Privacy Policy
Your health information is deeply personal. Sequa is built so that your health record stays with you: on your device and, if you choose to sync, in your own iCloud. This Privacy Policy explains how that works, what limited information Sequa itself receives, why we use it, the choices you have, and the steps we take to protect it.
Our Terms of Service also apply when you use Sequa.
Last updated: 4 September 2026
On this page
1. Who we are
Sequa is operated by WraithBit, Inc., trading as Sequa ("Sequa", "we", "us", "our").
Our address is 131 Continental Dr, Ste 305, Newark, DE 19713-4324, United States. For privacy questions or requests, contact privacy@sequahealth.com.
This Privacy Policy applies to Sequa's consumer website, applications, and related consumer services.
Sequa Pathways is our platform for healthcare organisations and clinical services. Different privacy arrangements apply when Sequa or Sequa Pathways is provided to you through a healthcare organisation, NHS service, clinic, or research programme. Where that happens, we will provide or direct you to the privacy information relevant to that service.
2. How Sequa is built, and why this policy is shorter than you might expect
Sequa's consumer app works without an account. There is no sign-up, no email to start, and no central Sequa profile.
The health record you build in Sequa is processed on your device. Sequa does not receive it, store it, or have access to it. If you turn on iCloud sync, your record is also stored in your own iCloud, under your own Apple ID, as part of Apple's service to you; Sequa has no way into it.
Because of this, most of what you record in Sequa never becomes information that Sequa the company processes. This policy covers both spheres: what the app can hold for you, and the limited information Sequa itself receives.
3. Your health record: on your device, under your control
Depending on which features you use, the record you keep in Sequa may include: conditions and diagnoses; symptoms and symptom history; medications, supplements, compounds, protocols, schedules, and the doses you log; inventory and supply information; measurements such as weight, blood pressure, heart rate, sleep and activity; laboratory and blood-test results; menstrual, reproductive or other health information you choose to record; appointments and appointment preparation; journal entries, notes and questions; documents or files you add; information you permit Sequa to read from Apple Health or other supported sources; and material the app generates from your entries, such as timelines, summaries, trends and insights.
You do not have to record every type of information Sequa supports. Everything above stays within your control as described in section 2.
Apple Health access is granular and optional: you choose which categories Sequa can read, and you can change or revoke that permission in iOS Settings at any time. Apple's rules prohibit HealthKit information from being used for advertising or sold to data brokers, and Sequa operates within them.
4. Information Sequa itself receives
Sequa the company receives a much smaller set of information:
Website technical information. When you visit our public website, we receive standard technical information such as IP address, browser and device type, and pages requested, used to operate and secure the site. With your consent, we also use Google Analytics 4 to understand how the website is used; see section 10.
Diagnostics. The Sequa app contains no crash-reporting or analytics service operated by Sequa, and no third-party crash-reporting or analytics SDK. Apple may provide us with diagnostic information through its own developer tooling where you have chosen to share diagnostics with developers in your iOS settings; that choice is controlled by Apple, not by Sequa.
Support correspondence. If you contact us, we receive what you send us, including anything you choose to attach.
Subscription entitlement. If you purchase a subscription through the App Store, Apple processes the payment under its own terms and privacy policy. Sequa uses RevenueCat to confirm whether a subscription is active. RevenueCat receives the limited pseudonymous purchase and technical information needed to do that, under an anonymous app user identifier rather than a name, email address or Sequa account. Sequa does not receive or store your payment-card details and does not keep a customer payment database.
The app itself does not send us your health record, and it does not report your entries or your use of features to us. There is no behavioural analytics or telemetry service in the Sequa app.
5. Optional features that involve a network
A small number of features involve a network request in order to work, without sending your record to Sequa.
Weather and air quality. For optional weather and environmental context, Sequa uses Open-Meteo. It receives only approximate latitude and longitude, at roughly kilometre-level accuracy, so it can return local weather and air-quality information. We do not send Open-Meteo your health record, name, email address or any Sequa identifier. Open-Meteo's own service logs may retain coordinates and IP addresses for up to 90 days for troubleshooting, under its own privacy policy.
iCloud sync. If you turn on iCloud sync, your Sequa data store is mirrored into your own private CloudKit database under your Apple ID, as part of Apple's service to you, and Apple encrypts it in transit and at rest. Sync is off by default. Sequa does not receive a server-side copy.
Sources and citations. When Sequa shows a source or reference link, the page is opened only when you choose to open it. Condition, symptom, compound, supplement and blood-marker reference content is bundled with the app rather than downloaded from a Sequa server.
No feature sends your health information to an external AI service.
6. How we use what we receive
We use the information in section 4 to operate and secure the website and app, provide support you request, maintain subscriptions and entitlements, diagnose faults, comply with applicable law, and improve Sequa's reliability. We do not use health information for targeted advertising, and we do not build advertising profiles from anything you record.
7. Your health data is not for sale
Sequa does not sell personal health information, and does not provide it to data brokers or advertisers. For your health record, this is architectural as well as contractual: we do not hold a copy to sell. For the limited information we do hold, we apply the same rule as policy.
If Sequa ever proposes a materially different use of identifiable information, we will provide notice and obtain consent where required before that use begins.
8. Service providers
We use specialist companies to operate the parts of Sequa that do run on our side: website hosting and delivery, Google Analytics for the public website, RevenueCat for subscription entitlement, and email for correspondence. These companies process information for Sequa under contractual or other appropriate restrictions, receive only what is reasonably necessary for their function, and are not permitted to use it for their own purposes. Giving a service provider access so it can perform a service for us is not a sale.
9. UK legal bases for processing
If UK data protection law applies to you, we need a lawful basis for the processing Sequa itself carries out (the information in section 4). Depending on the purpose, we rely on: contract, where processing is necessary to provide something you have requested, such as support or a subscription entitlement; legitimate interests, for securing our website and services, preventing fraud, and diagnosing faults, where not overridden by your rights; consent, where the law requires it or a feature genuinely depends on your choice; and legal obligation, where processing is required to comply with law.
Health information is special category data under UK data protection law. Where Sequa processes health information (for example, health details you include in a support message), we rely on an applicable Article 9 condition, which may include your explicit consent. Where processing relies on consent, you can withdraw it; withdrawal does not make earlier lawful processing unlawful, but may mean we can no longer provide the thing that depended on it.
11. Communications
Because Sequa has no account, we do not send sign-in or account emails, and we do not operate a newsletter or marketing list. If you contact us, we will reply. Subscription and billing communications come from Apple under its own terms.
12. How long we keep information
Your health record's retention is in your hands: it exists on your device, and in your iCloud if you sync, for as long as you keep it, and you can delete it from the app.
For the limited information Sequa itself holds: correspondence sent to hello@sequahealth.com or privacy@sequahealth.com is kept for up to 24 months after the last meaningful contact, unless longer retention is reasonably required for a continuing enquiry or dispute, a legal or regulatory obligation, a fraud or security investigation, or the establishment, exercise or defence of legal claims. Website analytics data is retained by Google Analytics for 2 months. Pseudonymous subscription entitlement information is held by RevenueCat and Apple under their terms; Sequa keeps no separate payment database and operates no diagnostics or analytics database for the app. Deleting information from Sequa cannot delete copies you previously chose to export, share, or send to someone else.
13. Access, export, correction and deletion
For your health record, these controls are in the app: you can view, correct and export your information, and Delete all data removes the Sequa data held by the application. If iCloud sync is enabled when you delete your Sequa data, those deletions are also synchronised to your private iCloud database. Synchronisation may not happen immediately. If you previously used iCloud sync but have since disabled it, you may need to manage any remaining Sequa data through your iCloud settings. Uninstalling the app removes it from your device but is not, by itself, a deletion of any iCloud copy. You can also change or revoke Apple Health permissions in iOS Settings.
For information Sequa itself holds (section 4), contact privacy@sequahealth.com. We may need to verify that a request is genuinely yours before completing it.
14. Your UK data protection rights
If UK data protection law applies to you, you have rights over the personal information Sequa processes, including the rights to access it, correct it, request deletion, request restriction, object to certain processing, receive certain information in a portable format, and withdraw consent where processing relies on it. These rights are subject to the circumstances and exceptions provided by law. Exercise them via privacy@sequahealth.com. You also have the right to complain to the Information Commissioner's Office.
15. Rights in the United States
Privacy rights vary between US states. Depending on where you live, you may have rights to know, access, correct, delete, obtain a copy, withdraw consent for particular uses of consumer health information, opt out of certain processing, appeal a decision on a privacy request, and exercise rights without unlawful discrimination. Where a state requires a separate consumer health data privacy notice, Sequa will provide one. Submit requests via privacy@sequahealth.com.
16. Automated decision-making
Sequa does not use your health information to make solely automated decisions with legal or similarly significant effects. Timelines, trends, correlations and summaries help you organise and understand your own information; they do not determine your access to insurance, employment, credit or healthcare.
17. International transfers
Sequa and some service providers may process the section 4 information in countries other than yours. Where UK data protection law applies and information is transferred outside the UK, we use a lawful transfer mechanism where required, such as an adequacy regulation or appropriate contractual safeguards, and carry out a transfer assessment where required. Your health record is not transferred by Sequa, because Sequa does not hold it; iCloud sync is provided to you by Apple under Apple's terms.
18. Security
Your record's first protections are the ones on your device: iOS platform security, your passcode or Face ID, and Apple's encryption of synced iCloud data in transit and at rest. You are responsible for protecting access to your devices and Apple ID.
For the systems Sequa operates, we use technical and organisational safeguards appropriate to what they hold, which may include encryption in transit, access controls, restricted administrative access, logging, monitoring and secure development practices. No internet-connected service can guarantee absolute security.
19. Security incidents
If we become aware of a security incident involving personal information Sequa holds, we will investigate, contain and remediate it, and notify you, a regulator or another authority where applicable law requires.
21. Legal disclosures
We may disclose information Sequa actually holds where we reasonably believe disclosure is required by applicable law or valid legal process, or to protect the rights, safety and security of Sequa, our users, or others. We cannot disclose a health record we do not hold. Where legally permitted, we will seek to ensure that requests are valid and appropriately scoped, and we will not volunteer information merely because someone asks.
22. Children
Sequa's consumer service is intended for people aged 18 or over. Do not use Sequa if you are under 18. If we ever introduce services designed for younger people, they will come with their own privacy information and safeguards.
23. Changes to this Privacy Policy
We may update this policy as Sequa develops or legal requirements change; the date at the top shows the latest update. If a change materially affects how we handle personal or health information, we will provide additional notice where appropriate, and where the law requires consent for a new use, updating this policy alone will not replace it.
24. Contact
Privacy requests: privacy@sequahealth.com. General enquiries: hello@sequahealth.com. WraithBit, Inc., registered office (legal correspondence): 131 Continental Dr, Ste 305, Newark, DE 19713-4324, United States. Email is the fastest way to reach us.
For a plainer overview of how Sequa approaches privacy, see our Privacy and Security page.