Cathexis Privacy Policy

Effective Date: December 31, 2025

Last Updated: December 31, 2025

Cathexis (“we,” “our,” or “us”) is operated by Justin DeGarbo (“Founder”). This Privacy Policy explains how we collect, use, and protect your information when you use the Cathexis mobile application (“App”) and website at cathexis.health (“Site”).

1. Information We Collect

Somatic and Therapeutic Data: All somatic check-in data, body map selections, sensation records, session data, pattern observations, prediction data, program progress, and intervention responses are stored exclusively on your device using Apple’s SwiftData framework. We never collect, transmit, or store this data on any server.

Account Information: If you subscribe to a paid tier, Apple processes your payment through the App Store. We receive a transaction confirmation from Apple but never receive your payment card details, billing address, or Apple ID.

Crash and Stability Data: We use Sentry for crash analytics to improve app stability. Before any crash report leaves your device, a privacy-allowlist scrubber removes all somatic content, body zone data, sensation records, and therapeutic information. Only technical diagnostic information (device model, OS version, stack traces, error codes) is transmitted. You may opt out of crash reporting entirely in the App’s Settings.

HealthKit Data: With your explicit permission, the App may read sleep data, heart rate variability, respiratory rate, and menstrual cycle data from Apple HealthKit. This data is processed entirely on your device to power biometric pattern detection. It is never transmitted off-device. You can revoke HealthKit permissions at any time via iOS Settings > Privacy & Security > Health > Cathexis.

Website Analytics: The Site uses Google Analytics 4 to understand traffic patterns. This collects standard analytics data (pages viewed, session duration, approximate geographic region, referral source). No somatic or therapeutic data is ever present on the Site.

Email: If you voluntarily subscribe to our email list, we collect your email address via Squarespace’s built-in email campaigns. You may unsubscribe at any time using the link in any email.

2. How We Use Your Information

On-device somatic and therapeutic data is used solely to provide you with the App’s therapeutic features: somatic check-ins, adaptive interventions, pattern detection, prediction tracking, program progression, and session reports. This data never leaves your device.

Crash analytics data is used solely to identify and fix bugs that affect app stability.

HealthKit data is used solely to enhance biometric pattern detection (circadian disruption, respiratory rate correlation, menstrual cycle correlation). This processing occurs entirely on your device.

Website analytics are used to understand how visitors find and use the Site, and to improve its content.

Email addresses are used to send product updates, launch announcements, and educational content related to somatic awareness. We do not sell, rent, or share email addresses with third parties.

3. Data Storage and Security

All somatic and therapeutic data is stored on your device using Apple’s SwiftData framework with iOS Data Protection. When your device is locked, this data is encrypted with your device passcode via hardware-backed encryption. There is no cloud sync, no server-side database, and no backup to our systems.

If you delete the App, all on-device somatic and therapeutic data is permanently deleted. We cannot recover it because we never had access to it.

4. Research Commons (Future Feature)

In a future version, we plan to offer an optional Research Commons feature that allows you to contribute anonymized somatic data to scientific research. Participation will require a three-stage informed consent process. All data will pass through a seven-step anonymization pipeline that runs entirely on your device before any data is shared. You will be able to review exactly what data would be shared before consenting. You may withdraw consent at any time. This feature is not currently active.

5. Third-Party Services

The App integrates with the following third-party services: Apple App Store (payment processing for subscriptions, governed by Apple’s Privacy Policy), Apple HealthKit (on-device health data access with your permission, data remains on-device per Apple’s HealthKit guidelines), Sentry (crash analytics, receives only technical diagnostic data after privacy scrubbing, governed by Sentry’s Privacy Policy), and Google Analytics 4 (website only, standard web analytics, governed by Google’s Privacy Policy).

We do not use any advertising networks, data brokers, behavioral tracking SDKs, or social media analytics tools.

6. Children’s Privacy

Cathexis is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@cathexis.health.

7. Your Rights

Because your somatic and therapeutic data is stored exclusively on your device, you have complete control over it at all times. You can delete all data by deleting the App. You can export session reports via the App’s Session Report feature. You can opt out of crash analytics in the App’s Settings. You can revoke HealthKit permissions via iOS Settings. You can unsubscribe from emails via the unsubscribe link in any email.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). Because we do not collect, sell, or share personal somatic data, most CCPA provisions are not applicable to on-device data. For any data we do hold (email addresses, crash analytics), you may request access or deletion by contacting support@cathexis.health.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Site and updating the “Last Updated” date. Your continued use of the App after any changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, contact us at:

Email: support@cathexis.health

Cathexis • Justin DeGarbo, Founder & Clinical Director

Los Angeles, California