Privacy Policy

Effective date: July 14, 2026

This HealthTrack instance is operated by its administrator ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our health data tracking application. Please read this policy carefully. By using HealthTrack, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Data

When you create an account, we collect your email address, name, and authentication credentials. If you sign in with Google OAuth, we receive your name, email address, and profile picture from Google.

Health Data

You may voluntarily provide health information including medications, medical conditions, allergies, procedures, lab results, vital signs, appointments, and personal health notes. You may also upload lab result PDFs for AI-powered extraction.

Device & Wearable Data

If you connect your Oura Ring account, we sync vitals data (such as heart rate, sleep scores, and activity metrics) with your explicit consent. This data is stored encrypted in our database.

Usage Data

We collect basic usage information such as pages visited, features used, and session duration to improve the application. We do not use third-party analytics trackers.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the HealthTrack application
  • Enable AI-powered health analysis and lab PDF parsing using Anthropic's Claude API
  • Sync and display vitals data from connected devices like Oura Ring
  • Allow you to share health data with providers or family members
  • Improve and optimize the application experience
  • Communicate with you about service updates or issues

3. Third-Party Services

HealthTrack integrates with the following third-party services:

Anthropic Claude API

When you use AI health queries or upload lab PDFs for parsing, your health data is sent to Anthropic's Claude API for analysis. Anthropic does not store your health data after processing your request. Anthropic's data handling is governed by their own privacy policy and API terms of service.

Oura Ring API

If you choose to connect your Oura Ring, we access your vitals data through the Oura API with your explicit consent. Oura data is synced and stored encrypted in our database. You can disconnect your Oura Ring at any time.

Google Authentication

If you sign in with Google, we use Google OAuth to authenticate your identity. We receive only your name, email, and profile picture. We do not access any other Google account data.

4. Data Storage & Security

We take the security of your health data seriously and implement the following measures:

  • AES-256-GCM encryption for OAuth tokens and sensitive credentials
  • Per-user authorization checks on every data access, ensuring users can only access their own data
  • Automatic session logout after 15 minutes of inactivity
  • All health data stored locally on the server instance you run — it never leaves your infrastructure except for the optional integrations above
  • HTTPS encryption for all data in transit

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Self-Hosted Operator Responsibilities

HealthTrack is self-hosted software. The person or organization that deploys an instance ("the operator") acts as the data controller or custodian for that instance. The operator is responsible for:

  • Securing the instance, including HTTPS, access control, and backups
  • Complying with the privacy laws that apply to them and their users
  • Notifying their users in the event of a data breach

The software ships with no telemetry. Data is sent to third parties only when the operator configures those integrations — Anthropic for AI features, and Google or Oura for OAuth-based sign-in and device sync.

6. Health Data Sharing

Your health data sharing is entirely under your control:

  • You choose what health data sections to share and with whom
  • Sharing can be revoked at any time
  • We do not sell, rent, or trade your health data to any third party
  • We do not use your health data for advertising purposes

7. Data Retention & Deletion

We retain your data for as long as your account is active. You may at any time:

  • Export your health data in JSON format
  • Delete individual records or sections of your health data
  • Delete your entire account, which permanently removes all associated data from our systems

After account deletion, your data is permanently removed from our active databases. Backups may retain data for up to 30 days before being purged.

8. Cookies & Tracking

HealthTrack uses minimal cookies, limited to authentication session cookies required for the application to function. We do not use advertising cookies, third-party tracking pixels, or analytics services that track you across other websites.

9. Children's Privacy

HealthTrack is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. HealthTrack does support dependent profiles (such as for minor children), which are created and managed by a parent or legal guardian. The parent or guardian is responsible for the dependent's data and must consent to its collection and use. If you believe a child under 13 has provided us with personal information without parental consent, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. We encourage you to review this policy periodically. Continued use of HealthTrack after changes constitutes acceptance of the updated policy.

11. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact your instance administrator.