Privacy notice · version 2026-10-17
Your data, your choice
What HealthFlow stores and why. The first item is needed for the app to work; everything else is optional, off unless you turn it on, and can be changed any time in the app under Profile → Privacy and data.
HealthFlow is a wellness app, not a medical device. Nothing it shows is a diagnosis.
What HealthFlow stores
Your account and entries Required
Sign-in, and everything you log: water, weight, body fat, muscle, sex, routines, workouts and your own exercises.
- What
- Your Google or Apple account id, e-mail and name; the entries listed above with their times; pictures and videos you add to your own exercises; your language and water goal; a push token per phone for reminders. Water and weight are health data, so this needs your explicit consent (GDPR Art. 9(2)(a)).
- Where
- On HealthFlow’s server (Hetzner Online GmbH, EU). Phones and the watch keep a copy so they work offline.
- How long
- Until you delete an entry or your account. Deleted data leaves the nightly backups within 14 days.
- Who can see it
- Only you. Hetzner Online GmbH, EU hosts the server; Google or Apple only confirm your sign-in. Nothing is sold or shown to advertisers.
Health Connect / Apple Health Optional
Bring in water, weight and body fat other apps saved, and save what you log here there too.
- What
- Water, weight and body fat records from Health Connect or Apple Health, with the name of the app that wrote them. HealthFlow writes your water, weight and workouts back.
- Where
- Read on your phone, then stored with your entries on HealthFlow’s server.
- How long
- Like your other entries. Turning it off stops all reading and writing at once; you can also have everything imported deleted.
- Who can see it
- Only you. Other apps can read what HealthFlow writes to Health Connect or Apple Health only if you allow them there.
Mood and stress Optional
Calm sessions, mood check-ins and a gentle stress estimate from your heart rate, HRV, sleep and steps.
- What
- Heart rate, resting heart rate, HRV, steps and sleep that your watch or other apps saved in Health Connect or Apple Health; your heart rate measured by the watch before and after a calm session; your 1–5 mood check-ins with an optional note; when you did a calm session.
- Where
- The phone reads the health store only when it needs to and doesn’t copy the readings. It sends hourly summaries (average heart rate and HRV, steps, minutes asleep) to HealthFlow’s server, which works out the estimate. Check-ins and calm sessions are stored there too.
- How long
- Hourly summaries 180 days, then deleted automatically; check-ins and calm sessions until you delete them. Turning this off stops everything at once, and can also delete it all.
- Who can see it
- Only you. The estimate is worked out by fixed rules, not by AI, and is not a medical reading.
AI on your phone Optional
Let the phone’s built-in model (Gemini Nano on Android, Apple Intelligence on iPhone) read your data to draft routines and summaries.
- What
- The data the request needs, e.g. your goals, recent workouts and exercise list.
- Where
- Only on your phone. Nothing is sent to HealthFlow or anyone else.
- How long
- Not kept: the request and answer are gone when you close it, unless you save the result.
- Who can see it
- Nobody. It works offline.
Cloud AI (Google Gemini) Optional
Only a fallback: on phones and tablets that can’t run AI themselves, send the request to Google’s Gemini API.
- What
- The request and the data it needs, e.g. goals, recent workouts and exercises. Never your name, e-mail or account id.
- Where
- Sent through HealthFlow’s server to Google’s servers, possibly outside the EU (USA), under the EU–US Data Privacy Framework and standard contractual clauses.
- How long
- HealthFlow does not keep it. Under the paid Gemini API terms Google does not train on it, but may keep it up to 55 days to detect abuse.
- Who can see it
- Google, as HealthFlow’s processor.
Who is responsible
HealthFlow is the controller of your data. Contact: privacy@healthflow.app.
Why we may use it
Your consent (GDPR Art. 6(1)(a) and, for health data, Art. 9(2)(a)), separately for each purpose above. Keeping your account working is also needed to provide the service you asked for (Art. 6(1)(b)).
What for
Only to provide the features you use. No advertising, no profiling for others, no selling of data. Decisions with legal effect are never made automatically.
How it is protected
Encrypted connections (HTTPS), sign-in tokens kept in the phone’s secure storage, pictures and videos reachable only through short-lived signed links, a firewalled server with automatic security updates.
Outside the EU
Only if you turn on cloud AI: then requests go to Google in the USA, as described above.
Your rights
Access, a copy in a machine-readable format, correction, deletion, restriction, objection and withdrawing consent at any time without affecting what was done before. Most of these are buttons in the app under Profile → Privacy and data; for the rest, write to privacy@healthflow.app. You may complain to a data protection authority (in Hungary: NAIH, naih.hu).
To delete your account and everything stored with it, see Delete your account.
Age
HealthFlow is for people aged 16 or over.
Changes
If this notice changes in substance, the app asks you to read and agree again before you can go on.