Health to AI Privacy Policy

2026-11-10

Health to AI encrypts and syncs your chosen Apple Health data to your account for AI you authorize through MCP or the readonly API.

Operator and privacy contact

Operator：株式会社引力

For questions about this policy, the handling of your personal data, or deletion requests, contact us at the email address below.

Contact email：rex@gravitylab.co.jp

Data we process

Health data: selected types, such as heart rate, sleep, activity and symptoms, summarized daily or hourly on your iPhone / iPad.

Account: an anonymous identifier from Sign in with Apple. We do not collect your name or email.

Access history: AI client, tool and parameters, IP address and time, retained for 90 days for review in the app.

Encryption and access

Data is encrypted on iPhone / iPad with AES-256-GCM before upload; the cloud stores ciphertext. The data key stays in your device Keychain. Authorization provides decryption capability through an encrypted OAuth grant or a data key wrapped with the API key. The server stores neither plaintext API keys nor plaintext data keys.

Only AI connections you approve, or tools holding API keys you create, can read data. It is briefly decrypted in server memory to answer authorized queries. Revoke a connection or key anytime to stop future access.

We do not sell health data or use it for advertising, profiling or model training.

Share health data with a third-party AI

Before sharing, the app displays the specific AI service, provider and official privacy policy. Common recipients are prefilled and MCP suggests a match when available. You can change the service without typing a name or URL. Only pressing the confirmation button that names the recipient grants access; sign-in, pairing, Health permissions and cloud sync do not constitute this consent.

All health and fitness records synced to this account: activity, heart rate, sleep, workouts, body measurements and nutrition; also symptoms, menstrual data, ECG, mental wellbeing and health profile if you chose to sync them, plus dates, units, sources and sync times. This includes history, cloud history for stopped types and future syncs.

Readable plaintext query results are provided to the AI shown above to answer your health questions and analyze trends. Only this recipient is authorized; do not give the key to another service. Health access and cloud sync alone are not consent to AI sharing.

Recipients must keep data confidential and secure, use it only for your requests, provide deletion options, and not sell it or use it for advertising, profiling or model training. Recipients also process data under their policies and account settings; this app cannot control those settings. Access lasts until revoked. Revocation stops future reads; contact the recipient to delete copies already received.

Only the recipient named on the confirmation card is authorized for that connection. The app has no built-in AI chat and does not send data to every listed service. Creating or copying a key does not proactively send health content. The recipient must make an authorized read-only query to receive results.

Recipients must provide confidentiality, security, deletion and purpose-limitation protection equal to or stronger than this policy. Only authorize services and account settings meeting these requirements. Sale, advertising, profiling and model-training use are not permitted. Official service policies are linked below. Report noncompliance to us and we will stop access. We cannot control an independent provider’s account settings or delete its copies on your behalf.

Consent records include recipient ID, service, provider, official policy URL, consent version and server time, linked to the account and connection. The server resolves identity and policy from its catalog; a caller cannot override them. Earlier generic consents are not automatically upgraded; the owner must confirm a specific recipient in the updated app before reads resume. Revoking a connection or deleting the account deletes its authorization record.

Cloudflare provides cloud infrastructure and processes encrypted storage and account, device and access metadata needed to operate the service. It is not authorized to use this data for its own advertising or model training.

Storage and deletion

Data is stored on Cloudflare infrastructure. Retention starts at the first successful sync and resets after any successful authorized AI health query. Cloud health ciphertext is automatically deleted after 180 days without such queries. App uploads and background sync do not extend this period.

Old background uploads cannot restore deleted data. Open the app to sync again. Automatic deletion preserves your account, AI connections and original Apple Health data.

Settings → Delete account & cloud data permanently deletes cloud data, access history and all AI authorizations immediately. Original Apple Health data is unaffected.

Supported AI recipients

The app prepares the following services, providers and official privacy policies. Only the service you explicitly confirm is authorized for that connection.