Privacy Policy

Last Updated: November 2026Effective Date: March 2026

1. Introduction

Helthy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").

By using Helthy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you create an account and use our Service:

Account Information:

  • Email address
  • First name and last name (optional)
  • Profile picture (optional)
  • Authentication credentials (managed by our authentication provider)

Health and Fitness Data:

  • Height, weight, and body measurements
  • Date of birth and gender
  • Activity level and fitness goals
  • Workout history (exercises, sets, reps, weights, duration)
  • Nutrition data (meals, foods, calories, macronutrients)
  • Meal photos and progress photos
  • Step counts and activity data
  • Health goals and targets
  • Dietary preferences and allergens
  • Body fat percentage history
  • Personal records and achievements

2.2 Health Data from Apple HealthKit & Google Health Connect

If you grant permission, we may access and store the following data from Apple HealthKit (iOS) or Google Health Connect (Android):

  • Steps and activity data
  • Weight measurements
  • Workout data
  • Other health metrics you choose to share

Important: We only read and write health platform data with your explicit permission. On iOS you can revoke this through iOS Settings → Privacy & Security → Health. On Android you can revoke this through Android Settings → Apps → Health Connect.

3. How We Use Your Information

We use the information we collect to:

  • Track your workouts and nutrition
  • Calculate your TDEE (Total Daily Energy Expenditure)
  • Generate personalized insights and recommendations
  • Sync data across your devices
  • Send you notifications about meal logging, your weekly progress and milestones
  • Parse food descriptions and meal photos using AI
  • Provide an AI health coaching chat assistant
  • Estimate body fat percentage from progress photos using AI vision analysis (with your explicit consent)
  • Provide workout recommendations
  • Improve our features and user experience

4. Third-Party Services and Data Sharing

We use the following third-party services that may process your data:

Authentication Provider

Data shared: Email, name, authentication tokens

Purpose: Secure user authentication

Cloud Hosting & Infrastructure Providers

Data shared: Encrypted user data, profile images, and meal/progress photos

Purpose: Secure database storage, media hosting, and search functionality

AI Service Providers

Data shared: Meal photos, nutrition label photos, progress photos (for body fat estimates, with your consent), coach chat messages, typed and spoken food descriptions, and the information the coach needs to answer you (such as your profile, targets, recent meals, workouts and weight trend)

Purpose: AI coach chat, meal photo and label analysis, nutrition estimates, body fat estimates, AI-built workouts and meal ideas, and personalized insights

Speech Recognition Providers

Data shared: Audio while you voice-log a meal

Purpose: Transcribing what you say into a food log

Important: None of our AI or speech providers may use your data, photos or recordings to train their models. We use their business services under terms that exclude training, and we opt out of any model-improvement programs. Providers may keep data for a limited period for abuse monitoring before deleting it.

Subscription Management Provider

Data shared: Anonymous user ID, purchase receipts, subscription status

Purpose: Manage premium subscriptions and entitlements

A current list of the service providers we use is available on request at support@helthy.app.

We do not sell your personal information to third parties.

Product analytics

We use PostHog to understand feature usage. Events are associated with a pseudonymous account ID and may include screen views, active time, food logging methods and item counts, subscription status, and app and device metadata.

Current analytics excludes names, email addresses, food and workout names, meal descriptions, calorie totals, body measurements, photos, recordings, and chat text. Session replay is disabled. You can turn off Analytics in Settings → Privacy & Security to stop future tracking.

Earlier app versions could send names and health-related event properties. The updated tracking prevents new collection of those properties; it does not automatically remove previously collected data. Contact us to request access or deletion.

Onboarding counts before you have an account. While you go through the setup screens without being signed in, the app sends our own servers which setup screens were shown, how each one was left (for example continue or skip), the time spent on them, the app version and whether you use iOS or Android. They are stored under a random ID created on your phone. This ID is never linked to your account, and we don't store your IP address, name, email or your answers with it. These counts are not sent to PostHog and are deleted after 180 days.

5. Data Storage and Retention

Your data is stored on secure servers provided by our hosting partners. Data may be stored in the United States or other countries where our service providers operate.

We retain your personal information for as long as your account is active or as needed to provide you services. We will delete or anonymize your data:

  • Upon Account Deletion: All your data is permanently deleted within 30 days of account deletion request
  • Inactive Accounts: We may delete accounts that have been inactive for 3 years
  • Legal Requirements: We may retain certain data as required by law

6. Your Rights and Choices

6.1 Access and Correction

You can access and update your personal information through the app settings or by contacting us.

6.2 Data Export

Helthy Premium members can export a ZIP of all their data, or CSV files of their workouts or nutrition, from Settings → Privacy → Export Data. Anyone can request a copy of their data by emailing support@helthy.app.

6.3 Account Deletion

You can delete your account and all associated data at any time:

  1. Go to Settings → Privacy & Security
  2. Scroll to "Data Management"
  3. Tap "Delete Account"
  4. Follow the confirmation prompts

Warning: Account deletion is permanent and cannot be undone. All your data will be permanently deleted.

6.4 GDPR Rights (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights:

  • Right to access your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

7. Children's Privacy

Helthy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

8. Permissions We Request

iOS Permissions

HealthKit (Read/Write)

Usage: To sync health data (steps, weight, workouts)

Revoke: iOS Settings → Privacy & Security → Health

Camera

Usage: To scan barcodes and take meal photos

Revoke: iOS Settings → Privacy & Security → Camera

Photo Library

Usage: To attach meal images and save photos

Revoke: iOS Settings → Privacy & Security → Photos

Microphone & Speech Recognition

Usage: To voice-log meals with speech-to-text

Revoke: iOS Settings → Privacy & Security → Microphone

Notifications

Usage: To notify you about meal logging, weekly progress and milestones

Revoke: iOS Settings → Notifications

Android Permissions

Health Connect (Read/Write)

Usage: To sync health data (steps, weight, workouts)

Revoke: Android Settings → Apps → Health Connect → App permissions

Camera

Usage: To scan barcodes and take meal photos

Revoke: Android Settings → Apps → Helthy → Permissions → Camera

Photo Library / Media

Usage: To attach meal images and save photos

Revoke: Android Settings → Apps → Helthy → Permissions → Photos & Videos

Microphone

Usage: To voice-log meals with speech-to-text

Revoke: Android Settings → Apps → Helthy → Permissions → Microphone

Notifications

Usage: To notify you about meal logging, weekly progress and milestones

Revoke: Android Settings → Apps → Helthy → Notifications

9. Medical Disclaimer

IMPORTANT: Helthy is not a medical device and does not provide medical advice, diagnosis, or treatment. The information provided by Helthy is for general health and fitness purposes only and is not intended to replace professional medical advice, diagnosis, or treatment.

Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of information provided by Helthy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending you an email notification for material changes.

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Your Consent: By using Helthy, you consent to our Privacy Policy and agree to its terms.