcode secure
• Not sharing access to your device or the App with others
• Notifying us if you believe your data has been compromised

4.3 Lawful Use

You agree to use the App only for lawful purposes and in accordance with these Terms. You agree NOT to:

• Use the App in any way that violates applicable laws or regulations
• Attempt to gain unauthorised access to any part of the App or its systems
• Interfere with or disrupt the App or servers
• Transmit any malware, viruses, or harmful code
• Reverse engineer, decompile, or disassemble the App
• Use the App to harm, threaten, or harass others
• Misrepresent your identity or affiliation
• Use the App for any commercial purpose without our consent
• Submit false, misleading, or fabricated data to community features
• Attempt to re-identify, link, or otherwise determine the real-world identity of any other user, or attempt to circumvent the privacy controls applied to community data including pattern signatures and cohort match results

4.4 Healthcare Decisions

You acknowledge and agree that:

• You are solely responsible for your healthcare decisions
• The App is a tool to support your awareness, not replace medical care
• You will consult qualified healthcare providers for medical concerns
• You will not rely solely on the App for health-related decisions
• Flare predictions, pattern alerts, body signals, community health signals, recovery trajectories, verified outcomes, phantom correlations, athlete follow-up signals, body-memory notifications, Movement Capacity recovery estimates, and cohort matching observations (the Consensus visualisation) are informational estimates and not clinical guidance

5. Intellectual Property

5.1 Our Intellectual Property

The App and its contents, including but not limited to text, graphics, images, logos, icons, software, algorithms, knowledge bases, movement libraries, and audio, are owned by Leilani Matovina trading as Sensus ("Sensus") and are protected by copyright, trademark, and other intellectual property laws.

5.2 Limited License

We grant you a limited, non-exclusive, non-transferable, revocable license to use the App for personal, non-commercial purposes in accordance with these Terms.

5.3 Your Content

You retain ownership of the data and content you input into the App ("Your Content"). By using the App, you grant us a limited license to:

• Store, process, and display Your Content to provide the App's functionality
• Create de-identified, aggregated insights if you opt into community features
• Use Your Content to improve the App (in de-identified form)

5.4 Consensus Knowledge Base

The Consensus Knowledge Base contains information drawn from peer-reviewed medical literature, clinical guidelines (including Cochrane Reviews, NICE Guidelines, and PubMed-indexed studies), and established medical institution resources. This content is curated by Sensus and presented for informational purposes only. Original sources retain their respective copyrights and licensing terms.

5.5 Feedback

If you provide feedback, suggestions, or ideas about the App, you grant us the right to use this feedback without obligation to you.

6. Privacy

6.1 Privacy Policy

Your use of the App is also governed by our Privacy Policy, which describes how we collect, use, and protect your information in compliance with global privacy laws including GDPR, CCPA, PIPEDA, LGPD, and Australian Privacy Principles.

6.2 Data Processing

By using the App and providing affirmative consent through in-app permission flows where required, you acknowledge the following data processing activities:

• Local storage of your wellness data on your device (encrypted with iOS Keychain, AES-256)
• Local reading of Apple Health data (read-only) if you grant permission
• Local one-shot retrieval of reduced-accuracy location for weather data via Apple WeatherKit, if you grant location permission
• Local storage of categorical weather labels alongside your check-in entries and a rolling local pressure timeline for trend computation (not transmitted off-device)
• Local computation of your Body Forecast, Discovery Cards, on-device pattern analysis, cross-modal body signals, verified outcomes, and phantom correlations
• Local generation and scheduling of notifications. No data is transmitted to any server to produce these notifications.
• Optional processing by AI services (Google Gemini via Firebase AI / Vertex AI) if you enable those features. When enabled, this may include relevant raw Apple Health values for accurate body-state reasoning, along with your training profile. Free-text notes and personally identifying information are never included in AI prompts.
• Optional automatic contribution of de-identified data to community insights ("Consensus") via Google Cloud Firestore if you opt in
• Optional upload of categorical health pattern flags if you have both Apple Health and community sharing enabled. Raw health values are never uploaded to community storage.
• Optional upload of micro-question responses (dimension name and selected option only) if you have community sharing enabled
• Optional upload of verified outcome classifications if you have community sharing enabled
• Optional upload of athlete follow-up responses (categorical chip values, archetype label, day-of-week and hour bucket) if you have both competitive athlete activity level and community sharing enabled
• Optional upload of your Pattern Signature (categorical bucketed values only, see Section 3.18) to a Sensus-managed Firestore collection if you have community sharing enabled. The signature is recomputed on your device and re-uploaded periodically as your check-in history evolves.
• Receipt of cohort match results written by a scheduled server-side process to a document keyed to your anonymous community identifier. The results contain only aggregate cohort statistics (size, average similarity, 60-day state distribution) and never contain peer identifiers or peer signatures.
• Optional storage of a minimal account contact record (Firebase user ID, sign-in provider, email or Apple private-relay address, display name if provided, platform, and timestamps) if you choose to sign in with Apple or Google. This record is owner-scoped and kept strictly separate from the anonymous community identity (see Section 6.6).
• Optional practitioner sharing ("Care Team"): if you link a practitioner by invite code, your display name, check-ins (including notes), and health-derived values are shared with that practitioner, and in-app messages between you are stored in our Firebase backend, readable only by the two of you. A device push token is stored to deliver message notifications. All of this is deleted when you unlink (see Section 3.19).
• Attestation of your App instance to our backend via Firebase App Check (Apple App Attest) as an anti-abuse measure. This uses a device-generated cryptographic key and does not collect personal data.

6.3 Automated Processing

The App performs automated processing of your data to generate the Body Forecast, flare predictions, pattern detection, verified outcomes, Discovery Cards, body-memory notifications, fitness-aware health metric labels, Movement Capacity recovery estimates, and cohort matching (the Consensus visualisation). These automated outputs are presented as informational observations only and do not produce legal effects or similarly significant effects on you. You can view the data points that informed any automated output within the App.

6.4 Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or port your data. See our Privacy Policy for details on exercising your rights.

6.5 Community Data Consent

If you opt in to community data sharing ("Consensus"):

• De-identified data from your check-ins is automatically uploaded to Google Cloud Firestore when you save a check-in
• If you also have Apple Health connected, categorical health pattern flags may be uploaded alongside your de-identified check-in data. These flags never contain raw health values.
• Micro-question responses and verified outcome classifications may also be uploaded
• If your onboarding profile indicates competitive athlete activity level, athlete follow-up responses (categorical chip values only) may also be uploaded
• Your Pattern Signature (categorical bucketed values described in Section 3.18) is uploaded to enable cohort matching. The signature is recomputed and re-uploaded periodically as your data evolves.
• Data is de-identified on your device before upload (see our Privacy Policy for the full de-identification process)
• You can revoke consent at any time in the App's settings. When you revoke, no further data of any type (including Pattern Signatures) will be uploaded, the upload-tracking state of every community uploader is cleared, and your anonymous community identifier is automatically rotated so that any future re-opt-in produces a fresh, unlinked identity that cannot be associated with your prior contributions.
• Previously contributed de-identified data cannot be retrieved or deleted, as it is not linked to your identity

6.6 Account Sign-In (Optional)

Creating an account is entirely optional - you can use the App fully without one by choosing "Maybe later." If you choose to sign in (via Sign in with Apple or Sign in with Google), you acknowledge that:

• We store a minimal contact record - your Firebase user identifier, sign-in provider, email (or Apple private-relay address), display name if provided, platform, and first-seen / last-seen timestamps - in a Sensus-managed Firebase collection, so we can reach you for support, account recovery, important product or policy updates, and occasional invitations to give feedback or take part in research
• This contact record is the only directly-identifying information stored on a server. It is owner-scoped (only you, while signed in, can read or write it) and is kept strictly separate from the anonymous community identifier used for Consensus features - your sign-in identity is never linked to your de-identified community contributions, Pattern Signature, or cohort matches
• Your wellness and Apple Health data is not stored in this record or tied to your account; it remains on your device
• If you sign in with Apple and choose "Hide My Email," Apple provides a private relay address rather than your real email, and emails we send are forwarded to you by Apple without us seeing your real address
• You can delete your account and contact record in-app at any time via More > Privacy & Data > Delete All My Data (which also unlinks any practitioners, deletes practitioner-shared data, and deletes the sign-in account itself), or by contacting contact@joinsensus.com

7. Third-Party Services

7.1 Third-Party Integrations

The App may integrate with third-party services, including:

• Apple HealthKit: For optional read-only access to health metrics. Raw health values are stored locally. If you opt in to community sharing, only categorical labels are uploaded. If you enable AI features, relevant raw values may be included in prompts sent to Google Vertex AI. See our Privacy Policy for details.
• Apple WeatherKit: For retrieving local weather conditions based on reduced-accuracy location. Categorical weather labels are stored locally alongside your check-in entries. Location coordinates are not stored or uploaded.
• Google Cloud Firestore: For storing de-identified community data ("Consensus"), categorical health pattern flags, micro-question aggregates, verified outcome aggregates, athlete follow-up aggregates, Pattern Signatures (one document per anonymous user), and cohort match results (one document per anonymous user, server-written and client-read), and - if you link a practitioner - your practitioner-shared check-ins, messages, and client record (Section 3.19). Hosted in Australia (australia-southeast1). Community collections are only used if you opt in to community insights; practitioner collections only if you link a practitioner. See our Privacy Policy for details on what data is and is not uploaded, including the explicit non-exposure of peer identities in cohort match results.
• Google Gemini (via Firebase AI / Vertex AI): For optional AI-powered features. Your training profile and, for Body Forecast and Ask Sensus, relevant raw Apple Health values are included in AI prompts to enable accurate reasoning about your body state. AI conversations are stateless from the App's side. No history is retained on any server.
• Firebase Authentication (with Sign in with Apple & Sign in with Google): For optional account sign-in. If you choose to sign in, a minimal contact record is stored (see Section 6.6). Sign-in is optional and the App is fully usable without an account. See our Privacy Policy.
• Firebase Cloud Messaging & Apple Push Notification service: For delivering practitioner-message notifications if you link a practitioner (Section 3.19). The notification never contains message content; a device push token is stored solely for delivery and removed on unlink or data deletion.
• Firebase App Check (with Apple App Attest): An anti-abuse security service that verifies requests to our backend originate from a genuine, untampered copy of the App on a real device. It uses a device-generated cryptographic key and does not collect personal data. See our Privacy Policy.
• Apple Services: For App Store distribution and device functionality

7.2 Third-Party Terms

Your use of third-party services is subject to their respective terms and privacy policies. We are not responsible for third-party services, including their availability, accuracy, or performance.

7.3 Third-Party Links

The App may contain links to third-party websites or resources. We are not responsible for the content, accuracy, or practices of these external sites.

8. Disclaimers and Limitation of Liability

8.1 "As Is" Disclaimer

8.2 No Guarantee

We do not warrant that:

• The App will be uninterrupted, timely, secure, or error-free
• The results obtained from using the App will be accurate or reliable
• The quality of the App will meet your expectations
• Any errors in the App will be corrected
• AI-generated content, AI-assisted data extraction, pattern detection, flare predictions, body signals, fitness-aware health metric labels, verified outcomes, phantom correlations, athlete follow-up signals, body-memory notifications, recovery trajectories, Movement Capacity recovery estimates, or cohort matching outputs (the Consensus visualisation, Pattern Signature, cohort size, average similarity, cohort trajectory) will be accurate, complete, or applicable to your situation
• Community health metric signals or population-level wellness research will be accurate, representative, or applicable to your individual circumstances
• Body Forecast predictions, Discovery Cards, or any AI-generated wellness insights reflect any clinical or medical measure of health
• Apple Health data displayed in the App matches the data in the Apple Health app (due to timing, caching, or data availability)
• Weather data retrieved via Apple WeatherKit will be accurate, current, or available at all times
• Cohort matching will produce a surfaced cohort at any particular time, or that the matched cohort will be representative of any particular condition, demographic, or clinical population
• Any linked practitioner will view your shared data, respond to messages within any timeframe, or take any action based on them; or that practitioner-message push notifications will be delivered without delay or failure

8.3 Limitation of Liability

8.4 Maximum Liability

To the extent permitted by law, our total liability for any claims arising from your use of the App shall not exceed the greater of:

• The amount you paid for the App (if any) in the 12 months preceding the claim; or
• AUD $100 (or equivalent in your local currency)

8.5 Consumer Protection Laws

9. Indemnification

To the extent permitted by applicable law, you agree to indemnify, defend, and hold harmless Sensus and its officers, directors, employees, agents, and affiliates from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising from:

• Your use of the App
• Your violation of these Terms
• Your violation of any rights of another person or entity
• Any content you submit or transmit through the App
• Any health or medical decisions you make based on information from the App
• Any attempt to re-identify, link, or determine the real-world identity of another community contributor

10. Termination

10.1 Termination by You

You may stop using the App and delete it from your device at any time. Uninstalling the App will delete your locally stored data.

10.2 Termination by Us

We may suspend or terminate your access to the App at any time, with or without cause, and with or without notice, including if we reasonably believe you have violated these Terms.

10.3 Effect of Termination

Upon termination:

• Your license to use the App is immediately revoked
• You must delete the App from your device
• Previously contributed de-identified community data (including categorical health pattern flags, micro-question aggregates, verified outcome aggregates, athlete follow-up aggregates, and Pattern Signatures) will remain in the system, as it is not linked to your identity
• Practitioner-shared data is different: unlinking a practitioner or using "Delete All My Data" deletes your shared check-ins, messages, and client record from the practitioner's view (Section 3.19)
• Provisions that by their nature should survive termination will survive (including disclaimers, limitations of liability, and dispute resolution)

10.4 Service Discontinuation

We reserve the right to modify, suspend, or discontinue the App (or any part thereof) at any time, with or without notice. We will not be liable to you or any third party for any modification, suspension, or discontinuation.

11. Dispute Resolution

11.1 Informal Resolution

Before initiating any formal dispute resolution, you agree to first contact us at contact@joinsensus.com and attempt to resolve the dispute informally for at least 30 days.

11.2 Governing Law

These Terms are governed by and construed in accordance with the laws of New South Wales, Australia, without regard to conflict of law principles.

11.3 Jurisdiction

Subject to any applicable consumer protection laws that may provide otherwise, you agree that any legal action or proceeding arising from these Terms shall be brought exclusively in the courts of New South Wales, Australia, and you consent to the jurisdiction of such courts.

11.4 Class Action Waiver

To the extent permitted by law, you agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action. This waiver does not apply where prohibited by applicable consumer protection law, including in the EU/UK and certain US state jurisdictions.

11.5 Consumer Rights

If you are a consumer, nothing in this section limits your right to bring legal proceedings in your country of residence in accordance with applicable consumer protection laws.

12. Apple App Store Terms

If you download the App from the Apple App Store, the following additional terms apply:

12.1 Acknowledgement

You acknowledge that these Terms are between you and Sensus only, not with Apple, and Sensus (not Apple) is solely responsible for the App and its content.

12.2 Scope of License

The license granted to you is limited to a non-transferable license to use the App on any Apple-branded device you own or control, as permitted by the App Store Terms of Service.

12.3 Maintenance and Support

Sensus is solely responsible for providing maintenance and support services for the App. Apple has no obligation to provide any maintenance or support.

12.4 Warranty

Sensus is solely responsible for any product warranties, whether express or implied. Apple has no warranty obligation.

12.5 Product Claims

Sensus (not Apple) is responsible for addressing any claims relating to the App or your use of it, including product liability claims, consumer protection claims, and intellectual property claims.

12.6 Third-Party Beneficiary

Apple and its subsidiaries are third-party beneficiaries of these Terms. Upon your acceptance, Apple has the right to enforce these Terms against you as a third-party beneficiary.

13. General Provisions

13.1 Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Sensus regarding the App and supersede all prior agreements.

13.2 Severability

If any provision of these Terms is found to be unenforceable, the remaining provisions will continue in full force and effect.

13.3 Waiver

Our failure to enforce any right or provision of these Terms will not be considered a waiver of that right or provision.

13.4 Assignment

You may not assign or transfer these Terms or your rights under them without our prior written consent. We may assign our rights and obligations without restriction.

13.5 Force Majeure

We will not be liable for any failure or delay in performance due to circumstances beyond our reasonable control, including natural disasters, war, terrorism, pandemics, or failures of third-party services.

13.6 Notices

We may provide notices to you through the App, by email (if you have provided one), or by other reasonable means. You may contact us at contact@joinsensus.com.

13.7 Language

These Terms are written in English. Any translations are provided for convenience only. In case of conflict, the English version prevails.

14. Contact Information

15. Acknowledgement