Privacy Policy

01Contact

Privacy contact: leschenkoapp@gmail.com. Use this address for privacy requests, account deletion help and any other questions.

02What HealHub AI is

HealHub AI is a wellness and information app. It is not a medical device and does not provide medical advice, diagnosis or treatment. AI-generated content is informational only, may be wrong or incomplete, and is not a substitute for a qualified healthcare professional. In an emergency, contact your local emergency services.

03Information we process

3.1 Apple Health (HealthKit)

With your permission, the App reads the Apple Health categories you allow (for example activity, heart metrics, sleep, nutrition, body measurements, cycle tracking). This data is used to show statistics and trends on your device. HealthKit data is not stored on our servers. It leaves your device only as part of an AI request you make (see 3.4). We never use HealthKit data for advertising and never sell it.

3.2 Account

You sign in with Sign in with Apple. Firebase Authentication receives an account identifier and, if you choose to share it, your email address (which may be an Apple private relay address).

3.3 Information you enter

The following is stored on your device and, if iCloud is turned on, synced between your devices through your own iCloud account (Apple iCloud key-value storage). We cannot access it:

• profile and wellness details you enter (for example age, sex, height, weight, goals and notes);
• daily notes;
• AI context notes you save for the assistant.

Versions of the App before 1.0.8 store these items in Google Cloud Firestore. When you open version 1.0.8 or later while signed in, they are moved to your device and iCloud and then deleted from our servers. If iCloud is turned off, the existing copy stays on our servers until you turn iCloud on or delete your account.

When you are signed in, the following is stored in Google Cloud Firestore under your account:

• subscription status and daily AI usage counters;
• feedback you send, including any screenshots you attach.

AI chat history and lab documents you import are stored on your device only.

3.4 AI features and Google Gemini

AI features use Google Gemini through Google Firebase AI Logic. Before the first AI request, the App asks for your explicit consent and explains what is sent. You can withdraw consent at any time in Settings → AI chat. Without consent, no data is sent to the AI service and AI features are unavailable.

Depending on the feature you use, a request may include:

Requests pass through our Cloud Functions, which check your subscription and daily limit and forward the request to Google. We do not keep the content of AI requests or answers on our servers. Google processes this data under its terms for paid Gemini API services, which state that prompts and responses are not used to improve Google’s products; Google may keep them for a limited time to detect abuse.

3.5 Purchases

Subscriptions are processed by Apple. We do not receive your payment details. We receive signed transaction information from Apple (product, transaction identifiers, purchase and expiration dates, renewal status) to unlock Premium features for your account.

3.6 Analytics and crash reports

We use Firebase Analytics to understand how the App is used (for example which screens are opened) and Firebase Crashlytics to diagnose crashes. This data includes app version, device model, OS version and event data. It does not include your Apple Health data or chat content.

3.7 App security

Firebase App Check and Apple App Attest are used to verify that requests come from the genuine App. This involves device attestation tokens, not personal content.

04Why we process information

• to provide the App and its features, including AI features you request;
• to authenticate your account and keep the service secure;
• to manage subscriptions and daily AI limits;
• to fix bugs and improve the App;
• to comply with legal obligations.

05Legal bases (EEA, UK, Switzerland)

Where GDPR-style laws apply, we rely on your consent (Apple Health access, AI data sharing, health data you enter), on the contract with you (providing the App and your subscription), and on legitimate interests (security, abuse prevention, analytics and crash diagnostics). You can withdraw consent at any time; this does not affect processing that happened before.

06Service providers

We use these providers, which process data on our behalf under their own terms:

• Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase AI Logic / Gemini, Analytics, Crashlytics, App Check);
• Apple (HealthKit, Sign in with Apple, iCloud, App Store purchases, App Attest).

We do not sell or rent personal information and do not share it for cross-context behavioral advertising.

07International transfers

Your information may be processed in the United States and other countries where Google and Apple operate. For transfers from the EEA, UK or Switzerland, the providers’ transfer mechanisms, such as Standard Contractual Clauses, apply.

08Retention

• Subscription status and AI usage counters in Firestore are kept until you delete your account.
• Data in your iCloud is kept until you delete it, delete your account in the App, or remove it in iOS iCloud settings.
• Feedback and attached screenshots are kept until you delete your account or ask us to delete them.
• Analytics and crash data are kept according to Firebase retention settings.
• Data on your device stays until you delete it or remove the App.

09Your choices and rights

• Apple Health: manage access in iOS Settings → Health → Data Access & Devices → HealHub AI.
• AI data sharing: turn off in the App: Settings → AI chat.
• Copy of your data: email us to receive a copy of your account data.
• Delete account: delete your account in the App settings. This removes your Firebase account, your Firestore data, your uploaded files, and the App’s data in your iCloud and on the device. Deleting the account does not cancel an Apple subscription; cancel it in your Apple ID settings.
• Other requests: email us to access, correct, delete or port your data, or to object to processing. We may need to verify your identity.

California residents may have rights to know, access, correct and delete personal information, and not to be discriminated against for using these rights. We do not sell or share personal information as defined by California law.

10Children

The App is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11Security

Data is encrypted in transit, access to account data is restricted to your signed-in account, and server functions verify App Check tokens. No method of transmission or storage is completely secure.

12HealthKit

Our use of HealthKit data follows Apple’s rules: it is not used for advertising or data mining, it is not sold, and it is disclosed to third parties only to provide features you request (AI features, with your consent) or when required by law.

13Changes

We may update this Policy. The “Last updated” date shows the latest version. For material changes, we will notify you in the App and ask for consent again where required.