Last updated: 8 September 2026
"Health AI Insight" ("we", "our", "us") is the developer of the "Health AI Insight" iOS application available on the Apple App Store. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.
Contact:
"Health AI Insight" reads health and fitness data from Apple HealthKit on your device. This may include: steps, active calories, heart rate, heart rate variability (HRV), resting heart rate, sleep stages and duration, blood oxygen, respiratory rate, body weight, BMI, lean body mass, mindfulness minutes, and workout data.
This data never leaves your device in raw form. It is processed locally to produce anonymised, aggregated summaries (e.g. "7-day average HRV: 62 ms") before any AI analysis takes place. We do not upload raw HealthKit records to any servers.
HealthKit data is used solely to provide the features you request within the app. It is never used for advertising, sold to third parties, or shared with data brokers. This is a strict Apple HealthKit requirement that we fully comply with.
When you request an AI insight or ask a question in chat, an anonymised, encrypted summary of your aggregated metrics is sent to an AI language model. There are two modes:
The summary is not only numbers. If Apple Health holds your age and biological sex and you granted access to them, they are included so the model can read your metrics against the right reference range. If you set goals, their targets and your progress are included. If you use the context diary, the life events you marked (type and dates) and your wellbeing ratings are included; the text of your notes goes only into the weekly report, and only for notes you did not exclude from AI sharing. In chat, the question you type is sent together with the summary. None of this is sent to our servers, and none of it carries an identifier.
The same pipeline is used when the app produces your scheduled report — weekly by default — without you opening the app. Nothing is sent in the background before you have consented to AI processing, and you can switch the schedule off at any time in Settings. Baselines and the deviations from them are computed on your device, from your own history.
The app has no user accounts and we do not ask for your email address. Instead, your device generates a random identifier that is stored in your device's Keychain and used only to keep track of your plan and its monthly allowance. It is not derived from your Apple ID, name, or email, and we cannot connect it to your identity. To confirm that requests come from a genuine copy of the app, the app also uses Apple's App Attest; we store the resulting attestation key identifier and public key.
Purchases are processed entirely by Apple — we never see your payment card details. To keep your plan in sync we store, against that same pseudonymous identifier, the subscription data Apple sends us: the product you bought, its status (active, in grace period, expired, refunded), whether it renews automatically, whether the current period is a trial, when it ends, and Apple's transaction identifiers for it.
If you switch auto-renew off, the app shows you — once per billing period — a summary of what you have built and what stops on the end date. That summary is assembled on your device from your own reports and diary; nothing about it reaches us except the fact that it was shown and, if you choose to tell us, the reason you picked.
With your permission, the app sends you notifications — when your scheduled report is ready and, on paid plans, when a metric stays outside your personal baseline. These are prepared and delivered on your device; we do not run a push server and no health values are transmitted to us to produce them. You can withdraw notification permission at any time in iOS Settings.
To see which features are used and to keep the app stable, the app sends a small set of categorical usage events to the same backend that manages your plan quota — for example: completing onboarding, requesting or viewing an analysis or report, a scheduled report being delivered, opening a notification, sending a chat message, selecting an AI provider (name only), setting or removing a goal (which metric, never its value or your progress), viewing the subscription screen, starting a trial, changing plan, or being shown a billing problem, checking in to the diary or adding a life event or a note (the fact only — never the rating, the dates or the text), browsing your history, and — when you switch auto-renew off — being shown the summary screen and the reason you picked, if you picked one. When an analysis fails, the event records which provider or model failed and why (quota, network, rate limit), never the content. These events carry your app version and the same pseudonymous device identifier used for quota enforcement — not your Apple ID, name, or email — and contain no health values, no message or report content, and no API keys. Our landing website separately uses Cloudflare Web Analytics — a cookie-free, privacy-first analytics tool that does not track individuals across sites.
We do not use your data for advertising, for building marketing or advertising profiles, or for sale to third parties.
HealthKit data exists only on your device — we have no copy to retain or delete. Subscription records (plan, status, Apple transaction identifiers) are retained while the subscription is active and for 90 days afterwards, to comply with accounting obligations. Usage-analytics events are kept together with the device identifier they belong to and are deleted with it: an identifier with no activity for 90 days (and no active subscription) is removed automatically, with every record held against it. Only aggregated statistics that cannot be traced back to an identifier are kept.
If you are located in the European Economic Area (EEA) or UK, you have the right to:
To exercise any of these rights, email . We will respond within 30 days.
In accordance with Apple's HealthKit developer guidelines:
Each of the above processors is contractually bound to handle your data in accordance with applicable data protection laws.
"Health AI Insight" is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notification or email at least 14 days before taking effect. Continued use of the app after the effective date constitutes acceptance of the updated policy.
Health AI Insight
Email: