Privacy Policy

Healthspool is a personal export tool. Contact the developer at zinbonaing@gmail.com.

Health data the app reads

If you allow it, Healthspool reads these Apple Health types on your iPhone: heart rate, resting heart rate, heart rate variability, steps, active energy, VO₂ max, workouts, sleep, weight, and body fat. Categories are Heart & HRV, Activity & Workouts, Sleep, and Body & Vitals. Body & Vitals starts off.

Healthspool does not write to Apple Health. It does not read clinical records.

Where data lives

Health samples, automations, and the delivery log stay in the app sandbox on your iPhone. There is no Healthspool account. The app does not include an analytics SDK.

Auth tokens and extra HTTP headers for a webhook are stored in the Keychain on that iPhone. They are not written into the automation record or the delivery log.

When data leaves the iPhone

A copy, a share sheet, or an automation you turn on is the only way health data leaves the phone.

• Copy and share. You put the export on the clipboard or hand the file to another app through the system share sheet. What happens next is up to that app.
• Webhook. Pro and Cloud can POST the Markdown, JSON, or CSV you built to a URL you enter. The payload is the metrics and date range you chose.
• File. A file automation writes into the app’s documents folder on the iPhone. iCloud Drive is not used. This version does not set file sharing, so the Files app does not list that folder. The in-app label still says “On this iPhone · Files”.

Webhooks must use https. http is allowed only for localhost, names ending in .local, loopback, private LAN addresses, and link-local 169.254.0.0/16. Redirects are not followed. Do not put tokens in the URL. You are responsible for the destination you choose.

Example automations shown when you turn on sample data are not saved and are not sent. Exports made from sample data are marked as sample data.

Tracking, analytics, and advertising

Healthspool does not track you across apps or websites. The privacy manifest sets NSPrivacyTracking to false, lists no tracking domains, and lists no collected data types. The app uses UserDefaults only to store its own settings on the device.

HealthKit data is never used for advertising, marketing profiles, or data brokers. Healthspool does not sell health data.

Cloud preview

The Agents screen is a preview. The MCP address and API key shown there are placeholders. They cannot call a server. Planned tools are read-only. No calls have been made.

If you save a waitlist email in the app, that address stays on the iPhone and is not uploaded.

Purchases

Purchases are processed by Apple. Healthspool does not receive your card number. Apple provides the app with the purchase state for Pro Lifetime and, if you subscribe, Cloud.

This website

healthspool.app is a static site. It does not set analytics cookies and it does not ask for health data.

The Cloud waitlist form is not connected yet. Its action is a Formspree placeholder marked TODO. Until that placeholder is replaced, submitting the form does not deliver your email. After it is connected, the form will send the email address you type, and only that, to Formspree so the developer can contact you about Cloud. That address is not health data and is not linked to an Apple Health export.

Children

Healthspool is not directed at children under 13. The developer does not knowingly collect personal information from children.

Your choices

Turn categories off in the app’s Settings. Revoke Health access in the iOS Settings app under Health → Data Access & Devices → Healthspool. Delete the app to remove its sandbox data and Keychain items with it. Manage or cancel a Cloud subscription from the paywall, from Settings, or from your Apple ID subscriptions.

Changes

If this policy changes, the effective date at the top will change. The current version is published at https://healthspool.app/privacy/.