Consumer health data

Last updated 9 August 2026

Washington’s My Health My Data Act, and laws like it, treat how you feel as health data, and treat working something out about you as collecting it. That is the right way round, so this page says exactly what &mote holds, what it works out, and what it never does. It sits beside the privacy policy rather than inside it, because this Act asks for its own document.

What counts as health data here

The moods you log, when you logged them, and the days you kept. With them &mote keeps the dates you sat down with somebody, and the marks you put on a moment to bring it up next time. That is the whole list.

Those last two are stored readable, like your moods, because a mark has to work while your journal is locked and so cannot live in the vault. Neither one holds what you felt or what was said.

Your journal notes, your voice recordings and their transcripts are encrypted on your own phone before they are uploaded, so we hold ciphertext we cannot open, and we are not able to read them even if we are asked to.

What we collect, and why

Your moods and their times, so your year can be assembled and kept in step across your devices. That is the product, and with the dates and the marks above it is everything about your days that is ever stored on our side.

Apple Health, if you turn it on. &mote can read what Health already keeps: your sleep; your steps, distance, walking speed, active energy, exercise minutes, stand hours and workouts; your heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, wrist temperature and cardio fitness; your time in daylight, mindful minutes and body mass; and your age, sex, skin type, wheelchair use and Move mode if you have filled them in.

Your birthday never leaves Health. &mote turns it into a five year band, “35 to 39”, and throws the date away.

It asks before it reads anything, it only ever reads, and it never writes to Health. It stays on your phone. None of it is sent to our server, so we do not hold your sleep or your steps and could not show them to anybody if we were asked to. The switch is in Health, under Sharing then Apps, and you can take the permission back there at any time.

The weather, if you turn that on. To know whether a day was grey, &mote needs roughly where you were. It asks for your location at the coarsest setting iPhone offers, then makes it coarser still, rounding to an area about five kilometres across before looking anything up. That area, and nothing else, goes to Apple’s weather service. Nothing you have logged goes with it, and Apple does not receive anything that identifies you. Like Health, the answer stays on your phone.

Nothing is inferred about you. The app works out what to draw, which is arithmetic on what you logged: the light of a day, the light of a year, how your moments sit across a day, and how a day’s readings sit beside your own other days. It does not predict, score, rate, flag or grade you, it never assigns a severity, and it never puts you in a category. Those are product rules, not preferences, and they are enforced by tests that fail the build.

Your days are only ever compared with your own days. Never with anybody else’s, never with an average, and never with a norm. There is no population in &mote to be measured against, and setting a day beside the person’s own other days is the only comparison the app makes.

What it never does with any of it. Health and weather are shown beside your days, never used to explain them. &mote does not tell you what your sleep did to your mood, because two things sitting beside each other is not one moving the other, and it will not pretend otherwise to sound clever.

Who else sees it

Nobody, unless you decide otherwise. Your health data is not sold, and it is never shared for advertising, marketing or any purpose of anyone else’s. There is no advertiser, no data broker and no partner.

You can choose to show one person, and take it back. If you give somebody a code, they see one blended mote for each of your days, and can open a day to see the moments it held, in order, with the time each was kept at. Today is there too, as it happens. Nothing from before you gave them the code, no notes, no recordings, and never the fact that a note or a recording exists. You can pause or stop it at any moment and they are not told. If you hand somebody the moments you marked for a session, they receive the day, the mood and the time of each, and taking it back or ending the connection stops them reading it. Both are things you set up and only you can end. See the privacy policy for the detail.

One company is involved in keeping it: Supabase hosts the database and the encrypted files, as our processor and under our instructions. They do not use it for anything of their own.

&mote does not sell consumer health data, and has never sold it. Under the Act that means no valid authorisation to sell has ever been sought or needed.

Your consent

Logging a mood is the consent: you type it in, and it is kept so you can see your year. If &mote ever wants to collect anything beyond that, or to work anything else out about you, it will ask you first, separately, and it will still work if you say no.

What you can ask for

A copy. Export your year, and download your journal decrypted, from Account and settings. Free, on every plan, no request needed.

Deletion. “Start fresh” erases every day you have kept. To delete your account and everything attached to it, write to privacy@andmote.com and it will be removed, including from our backups on their ordinary cycle.

To withdraw consent. The same address. Withdrawing consent stops the collection and deletes what is held.

You will not be charged differently, refused service, or given a worse app for asking any of this.

Who is asking

&mote is run by its maker rather than a company with a privacy department, and privacy@andmote.com reaches a person. If you are not satisfied with an answer, you may complain to the Washington State Attorney General.

Changes

If &mote ever collects a new kind of health data, or works something new out from what it has, this page changes in the same release as the code, never after it, and the date above changes with it.