Privacy Policy

Last Updated: October 13, 2026

CyberNex Networks Limited ("CyberNex", “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how information is handled when you use our mobile application.

1. Information We Access

CyberNex integrates with Apple Health through Apple’s HealthKit framework.

With your permission, CyberNex may read the following health data:

This data is used solely to display wellness insights and trends within the app.

CyberNex does not collect, store, or transmit this health data to external servers.

Apple Health data accessed through HealthKit is processed locally on your device and is not transmitted to CyberNex or NuraLogix. Separately, camera-derived digital signals are transmitted to NuraLogix's DeepAffex cloud service to provide the camera-based wellness analysis described in Section 5.

Health data accessed through HealthKit remains on your device and in Apple Health. Camera-based analysis involves the separate local and cloud processing described in Sections 5, 6, and 7.

2. How We Use Health Data

Health data accessed from Apple Health is used only for the following purposes:

CyberNex does not use health data for advertising, marketing, or profiling purposes.

The app does not perform medical diagnosis or clinical monitoring.

3. Health Data Permissions

Access to Apple Health data is completely optional.

You can:

If permission is not granted, certain features of the app may not function.

4. Purpose of Each Permission

To comply with platform requirements, we provide a clear explanation of how each HealthKit permission is used:

All permissions are optional. Declining a permission only affects the related feature.

5. Camera Permission

When you choose to use a camera-based wellness scan and grant camera permission, the app uses camera input to support the scan. This includes on-device face tracking using Apple's TrueDepth / ARKit capabilities and the Anura SDK / DeepAffex processing described below.

TrueDepth / ARKit and Facial Data

During scanning, the app may use ARKit face tracking to obtain facial geometry and pose information to assist with detecting and tracking the face. TrueDepth / ARKit facial data is used only by the app's local processing path.

The app does not collect, store, or transmit any depth maps or facial depth data.

After local processing, the results from the TrueDepth / ARKit path are passed from the native iOS layer to the app's Dart layer through a Flutter platform channel. This is an internal transfer within the app on the same device, not a network transmission. The Dart layer uses the received results only for display and does not transmit them to NuraLogix or any other third party.

The facial geometry and pose information is processed temporarily on your device and is not retained after local processing. Neither this facial data nor the processed outputs from this path are uploaded to CyberNex servers, provided to NuraLogix, its Anura SDK or DeepAffex service, or transmitted to any other third party.

This face-tracking data is not used to identify or verify your identity, or for advertising, marketing, or profiling.

Anura SDK and DeepAffex Processing

In the Anura SDK / DeepAffex processing path, the app uses the Anura SDK, a software component provided by NuraLogix Corporation ("NuraLogix"). The SDK temporarily accesses facial images and video from the device camera to extract optical signals reflecting facial blood-flow changes and support wellness estimates, such as heart rate.

Original facial images, video recordings, and camera frames are processed temporarily and in real time on your device. They are not uploaded to CyberNex or NuraLogix and are not retained after this local processing. The Anura SDK converts the camera input into an encrypted payload of extracted digital signal data. This payload, rather than the original images, video, or camera frames, is transmitted to DeepAffex, NuraLogix's cloud-based analysis service, for processing. DeepAffex returns the resulting wellness estimates to the app for display.

The camera feature is used to generate the wellness results you request. CyberNex does not use camera input for identification, face recognition, advertising, or marketing. The cloud analysis requires an internet connection. If you do not grant camera permission or choose not to start a scan, the camera-based analysis cannot be performed.

The app is not intended for medical diagnosis, treatment, or clinical monitoring.

6. Data Storage

Health results generated by a camera-based scan are stored only on your device. Neither CyberNex nor NuraLogix maintains a server-side history or backup of these health results.

Health data accessed through HealthKit:

7. Data Retention

Original facial images, video recordings, and camera frames are processed temporarily on your device and are not retained after local processing. Facial geometry and pose information obtained through TrueDepth / ARKit is also processed only temporarily on your device and is not retained after local processing. Digital signals extracted for Anura SDK / DeepAffex analysis and the associated health results are used only to complete the requested analysis and return the results to your device. After processing, neither CyberNex nor NuraLogix retains copies of these signals or health results. Only the resulting health records are saved locally on your device. HealthKit data remains on your device and in Apple Health; revoking HealthKit permissions stops further access to the affected data.

We retain technical logs, analytics, and receipt verification records only for as long as necessary for the purposes described in this Policy, after which we delete or anonymize them, unless a longer retention period is required by law.

8. Data Sharing

CyberNex does not sell your health data. In the Anura SDK / DeepAffex processing path described in Section 5, extracted digital signal data is disclosed to NuraLogix for analysis. This is a disclosure to a third-party service provider. It does not include the original facial images, video, or camera frames, health data read from Apple Health, or any TrueDepth / ARKit facial geometry, pose information.

TrueDepth / ARKit facial data and the processed outputs passed through the Flutter platform channel remain within the app on your device. They are not transmitted to CyberNex servers, NuraLogix, or any other third party. The Dart layer displays these outputs locally and does not send them to external services.

NuraLogix may use authorized cloud infrastructure providers to support DeepAffex. These providers may process information needed to operate the service under the data-processing arrangements applicable to our integration.

Health data accessed through Apple Health is never shared with advertisers, analytics platforms, or data brokers.

9. Subscriptions and Purchases

Our app offers in-app subscriptions processed by Apple through the App Store (StoreKit). We do not receive or store your full payment card details.

To provide subscription access and restore purchases, we may process limited purchase-related information such as your subscription status, product identifier, transaction identifiers, and App Store receipt data.

We may validate receipts on our servers (or through a service provider acting on our behalf) to confirm your subscription status, prevent fraud, and provide customer support.

10. Information Collected Automatically

We may collect limited technical and diagnostic information necessary to operate and secure the Services, such as log data (e.g., IP address, timestamps, and basic device/app information), crash reports, and performance data. This information is used to maintain service reliability, troubleshoot issues, and improve the app.

Some of this information may be collected by our service providers on our behalf. In connection with camera-based analysis, NuraLogix may process technical information needed to authorize and operate its service, such as IP address, app and operating-system information, service authorization tokens, measurement identifiers, timestamps, status information, and error logs.

We do not use this information for advertising profiling, and we do not sell your personal information.

11. Your Rights and Choices

You may manage or revoke data permissions at any time:

You may delete health data held in Apple Health through the Apple Health app. Deleting Apple Health data does not delete scan results saved separately by the app. You may stop future camera-based scans by declining or revoking camera permission in your device settings.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or restrictions on personal information processed about you, or to object to processing or request a portable copy. To exercise these rights or ask about information processed through NuraLogix, contact CyberNex using the details in Section 18. We will coordinate requests with the relevant provider where applicable, subject to legal requirements and the information available to locate the relevant records.

Scan results are stored locally by the app, separately from data managed in Apple Health. Uninstalling the app removes its local app data from your device. Data managed in Apple Health must be deleted separately through the Apple Health app.

You may also limit certain analytics/diagnostic data collection through your device privacy settings where available.

12. Analytics and Crash Reporting

We may use third-party analytics and crash reporting tools to understand app performance and improve stability. These tools may collect device and usage information (such as device model, OS version, app version, event timestamps, and crash diagnostics).

We configure these tools to minimize data collection where possible, and we do not share HealthKit health data with analytics or advertising partners.

We do not send HealthKit health data to these tools. We also do not send camera footage, images, derived frames, TrueDepth / ARKit facial geometry or pose information, or processed outputs from the local face-tracking path to analytics or crash reporting tools.

13. Third-Party Services

We use Apple services such as HealthKit/Apple Health (for health data access and storage) and the App Store/StoreKit (for processing subscriptions).

We may also use third-party service providers for analytics, crash reporting, and receipt validation. These providers process limited information on our behalf and are required to protect it and use it only for providing their services to us.

The app also integrates NuraLogix's Anura SDK and uses its DeepAffex cloud service to analyze camera-derived digital signals and return wellness estimates. NuraLogix receives the extracted signal payload and associated service information described in Sections 5 and 10. It does not receive the original camera images, video, or frames through this scanning process. More information about NuraLogix's general privacy practices is available at https://www.nuralogix.ai/privacy-policy/. This external policy does not replace our responsibility to explain the data processing applicable to this app.

We do not sell your HealthKit health data, and we do not share HealthKit health data with advertisers or data brokers. We do not provide HealthKit health data to our analytics or crash reporting providers.

14. Legal Bases (EEA/UK)

Where applicable, we process personal information to (i) perform our contract with you, including providing requested features and subscription access, (ii) comply with legal obligations, and (iii) pursue our legitimate interests in app security, fraud prevention, and reliability. Where required by applicable law, we rely on your consent, including explicit consent for processing health or other sensitive information in connection with camera-based analysis. You may withdraw consent to future processing, subject to the effect this may have on the relevant feature.

15. Data Processing and Safeguards

We use NuraLogix's DeepAffex cloud analysis service to provide camera-based wellness analysis. We and our service providers take appropriate measures, as required by applicable law, to safeguard the information processed through this service.

16. Children's Privacy

CyberNex is not intended for children under the age of 13.

We do not knowingly collect personal information from children.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be reflected by updating the “Last Updated” date at the top of this document.

18. Contact Us

If you have any questions about this Privacy Policy, you may contact us at:

Email: [email protected]