LEGAL
Last updated: June 23, 2026
Ithaka ("we," "us," or "our") operates ithaka.health, a health intelligence platform. People use Ithaka both on their own and through an organization — a clinic, practice, coach, or facility — that reviews and presents their data. This Privacy Policy explains how we collect, use, share, and protect your information. We take your privacy seriously: your health data is yours, we use it only to build your longitudinal picture and provide the service, and we never sell it.
We collect information you explicitly provide or authorize us to access, including: — Wearable data: Recovery scores, heart rate variability (HRV), sleep metrics, strain scores, and related biometrics from connected devices such as WHOOP. — Health records: Blood work results, lab panels, and biomarker data from providers such as Quest Diagnostics, which you upload directly. — Genetic data: Genomic reports and variant data from providers such as 3x4 Genetics, which you upload directly. — Account information: Your name, email address, sport, position, age, height, and weight, which you provide during signup. — Usage data: Basic information about how you interact with the platform, such as pages visited and features used.
We use your information solely to provide and improve the Ithaka platform. Specifically, we use your data to: — Generate personalized health and performance insights through our AI analysis pipeline. — Display your health trends, scores, and metrics on your personal dashboard. — Identify longitudinal patterns across your data sources over time. — Respond to your questions via the in-app chat feature. — Improve the accuracy and relevance of our analysis over time. We do not use your data for advertising, marketing to third parties, or any purpose beyond providing you with Ithaka's core service.
We do not sell your personal information or health data to any third party, ever. We share your data only with the following service providers, solely to operate the platform: — Anthropic: Our AI analysis pipeline is powered by Anthropic's Claude models. Your data is sent to Anthropic's API to generate insights. Anthropic processes this data under their privacy policy and does not use it to train models. — Supabase: Your data is stored securely in Supabase, our database and authentication provider. — WHOOP: If you connect your WHOOP device, we access your WHOOP data through their authorized OAuth API in accordance with WHOOP's API Terms of Use and your explicit consent. Beyond these service providers, we do not share your information with any other third parties.
If you sign up through an organization — a clinic, practice, coach, or facility — that organization and the specific professionals on your care team can access your data. That access is the service they provide: they review the longitudinal picture Athena builds, validate it, and present it to you. Athena surfaces patterns to help a professional interpret your data; she does not diagnose, and she does not replace medical advice. Your data is access-controlled. By default, only you — and the organization and its authorized reviewers you are connected to — can see your data. Other clients and other organizations cannot access it. You can ask to be removed from an organization, or to delete your data entirely, at any time by contacting us.
We take the security of your health data seriously. All data is encrypted in transit (HTTPS) and at rest. Access is enforced at the database level with row-level security: by default, only you — and the organization and authorized professionals you are connected to — can read your data. No other user or organization can access it. We use industry-standard security practices and review our security posture regularly.
You have the right to: — Access your data: You can view all health data associated with your account through the platform dashboard. — Delete your account: You may request deletion of your account and all associated data at any time by contacting us at joehackmann30@icloud.com. — Disconnect integrations: You may revoke WHOOP access at any time through your WHOOP account settings. — Export your data: Contact us to request a copy of your data.
We retain your data for as long as your account is active. If you delete your account, we will delete your personal information and health data within 30 days, except where we are required to retain it for legal purposes.
Ithaka is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the platform. Your continued use of Ithaka after changes take effect constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at: joehackmann30@icloud.com Ithaka ithaka.health
Ithaka — The journey is everything.