HealthIQ AI
Privacy Policy
This policy explains what information HealthIQ AI ("the app", "we") collects, why, and what happens to it.
1. Information we collect
Account information
- Name, email address and country, provided when you register directly or sign in with Google or Apple. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address.
Health profile (provided by you, all optional)
- Age, weight, height, gender, primary health goal, daily calorie target, weight goals
- Dietary restrictions (e.g. vegan, gluten-free)
- Medical conditions (e.g. diabetes, high blood pressure, pregnancy)
- Food allergies, including custom allergies you type in
Food and activity data (created as you use the app)
- Food scans: barcodes, nutrition-label text, and food photos you take or upload, plus the AI analysis results
- Meal logs, water intake, weight entries, exercise entries, diet plans, shopping lists, fasting sessions, streaks and weekly AI reports
Health & fitness data from your device (only if you turn on health sync)
- Steps, active energy burned and sleep sessions, read from Apple Health on iOS or Health Connect on Android. See section 4.
Friends (only if you use the friends feature)
- Your display name and current streak are shared with people you are connected to. Your step count is shared only if you switch step sharing on.
Device and usage data
- A push-notification token for your device (so reminders and reports can reach you)
- Your device time zone, so reminders arrive at the right local hour
- Anonymous analytics events (e.g. "scan completed", "plan generated") and crash reports, collected through Google Firebase Analytics and Crashlytics
2. How we use your information
- To personalize AI health scores, verdicts, meal plans and coach answers to your profile — this is the app's core function
- To show your dashboard, progress summaries, streaks and weekly reports
- To show your friends leaderboard, using only what you have chosen to share
- To send meal, water, fasting and exercise reminders and report notifications (you can turn these off in Profile)
- To provide and restore your Premium subscription
- To fix crashes and improve the app
We do not sell your personal information. We do not use your health data for advertising.
3. Who processes your data
- Google Firebase (Google LLC): authentication, database, file storage, push notifications, analytics and crash reporting. Data is stored on Google Cloud servers.
- Anthropic (Claude API): when you scan a food, ask the AI coach, or generate a plan or report, the relevant food data and a copy of your health profile (goal, restrictions, conditions, allergies — not your name or email) are sent to Anthropic's API to produce the AI response.
- OpenFoodFacts and USDA FoodData Central: when you search for a food or scan a barcode, the search term or barcode is sent to these public food databases to look up nutrition facts. No personal information is sent with the lookup.
- RevenueCat: manages Premium subscription status. Your purchase receipt and an anonymous app user ID are processed to unlock and restore Premium.
- Apple App Store / Google Play: all payments are handled by the app store. We never see or store your payment card details.
- Seller links: shopping links open in your browser; anything you do on those sites is governed by their own policies.
4. Apple Health and Health Connect
Health sync is off by default and only runs after you explicitly grant permission.
- We request read-only access. The app never writes data back to Apple Health or Health Connect.
- We read only steps, active energy burned and sleep sessions — nothing else.
- This data is used inside the app to show your activity and, if you enable it, to adjust your daily calorie target.
- Health data is never used for advertising or marketing, and is never sold or shared with data brokers.
- Your step count is not visible to anyone else unless you turn on step sharing for friends.
- You can revoke access at any time in the app (Profile → health sync) or in your device's Health / Health Connect settings. Revoking stops any further reading immediately.
5. Data retention
Your data is kept for as long as your account exists. When you delete your account, your data is removed as described in our Data Deletion Policy (within 30 days).
6. Your choices
- Edit or remove any health-profile information at any time (Profile → Edit health profile)
- Turn health sync off, and revoke permission in your device settings
- Turn step sharing off, or remove a friend, at any time
- Turn notifications off in the app or in system settings
- Delete your account and data at any time (Profile → Delete account, or email us)
7. Children
The app is not directed at children under 13, and we do not knowingly collect their data.
8. Security
Data is transmitted over encrypted connections (HTTPS) and protected by Firebase security rules so that only you can read your own records. No system is perfectly secure; keep your account credentials safe.
9. Changes
We may update this policy. Material changes will be announced in the app. Continued use after a change means you accept the updated policy.
Questions? Email rxalphatech@gmail.com.