This Privacy Policy describes how HLTH ("we," "us," or "our") collects, uses, stores, and shares information when you use the HLTH mobile application ("App") and related services ("Services"). The App is free; by using it, you agree to this policy.
1. Who we are#
HLTH provides a consumer wellness application that works with compatible wearable devices to help you view and track health and activity-related metrics.
2. Information we collect#
2.1 Account and profile information#
When you register or sign in, we process identifiers and profile details needed to operate your account, such as email address, display name, and authentication tokens. We use Google Firebase Authentication to verify identity and secure sessions.
2.2 Purchase verification (Order Key)#
When you choose to bind or enable a device, we may ask for an order number or purchase key associated with your HLTH store order. We collect and process this value to confirm that your purchase qualifies for device use, to link the entitlement to your account, and to reduce fraud or unauthorized resale. This information may be stored with your user profile in Google Cloud Firestore (for example as an order identifier and verification status).
2.3 Cloud profile and preferences#
With your account, we may store profile and preference data in Google Cloud Firestore (for example, onboarding answers, goals, and settings you choose) so your experience can sync across devices when you use those features.
2.4 Health, activity, and device data#
The App reads data from your paired wearable (for example, heart rate, sleep, steps, SpO2, workouts, and battery or connection status as needed for sync). The App may also display blood pressure-related estimates where reported by the device. These estimates are not medical advice and are not intended to diagnose, treat, cure, or prevent any medical condition. Some of this data may be stored on your device for offline access and charts. If you use optional cloud backup or sync features we offer, related files or metadata may be stored in Firebase services (including Cloud Storage and Firestore) according to your actions in the App.
We never use your health or activity data for advertising purposes, and we never sell it to any third party.
2.5 Apple Health (optional)#
If you enable Apple Health integration, the App may read and/or write categories of health data you approve in the iOS permission dialogs (for example, heart rate, steps, sleep, workouts, blood oxygen). Apple Health data is controlled by Apple's privacy settings and your choices in the App. Health data obtained through Apple Health is never used for advertising or shared with third parties beyond what is described in this policy.
2.6 Location (optional)#
When you use outdoor activity features, the App may access your location while the feature is active, as disclosed in the system permission prompt, to record route-related information you choose to capture.
2.7 Bluetooth#
The App uses Bluetooth to discover, pair with, and exchange data with your compatible wearable, as disclosed in the system permission prompts.
2.8 Technical and security data#
We and our service providers may automatically collect limited technical information needed to operate and secure the Services (for example, device type, OS version, app version, diagnostic identifiers, and timestamps). Google Firebase and related components may process certain technical or operational data in accordance with Google's policies when you use the App.
2.9 Crash and diagnostic data#
When the App crashes or encounters a serious error, we use Google Firebase Crashlytics to collect crash reports and limited diagnostic information (for example, device model, operating system version, app version, crash timestamps, stack traces, and which screen was open). If you are signed in, your Firebase authentication user ID may be associated with a crash report to help us investigate issues affecting your account. We use this information only to diagnose failures, improve stability, and fix bugs—not for advertising or marketing profiling. Crash reporting is disabled in developer/debug builds of the App.
2.10 Friends and step sharing (optional)#
If you use Friends & Family or related step-challenge features, the following applies only when you choose to use them:
- Friend connections: You may create one-time invite links or QR codes. Invite records (for example, status, expiry, and display names you provide) are stored in Google Cloud Firestore. When someone accepts an invite while signed in, the App updates invite and friend-list records in Firestore to link your accounts for step comparison. You may remove a friend (unfriend) from the App, which updates your friend list in Firestore.
- Step sharing toggle: If you turn on sharing of daily steps, the App uploads your step total for each calendar day you share (typically “today” while the feature is on) to Firestore under your account so friends you have connected with can see that number for comparison. Sleep, heart rate, blood oxygen, stress, location routes, and other health metrics are not shared through this feature.
- App version on your profile: When you are signed in, we may store the App version and build number on your user profile in Firestore to help support and compatibility (for example, after you install an update).
- Minimum version check: The App may read a public configuration document from Firestore (for example, minimum supported App version) to determine whether an update is required. This check does not upload your health data.
You can use the App without connecting with friends or without turning on step sharing.
3. How we use information#
We use the information above to:
- Provide, maintain, and improve the App and device connectivity;
- Verify purchase eligibility and bind devices fairly;
- Authenticate users and protect against fraud or abuse;
- Store and display your metrics, goals, and history as you expect;
- Diagnose crashes, improve stability, and fix bugs;
- Honor optional features you turn on (such as Apple Health sync, cloud backup, or sharing daily steps with friends you connect with);
- Comply with law and enforce our Terms of Service.
We do not use any personal or health data for advertising, marketing profiling, or sale to third parties.
4. Legal bases (where applicable)#
If the GDPR or similar laws apply, we rely on bases such as: performance of a contract (providing the Services), legitimate interests (security, verification of purchases, improvement, and support, balanced against your rights), consent (where we ask for it, for example for optional Health or location features), and legal obligation.
5. Sharing of information#
We do not sell your personal information. We share data only as needed with:
- Service providers who assist us (for example, Google Firebase / Google Cloud for authentication, database, file storage, crash reporting via Firebase Crashlytics, and related infrastructure), subject to contractual protections where required by law;
- Apple, when you use Apple Health or other Apple frameworks under your control;
- Wearable device communication that occurs locally or as needed for product functionality;
- Other HLTH users you connect with as friends, but only the information you choose to share through the friends features (for example, your display name and daily step totals when step sharing is on—not your full health history);
- Authorities if required by law or to protect rights, safety, and security.
6. International transfers#
If you use the App from outside the country where our servers or Google's infrastructure are located, your information may be processed in other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) as provided by Google and applicable law.
7. Retention#
We retain account and service data for as long as your account is active and for up to 90 days after account deletion for backup, legal, or security purposes, unless a shorter period is required by law. Crash reports processed by Firebase Crashlytics are retained according to Google's retention policies for that service (typically up to 90 days). You may request deletion of your account subject to Section 9.
8. Security#
We use industry-standard measures appropriate to the nature of the data (including encryption in transit where supported by the platform and providers). No method of transmission or storage is 100% secure.
9. Your rights and choices#
Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing. You can manage many permissions in iOS Settings (Health, Location, Bluetooth) and in the App. You can delete your account in the App under More → Delete Account (password confirmation required). To exercise other rights or ask questions, contact us at support@hlth-sa.com. You may also lodge a complaint with your local data protection authority.
10. Children#
The App is not directed to children under 13 (or the digital consent age in your region). We do not knowingly collect personal information from children in violation of applicable law. If you believe we have, contact us at support@hlth-sa.com and we will take appropriate steps.
11. Third-party services#
The App may contain links or integrations with third parties (for example, Apple, Google, device vendors). Their collection and use of information are governed by their own policies.
12. Changes to this policy#
We may update this Privacy Policy from time to time. We will post the updated version in the App and change the "Last updated" date. Where required by law, we will provide additional notice.
13. Contact#
For privacy requests or questions, contact us at: support@hlth-sa.com