Privacy Policy

Healthspool is a personal export tool. Contact the developer at [email protected].

Health data the app reads

If you allow it, Healthspool reads these Apple Health types on your iPhone: heart rate, resting heart rate, heart rate variability, steps, active energy, VO₂ max, workouts, sleep, weight, and body fat. Categories are Heart & HRV, Activity & Workouts, Sleep, and Body & Vitals. Body & Vitals starts off.

Healthspool does not write to Apple Health. It does not read clinical records.

Where data lives

Health samples, automations, and the delivery log stay in the app sandbox on your iPhone. There is no Healthspool account. The app does not include an analytics SDK.

Auth tokens and extra HTTP headers for a webhook are stored in the Keychain on that iPhone. They are not written into the automation record or the delivery log.

When data leaves the iPhone

A copy, a share sheet, or an automation you turn on is the only way health data leaves the phone.

• Copy and share. You put the export on the clipboard or hand the file to another app through the system share sheet. What happens next is up to that app.
• Webhook. Pro can POST the Markdown, JSON, or CSV you built to a URL you enter. The payload is the metrics and date range you chose.
• File. A file automation writes under On My iPhone → Healthspool in the Files app. iCloud Drive is not used.

Webhooks must use https. http is allowed only for localhost, names ending in .local, loopback, private LAN addresses, and link-local 169.254.0.0/16. Redirects are not followed. Do not put tokens in the URL. You are responsible for the destination you choose.

Example automations shown when you turn on sample data are not saved and are not sent. Exports made from sample data are marked as sample data.

Tracking, analytics, and advertising

Healthspool does not track you across apps or websites. The privacy manifest sets NSPrivacyTracking to false, lists no tracking domains, and lists no collected data types. The app uses UserDefaults only to store its own settings on the device.

HealthKit data is never used for advertising, marketing profiles, or data brokers. Healthspool does not sell health data.

Cloud

Cloud and the Agents tab are not offered in v1. There is no hosted endpoint, Cloud purchase, or signup list.

Purchases

Purchases are processed by Apple. Healthspool does not receive your card number. Apple provides the app with the purchase state for Pro Lifetime.

This website

healthspool.app is a static site. It does not set analytics cookies and it does not ask for health data.

There is no Cloud signup form or waitlist on this site, so the site does not collect an email address.

Children

Healthspool is not directed at children under 13. The developer does not knowingly collect personal information from children.

Your choices

Turn categories off in the app’s Settings. Revoke Health access in the iOS Settings app under Health → Data Access & Devices → Healthspool. Delete the app to remove its sandbox data and Keychain items with it.

Changes

If this policy changes, the effective date at the top will change. The current version is published at https://healthspool.app/privacy/.