Healthfolio

Privacy Policy

Last updated: 2026-11-11

Healthfolio ("the app") is developed by HeroSizy ("we"). Your health data belongs to you, and the app is built so that it only goes where you choose.

1. We do not collect your health data

  • We run no server of our own and require no account. We never receive, store or see your health data, checkup reports or conversations.
  • The app has no ads, does no cross-app tracking, and does not sell or share data.

2. Data the app reads and processes

  • Apple Health data: only the types you allow on the system permission screen. It is processed on your device and sent only to the destinations you configure.
  • Checkup reports: photos and PDFs you take or import stay on your device. Recognition uses on-device Apple Intelligence by default and does not leave the device.
  • Writing to Apple Health: only after you review and confirm, the app writes values such as height, weight, blood pressure and glucose to Apple Health.
  • AI conversations: stored on your device. They go somewhere else only if you turn on chat backup for a destination or export them yourself.

The app does not use data from Apple Health for advertising, marketing or data mining, and does not give it to third parties other than the destinations or AI services you set up yourself (see below).

3. Where data goes: only where you choose

  • Export / Share: when you export manually, the app creates a file and you choose where it goes in the system share sheet (Files, AirDrop, Mail and so on).
  • Automatic sync destinations you configure (Pro): for example your home server, a folder you pick (it can be in your own iCloud Drive), your private GitHub repository, S3-compatible storage, Supabase or a webhook. Data goes directly from your device to these services, which handle it under their own policies.
  • iCloud Drive (optional, off by default): only if you turn on the iCloud Drive destination, health data and checkup reports are written to the "Healthfolio" folder in your own iCloud Drive (visible in the Files app) and stored by Apple under its privacy policy. They are end-to-end encrypted only if you turn on iCloud Advanced Data Protection. We cannot see these files. AI conversations are not written there by default.
  • iCloud settings sync: app settings (destination names, Home layout, AI choice and similar, no health data) sync through your iCloud key-value storage. You can turn this off in Settings.
  • Cloud AI (Pro, optional): only when you choose a service such as Claude, OpenAI or Gemini, your question, the relevant health data summary or report text is sent to that service with your own API key. The app asks for your consent before first use.
  • MCP server on iPhone (Pro, optional): only while you run it, AI tools on the same network that hold the access token can read your health data (read-only).

4. Crash reports

To fix problems, the app sends crash and error reports to the error-monitoring service Sentry by default. Reports do not include health data, checkup content, conversations, tokens, URLs or numbers; these are removed before sending. Only the error location, app version, OS version and device model remain. You can turn this off in Settings → Privacy & Security.

5. Keys and tokens

API keys, access tokens and passwords you enter are stored in the device Keychain. They sync to your other devices through iCloud Keychain (end-to-end encrypted) only if you turn on "Also sync keys".

6. Retention and deletion

  • Deleted reports and conversations go to Recently Deleted and are permanently removed after 30 days, or immediately if you choose.
  • Settings → Privacy & Security → Clear Local Data removes all app data on the device. It does not affect Apple Health or backups already sent to destinations.
  • To remove data you sent to a destination or exported, delete it there. Synced settings can be removed from iCloud in iPhone Settings → your name → iCloud → Manage Storage.

7. Children

The app is not directed at children under 13, and we do not knowingly collect children's data.

8. Changes

If this policy changes, we update this page and its date; significant changes are noted in the app's release notes.

9. Contact

Email: support@herosizy.dev