Health Decoder
Template, not ready to publish. Replace every highlighted placeholder, delete sections that don't apply, and make sure the policy matches your App Privacy label in App Store Connect. Because the app handles health data, consider having it reviewed by a privacy professional.

Privacy Policy

Effective date: [1 November 2026]

The short version
  • Your health data is processed [on your device only / on our servers in the EU].
  • We never sell your data or use it for advertising.
  • We never use data from Apple Health (HealthKit) for marketing or share it with data brokers.
  • You can delete your data at any time.

1. Who is responsible

This policy explains how [Your name or company name] ("we", "us") handles personal data when you use the Health Decoder iOS app (the "App") and this website.

Data controller:
[Name / company]
[Street address, postcode, city, country]
Email: [privacy@example.com]

2. What data we process

Health data

With your permission, the App reads the following data from Apple Health: [e.g. heart rate, blood pressure, lab results, sleep, steps]. You can also enter [e.g. lab values, symptoms] manually. This data is used solely to show you explanations and trends inside the App.

[Choose one and delete the other:]

[A] All health data is processed and stored locally on your device. It is never sent to us or to anyone else.

[B] To generate explanations, the relevant values are sent over an encrypted connection to [service / provider], processed, and [deleted immediately / stored for X days].

Usage and diagnostic data

[If you use analytics or crash reporting, describe it here, e.g. "We collect anonymous crash reports via Apple's built-in diagnostics, only if you opted in to share analytics with app developers." If you use none, say: "The App contains no analytics or tracking SDKs."]

Purchases

[If the app has in-app purchases or subscriptions:] Payments are handled by Apple. We never receive your payment details. [If you use RevenueCat or similar: we receive an anonymous purchase identifier to unlock features.]

Support requests

If you email us, we use your email address and message only to answer your request.

3. Apple Health (HealthKit)

  • We only access the HealthKit data types you explicitly allow, and you can change this at any time in the iOS Settings app under Health › Data Access & Devices.
  • We never use HealthKit data for advertising, marketing or data mining, and never sell it or share it with advertising platforms or data brokers.
  • We never store HealthKit data in iCloud [remove if you do; then describe it].

4. Service providers

We use the following providers, who process data on our behalf under data-processing agreements:

ProviderPurposeLocation
[e.g. Cloudflare]Hosting this website[EU / USA]
[e.g. backend / AI provider][purpose][location]

[If any provider is outside the EU/EEA, mention the safeguard, e.g. EU Standard Contractual Clauses or the EU-US Data Privacy Framework. If you use no providers apart from website hosting, simplify this section.]

5. Legal bases (EU/EEA users)

  • Health data: your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR), which you give when you grant access in the App. You can withdraw it at any time.
  • Providing the App and purchases: performance of a contract (Art. 6(1)(b) GDPR).
  • Security and website operation: our legitimate interests (Art. 6(1)(f) GDPR).

6. How long we keep data

[e.g. "Data stored on your device remains until you delete it or uninstall the App. Server-side data is deleted within 30 days of your request. Support emails are deleted after 12 months."]

7. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, email [privacy@example.com]. You also have the right to complain to a data protection authority, for example the one in your country of residence.

[Explain how to delete data in the App, e.g. Settings › Delete all data. If the App has user accounts, Apple requires in-app account deletion.]

8. This website

This website uses no cookies, analytics or tracking. When you visit it, our hosting provider [provider name] automatically processes technical data (such as your IP address, browser type and time of access) in server logs to deliver the site and keep it secure. These logs are kept for [X days].

9. Children

The App is not intended for children under [16], and we don't knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the effective date. If the changes are significant, we will also let you know in the App.

11. Contact

Questions about privacy? Email [privacy@example.com].