Privacy Policy

1. Who we are

“Health Data Bot”, “we”, “us” and “our” refer to the operator of the Health Data Bot iPhone app, its connector service and this website. Health Data Bot is operated from Australia.

Legal entity details: TBD – legal name of operator, registered business details and address for legal notices

For the purposes of privacy laws, Health Data Bot is the entity responsible for (the “controller” of) the personal information described in this policy.

2. Scope

This policy covers the Health Data Bot iPhone app (the “App”), the Health Data Bot server that stores your data and answers your AI assistants (the “Service”), and this website. It does not cover the AI assistants you choose to connect, the Apple Health app, or the App Store. Those are run by other companies under their own privacy policies.

3. Information we collect

3.1 Health data (only with your permission)

With your permission, granted through Apple’s Health access screen, the App reads data from Apple Health (HealthKit). Access is read-only: the App never writes, changes or deletes anything in Apple Health. It reads only the categories you allow, which may include:

• Activity: steps, walking and running distance, flights climbed, active and resting energy, exercise and stand time.
• Heart: heart rate, resting and walking heart rate, heart rate variability, and related measurements such as blood oxygen, respiratory rate, VO₂ max and blood pressure, where available.
• Sleep: sleep sessions and sleep stages.
• Workouts: workout type, start and end time, duration, distance and energy, and summary heart rate.
• Body measurements: such as weight, body mass index, body fat percentage, lean body mass and height.

Daily aggregates only. The App calculates daily totals, averages, minimums and maximums on your iPhone and uploads those summaries, together with summaries of individual workouts and sleep sessions. It does not upload every raw sample recorded by your devices, and it does not upload the names of the devices or apps that recorded the data, your location or workout routes, clinical health records, or notes. You can turn off any category at any time in the Health app.

3.2 Account information

Health Data Bot has no sign-up. When you first open the App, the Service creates an anonymous account consisting of a random account identifier and a random device secret. The device secret is stored only in your iPhone’s Keychain (not synced to iCloud); our servers keep only a one-way hash of it. We do not collect your name, email address, phone number, date of birth or Apple Account details.

3.3 Subscription information

Purchases are made through Apple. Apple sends us, and the App sends us, signed transaction records so we can confirm your subscription. These contain details such as the product purchased, transaction identifiers, purchase, expiry and renewal dates, cancellation or refund status, App Store country or region (storefront) and the anonymous account identifier attached to the purchase. We do not receive your payment card details, name or Apple Account email.

3.4 Connection information

To let your AI assistants reach your data, we store your connector link’s secret and its status. If an assistant connects using sign-in (OAuth), we store the name the assistant registers itself with (for example, the app’s client name), its redirect address, and the access tokens issued to it, all linked to your connection.

3.5 Technical information

When the App, an AI assistant or your browser contacts our servers, our infrastructure provider automatically processes technical information needed to deliver and protect the Service, such as IP address, time of request, request path and status, and software type. We use this only to operate, secure and troubleshoot the Service (for example, rate limiting and abuse prevention), not to identify or profile you. Note that requests to your connector are made by your AI provider’s servers, so the IP address we see is usually theirs, not yours.

4. Information we don’t collect

• No name, email, phone number, postal address or date of birth.
• No precise or coarse location, contacts, photos or advertising identifier.
• No analytics, advertising, crash-reporting or tracking software in the App or on this website.
• No content of your conversations with your AI assistants. We see only the requests the assistant makes to Health Data Bot (for example, “daily steps from 1 to 7 March”), not your chat.

5. How we use information

We use health data only to provide the Service you asked for: to store it and to return it to AI assistants that you explicitly connect, when they request it. We use other information only to:

• create and maintain your anonymous account and connector link;
• verify your subscription and enforce one active connection per subscription;
• keep the Service secure, prevent abuse and fix problems;
• respond to you if you contact support; and
• comply with the law.

We do not use health data to train AI or machine-learning models, for research, or to build profiles about you.

6. Disclosure to AI providers you connect

The core purpose of Health Data Bot is to let you share your health data with AI assistants of your choice. Disclosure happens only because of actions you take:

• You decide whether to add your connector link to an assistant, and which assistants (for example ChatGPT by OpenAI, Claude by Anthropic, Gemini by Google, Grok by xAI, or another MCP-capable app).
• After you connect, the assistant requests data when it decides your question needs it. We then send it the requested summaries.
• Once an AI provider receives your data, its own terms and privacy policy apply, including how long it keeps chats, whether it uses them to train models, and where it stores them. We do not control those providers and are not responsible for their practices. Please review their policies and settings before connecting.
• Deleting your data in Health Data Bot does not delete data an AI provider has already received. Use that provider’s controls to delete chat history.
• You can stop future disclosure at any time by removing the connector from your assistant, creating a new link in the App (which disables the old one), or deleting your account.

Anyone who has your connector link can read your data while your subscription is active. Treat it like a password.

7. Service providers

We use a small number of providers that process information on our behalf under contract and only on our instructions:

We may also disclose information if required by law, to respond to valid legal process, or to protect the rights, safety or security of users, the public or Health Data Bot. Because we don’t know who our users are, we generally have very little that can identify you. If Health Data Bot is ever sold or restructured, information may transfer to the new operator, who must continue to protect it in line with this policy, and we will tell you in the App beforehand.

8. What we never do

• We never sell, rent or trade your information.
• We never use or disclose health data for advertising, marketing or other use-based data mining.
• We never share health data with data brokers, advertisers or analytics companies.
• We never store health data in iCloud.
• We never write to or modify your Apple Health data.

9. Security

• In transit: all connections between the App, the Service and AI assistants use HTTPS (TLS).
• At rest, per user: each account has its own randomly generated AES-256 encryption key. Your health data is stored encrypted with that key, and the key itself is stored encrypted with a separate master key held as a protected server secret.
• Secrets: device secrets are stored only as one-way hashes. Connector links are long random values that are revoked as soon as you replace them.
• Minimisation: we collect daily summaries rather than raw data, and no identity information.
• Access: access to production systems is restricted and protected by strong authentication.

No system is perfectly secure. If we become aware of a data breach likely to cause serious harm, we will notify affected users (for example, through the App) and regulators as required by law.

10. Retention and deletion

• While your account exists: we keep the health data the App uploads so your assistants can answer questions about trends over time. TBD – confirm whether a maximum history period applies
• Delete My Data (in the App, Settings → Delete My Data): immediately and permanently deletes your account, connector link, sign-in tokens, subscription link to your account, and all stored health data, and destroys your account’s encryption key.
• Delete Uploaded Health Data Only (in the App, same screen): immediately deletes stored health data but keeps your account, subscription and link, and pauses uploading until you turn sharing back on.
• Backups: our database provider keeps automatic point-in-time recovery copies for up to 30 days. Deleted data may remain in those copies, encrypted, until they expire. We use them only to recover from a disaster, and would re-apply your deletion if we ever had to restore.
• Inactive accounts: if your subscription has ended and the App has not contacted the Service for an extended period, we may delete the account and its data. TBD – set inactivity period
• Technical logs are kept only briefly for security and troubleshooting. TBD – confirm log retention period
• Subscription records may be kept for as long as required for tax, accounting and legal purposes, without any health data.
• Support emails are kept only as long as needed to resolve your request and for record keeping.

Deleting the App from your iPhone removes the App’s local data but does not delete data on our servers. Use the in-App Delete option first. Deleting does not cancel your Apple subscription.

11. International transfers

Health Data Bot is operated from Australia. The Service runs on Cloudflare’s global network, so your information may be processed and stored in countries other than your own, including the United States and other countries where Cloudflare operates data centres. When you connect an AI assistant, your data is sent to that provider, which may process it in other countries. Where required (for example under the GDPR or UK GDPR), we rely on appropriate safeguards for transfers, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum included in Cloudflare’s data processing terms. Disclosures to AI providers you connect are made at your direction.

12. Your choices and rights

• Control what is read: change Health permissions at any time in the Health app.
• Control who receives it: add or remove connectors in your AI assistants, or replace your link.
• Access: you can review your stored data by asking a connected assistant for it.
• Delete: use the in-App Delete options for immediate deletion.
• Other requests: you may ask us to access, correct, export or delete information, or to restrict or object to processing, by contacting us. Because accounts are anonymous, we will need you to provide information from the App so we can verify the request relates to your account. We will respond within the time required by law, generally within 30 days.

13. Australian Privacy Act

We handle personal information, including health information (which is “sensitive information”), in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In particular:

• We collect health information only with your consent, given when you grant Health access and connect your assistants, and only as reasonably necessary to provide the Service (APP 3).
• You can deal with us anonymously: we do not require you to identify yourself (APP 2).
• We use and disclose health information only for the primary purpose for which it was collected, or as otherwise permitted by law (APP 6).
• We do not use or disclose personal information for direct marketing (APP 7).
• Information may be disclosed to overseas recipients as described in section 11 (APP 8). Disclosures to AI providers happen at your direction and with your consent, and once disclosed, the provider’s own policies and laws apply; we may not be accountable for how an overseas AI provider you chose handles that information.
• We take reasonable steps to protect information and to destroy or de-identify it when no longer needed (APP 11).
• You may request access to or correction of your information (APPs 12 and 13).

Complaints: please contact us first and we will respond within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. EU and UK GDPR

If you are in the European Economic Area, the United Kingdom or Switzerland, the following also applies.

• Legal bases: we process health data (special category data) on the basis of your explicit consent (Article 9(2)(a) GDPR), given when you grant Health access and connect an assistant. We process account, subscription and connection information to perform our contract with you (Article 6(1)(b)), and technical information for our legitimate interests in securing the Service (Article 6(1)(f)), and to comply with legal obligations (Article 6(1)(c)).
• Withdrawing consent: you can withdraw consent at any time by turning off Health access, removing connectors or deleting your data in the App. This does not affect processing before withdrawal.
• Your rights: access, rectification, erasure, restriction, data portability, objection, and not to be subject to solely automated decisions with legal or similarly significant effects (we make none).
• Complaints: you may lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).
• Representative: TBD – EU/UK representative details, if required

Residents of other places, such as US states with consumer privacy laws, may have similar rights. Contact us to exercise them. We do not sell or “share” personal information for cross-context behavioural advertising.

15. Children

Health Data Bot is not directed to children and is intended for people aged 16 or older (or the age of digital consent where you live, if higher). We do not knowingly collect information from children under that age. If you believe a child has used the App, they or a parent can delete all data instantly in the App, or contact us.

16. This website

This website uses no cookies, analytics, advertising, tracking pixels, third-party scripts or external fonts. It is hosted by Cloudflare, which processes technical information such as IP addresses to deliver the pages and protect against attacks.

17. Changes to this policy

We may update this policy as the Service or the law changes. We will post the new version here with a new “Last updated” date and, for material changes, tell you in the App before they take effect. We will never use health data for a new purpose without your consent.

18. Contact

Privacy questions, requests and complaints: support@healthdatabot.com.
Operator: Health Data Bot. TBD – legal entity details and postal address for notices