HealthDashboard Privacy Policy

Effective date: 1 November 2026

HealthDashboard is an early-access personal wellness app for nutrition, workouts, care routines and health records. This policy covers the website, browser app and native app builds. The website is currently hosted on Vercel; healthdashboard.tech is the brand and intended custom domain. Core tracking is free during early access. AI is marked Coming soon for customers and is restricted to private owner testing. We do not collect payments in this release.

1. Your choices

You can use core tracking without an account. In local-only mode, your records stay in the app storage on that device or browser, apart from network features you deliberately use, such as online food lookup. Signing in enables the configured account and sync service. Health permissions, sharing links and voice-note uploads are separate choices. You can decline optional permissions and continue using manual tracking.

2. Data you provide or permit

• Profile and goals: account email, authentication details handled by the authentication provider, age or birth date, sex, height, activity level and targets.
• Tracking records: food and water logs, custom foods and recipes, weight, workouts and routines, body measurements, symptoms, care and medication routines, check-ins, fasting, optional cycle information and lab results you enter.
• Photos and voice: meal or label photos you select, progress photos you choose to save, and check-in voice notes you choose to record. The app does not continuously record your camera or microphone.
• Connected health data: supported activity, exercise, sleep, body and vital-sign records that you explicitly allow the Android Health Connect integration to read. Available types depend on the app build and permissions. We do not write to Health Connect.
• Preferences: units, display settings, reminders and optional integration settings.

The app does not request your contacts or precise location for tracking or advertising. Please do not enter another person's health information without their permission.

3. Local storage and browser data

The app stores records locally so manual tracking can work without an internet connection. Native builds use app-private storage; browser builds use storage belonging to that browser and website origin. Local browser data is not protected by a dedicated encrypted keystore. Anyone with access to your unlocked device or browser profile may be able to access it.

Clearing browser or app storage, uninstalling the app, private-browsing restrictions or changing the website domain can remove or separate local records. Export important records and, if you want cloud backup, confirm that sync completed. Signing out does not by itself erase local records. Review or clear local data before sharing a device.

4. Accounts and optional cloud sync

When an app build is configured for cloud services, Supabase provides authentication, database storage and optional private file storage. Your email and sign-in information are processed to create and secure your account. Supported tracking records are uploaded and downloaded to keep your signed-in devices in sync. Some features or attachments may remain local; for example, progress photos are stored on the device rather than included in routine sync.

Check-in voice notes are uploaded only when you are signed in and enable the voice-note sync option. They use private account storage. If cloud services are unavailable, the app may queue supported local changes for a later sync. Check the sync status before relying on a second device as a backup.

We use account-based access controls and row-level security for cloud records. Cloud sync is not described as end-to-end encrypted: the service providers process data to operate these features. Providers may process data in countries other than yours. Supabase's applicable service terms and privacy information describe its infrastructure and safeguards: Supabase privacy policy.

5. AI is Coming soon

AI photo logging, AI nutrition-label reading and AI meal interpretation are not available to customers in this release. Customers are not asked for an AI provider key and are not sent to a checkout. Manual food entry, barcode lookup and the existing non-AI meal-description parser remain available.

Private AI testing is restricted to the owner's verified account. An access-check endpoint hosted on Vercel validates the signed-in user's token with Supabase and returns whether testing is allowed. It does not receive diary entries, health readings or meal photos. We do not grant access based on a local preference or user-editable profile metadata.

For the owner only, a configured AI provider can receive a deliberately submitted meal or label photo, meal-description text, or a short nutrition summary for a weekly wording request. The owner selects the OpenAI-compatible provider. The provider key is kept in secure storage on supported native builds and in browser storage on web; it is not bundled into the app or shared with customers. The provider's own retention and privacy terms apply. We will explain customer AI processing and any pricing before enabling customer access. The lab PDF/photo import interface remains unavailable; manual lab entry does not upload a document to an AI service.

6. Other network services

• Online barcode or packaged-food search sends the barcode or query to Open Food Facts. No diary or account is attached by the app, although the service receives normal network information such as your IP address. Bundled food databases can be searched locally. See the Open Food Facts privacy policy.
• Speech recognition uses the speech service provided by your device or browser. Depending on its settings, audio may be processed remotely by its provider. HealthDashboard does not store a continuous microphone recording. You can type instead.
• Vercel hosts the website and the owner-access endpoint. Hosting and authentication services may retain operational, security and request logs, including network information. These logs are different from advertising tracking. See the Vercel privacy policy.
• Links or exports you open or share are handled by the destination app or recipient. Export files contain personal data; choose their recipients and storage carefully.

7. Sharing with another person

Sharing a diary, report or coach link is optional. A person who receives an active read-only link can view the information included in that report. Treat it as a private access link. You can revoke supported links in the app; revocation prevents future access through that link, but cannot remove a copy or screenshot already saved by a recipient. We do not sell your records or provide health data to data brokers.

8. Health Connect and reminders

Health Connect data is used for your selected tracking and wellness features, not for personalised advertising or sale. Only grant the types you want to use. You can revoke access in Android Settings > Health Connect > App permissions. Health Connect records are controlled separately from copies held in HealthDashboard. Our use is subject to Google's Health Connect policy and Limited Use requirements.

If you grant notification permission, the app schedules supported reminders on your device. Reminder text may be visible on your lock screen; use your device's notification-privacy settings if needed. This release does not use a remote marketing push-notification service.

9. Retention, export and deletion

You can edit or delete individual records and export supported records from the app. Local records remain until you remove them or the device/browser removes its storage. For a signed-in account, supported changes and deletions sync when connectivity and the account service are available.

The Delete my cloud data control removes supported synced records and revokes sharing links while retaining the data on the current device. It does not itself delete your authentication account. A later sign-in or sync can upload data still held on a device. The Delete all data control is a separate action: read its confirmation to understand the device and sync effects.

To request deletion of the authentication account and associated server-side data, use the request button in the app's Privacy & your data screen or contact hello@digiextension.com with the subject HealthDashboard account and data deletion. Contact us from the account email where possible. We may verify your identity before acting; do not email passwords, API keys or full medical records. We will confirm what was removed and explain any required retention. Operational logs, backups or records a provider must retain may follow that provider's retention cycle; we do not promise instant erasure from every backup.

Deleting app data does not delete the original records in Health Connect, a recipient's saved copy, or a third party's records. Those are subject to their own controls and policies.

10. Security and access requests

We use HTTPS for supported remote services and account access controls for cloud records. Device security, the browser profile and your sign-in details also matter. No method of storage or transmission is completely secure. We do not promise zero-risk storage or independent end-to-end encryption.

You may contact us to request access, correction, export or deletion of personal information, ask about a provider or transfer, withdraw optional permissions, or raise a privacy concern. Withdrawal may stop the relevant optional feature. For South African privacy concerns, you may also contact the Information Regulator. Specific rights and obligations depend on your location and the processing involved.

11. Advertising and early access

This release has no in-app advertising SDK, behavioural advertising or third-party product-analytics SDK. Infrastructure providers can still maintain the operational logs described above. If we advertise the product externally, we do not send your diary, health readings, cycle data, symptoms, photos or lab results to advertising networks for targeting.

Friends, family and the initial invited customers can use the free core early-access app. An early-access invitation does not unlock AI or authorise a payment. Any later paid offer will explain the price, included features, renewal and cancellation terms before payment is requested.

12. Children and wellness limitations

This early-access release is intended for adults. Do not use it to manage a child's health records. Contact us if you believe a child's information has been submitted.

HealthDashboard provides general wellness information. It is not a medical device or a substitute for diagnosis, treatment, emergency care or professional advice. Scores and targets are estimates, and missing records can affect them. Do not change medication or treatment because of an app score. Speak with a qualified professional about health decisions.

13. Contact and policy changes

For product support, privacy questions and data requests, contact hello@digiextension.com. We will update the effective date and give appropriate notice when material changes affect how personal information is processed. Changes to customer AI availability, payments, tracking or cloud processing will be explained before those changes take effect.