Privacy Policy

1. Who we are

"Health AI Insight" ("we", "our", "us") is the developer of the "Health AI Insight" iOS application available on the Apple App Store. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Contact:

2. Data we collect

2a. Apple HealthKit data

"Health AI Insight" reads health and fitness data from Apple HealthKit on your device. This may include: steps, active calories, heart rate, heart rate variability (HRV), resting heart rate, sleep stages and duration, blood oxygen, respiratory rate, body weight, BMI, lean body mass, mindfulness minutes, and workout data.

This data never leaves your device in raw form. It is processed locally to produce anonymised, aggregated summaries (e.g. "7-day average HRV: 62 ms") before any AI analysis takes place. We do not upload raw HealthKit records to any servers.

HealthKit data is used solely to provide the features you request within the app. It is never used for advertising, sold to third parties, or shared with data brokers. This is a strict Apple HealthKit requirement that we fully comply with.

2b. AI analysis pipeline

When you request an AI insight or ask a question in chat, an anonymised, encrypted summary of your aggregated metrics is sent to an AI language model. There are two modes:

• Managed mode (default): Your health data never passes through our servers. When you request an analysis, the app first calls our backend to obtain a short-lived authorization token for a specific AI provider (Anthropic, OpenAI, or Google). The app then sends the aggregated health summary — containing only numerical averages and totals, no names, email addresses, or unique identifiers — directly from your device to the AI provider using that token. Once the analysis completes, only anonymous usage statistics (AI provider, model name, and token count) are reported back to our backend for quota tracking.
• Bring Your Own Key (BYOK - user-supplied API keys) mode: When you configure your own API key, aggregated summaries are sent directly from your device to the respective provider (Anthropic, OpenAI, Google, or a self-hosted endpoint) using your own API key. In this case, Health AI Insight's backend is not involved and the data never passes through our servers. The selected provider's privacy policy governs that data transfer.

2c. Account data (optional)

If you create an account or subscribe to a paid plan, we collect your email address and payment token (handled by Apple's in-app purchase system — we never see your full payment card details). We use this to manage your subscription and send product update emails.

2d. Analytics and crash reports

We collect anonymised, aggregate usage analytics (e.g. feature usage frequency, crash reports) using Apple's on-device analytics framework. No personal identifiers are attached. Our landing website uses Cloudflare Web Analytics — a cookie-free, privacy-first analytics tool that does not track individuals across sites.

3. How we use your data

• To facilitate AI-powered health analysis by routing aggregated summaries directly from your device to your chosen AI provider
• To enforce usage quotas — the app reports anonymous usage statistics (AI provider, model name, and token count) to our backend solely to track your plan's monthly analysis limit.
• To sync your subscription status across your devices
• To send product update emails (you can unsubscribe at any time)
• To diagnose crashes and improve app stability

We do not use your data for advertising, profiling, or sale to third parties.

4. Data retention

HealthKit data exists only on your device — we have no copy to retain or delete. Account data (email, subscription status) is retained for the duration of your account plus 90 days after deletion, to comply with accounting obligations. Anonymised analytics are retained in aggregate for up to 24 months.

5. Your rights (GDPR / EU users)

If you are located in the European Economic Area (EEA) or UK, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your account and associated personal data.
• Portability — request your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — withdraw HealthKit permission at any time in iOS Settings → Privacy & Security → Health.

To exercise any of these rights, email . We will respond within 30 days.

6. HealthKit specific obligations

In accordance with Apple's HealthKit developer guidelines:

• We will not use HealthKit data for advertising or selling data to advertising platforms.
• We will not disclose HealthKit data to third parties without user consent, except as required by law.
• HealthKit data will not be used to build user profiles for use by third parties.
• All HealthKit access requires explicit user permission granted in-app.

7. Third-party processors

• Anthropic (AI inference, managed mode) — Privacy Policy
• OpenAI (AI inference, managed mode) — Privacy Policy
• Google (Gemini) (AI inference, managed mode) — Privacy Policy
• Cloudflare (CDN, DNS, website analytics) — Privacy Policy
• Apple (payments, app distribution, analytics) — Privacy Policy

Each of the above processors is contractually bound to handle your data in accordance with applicable data protection laws.

8. Children's privacy

"Health AI Insight" is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notification or email at least 14 days before taking effect. Continued use of the app after the effective date constitutes acceptance of the updated policy.

10. Contact

Health AI Insight
Email: