Privacy Policy
Last Updated: January 2025
Effective Date: January 2025
1. Introduction
Helthy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").
By using Helthy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.
2. Information We Collect
2.1 Personal Information
We collect the following personal information when you create an account and use our Service:
Account Information:
- Email address
- First name and last name (optional)
- Profile picture (optional)
- Authentication credentials (managed by Clerk)
Health and Fitness Data:
- Height, weight, and body measurements
- Date of birth and gender
- Activity level and fitness goals
- Workout history (exercises, sets, reps, weights, duration)
- Nutrition data (meals, foods, calories, macronutrients)
- Meal photos and progress photos
- Step counts and activity data
- Health goals and targets
- Dietary preferences and allergens
- Body fat percentage history
- Personal records and achievements
2.2 Health Data from Apple HealthKit
If you grant permission, we may access and store the following data from Apple HealthKit:
- Steps and activity data
- Weight measurements
- Workout data
- Other health metrics you choose to share
Important: We only read and write HealthKit data with your explicit permission. You can revoke this permission at any time through your iOS Settings.
3. How We Use Your Information
We use the information we collect to:
- Track your workouts and nutrition
- Calculate your TDEE (Total Daily Energy Expenditure)
- Generate personalized insights and recommendations
- Sync data across your devices
- Send you notifications and reminders
- Parse food descriptions using AI
- Provide workout recommendations
- Improve our features and user experience
4. Third-Party Services and Data Sharing
We use the following third-party services that may process your data:
Clerk - Authentication
Data shared: Email, name, authentication tokens
Purpose: Secure user authentication
Cloudinary - Media Storage
Data shared: Profile pictures, meal photos, progress photos
Purpose: Store and serve images
Neon - Database Hosting
Data shared: All user data stored in our database
Purpose: Data storage and management
Typesense - Search Engine
Data shared: Food library data, exercise data, user search queries
Purpose: Fast search functionality
OpenAI - AI Services
Data shared: Food descriptions, meal images, user queries
Purpose: Parse food intake, generate insights, provide chat assistance
Important: OpenAI may use your data to improve their models unless you opt out
We do not sell your personal information to third parties.
5. Data Storage and Retention
Your data is stored on secure servers provided by our hosting partners. Data may be stored in the United States or other countries where our service providers operate.
We retain your personal information for as long as your account is active or as needed to provide you services. We will delete or anonymize your data:
- Upon Account Deletion: All your data is permanently deleted within 30 days of account deletion request
- Inactive Accounts: We may delete accounts that have been inactive for 3 years
- Legal Requirements: We may retain certain data as required by law
6. Your Rights and Choices
6.1 Access and Correction
You can access and update your personal information through the app settings or by contacting us.
6.2 Data Export
You can request a copy of your data in JSON, CSV, or PDF format through the app settings (Settings → Privacy & Security → Export My Data).
6.3 Account Deletion
You can delete your account and all associated data at any time:
- Go to Settings → Privacy & Security
- Scroll to "Data Management"
- Tap "Delete Account"
- Follow the confirmation prompts
Warning: Account deletion is permanent and cannot be undone. All your data will be permanently deleted.
6.4 GDPR Rights (EU Users)
If you are located in the European Economic Area (EEA), you have additional rights:
- Right to access your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
7. Children's Privacy
Helthy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
8. Permissions We Request
iOS Permissions
HealthKit (Read/Write)
Usage: To sync health data (steps, weight, workouts)
Revoke: iOS Settings → Privacy & Security → Health
Camera
Usage: To scan barcodes and take meal photos
Revoke: iOS Settings → Privacy & Security → Camera
Photo Library
Usage: To attach meal images and save photos
Revoke: iOS Settings → Privacy & Security → Photos
Microphone & Speech Recognition
Usage: To voice-log meals with speech-to-text
Revoke: iOS Settings → Privacy & Security → Microphone
Notifications
Usage: To send reminders and updates
Revoke: iOS Settings → Notifications
9. Medical Disclaimer
IMPORTANT: Helthy is not a medical device and does not provide medical advice, diagnosis, or treatment. The information provided by Helthy is for general health and fitness purposes only and is not intended to replace professional medical advice, diagnosis, or treatment.
Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of information provided by Helthy.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending you an email notification for material changes.
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Your Consent: By using Helthy, you consent to our Privacy Policy and agree to its terms.
