1. Overview
Health Genie is a wellness application for iOS and Android. This policy describes the data flows implemented by the app, including Apple Health and Health Connect access, sign-in, AI features, encrypted journal storage, analytics, error reporting and purchases.
2. Health Data
- On iOS, Health Genie reads only the Apple Health data types for which you grant permission, including steps, resting heart rate and sleep duration
- On Android, Health Genie reads these Health Connect data types, only after you grant permission: steps, heart rate, resting heart rate and sleep sessions. It may also request access to your Health Connect history so trends and baselines can cover more than the last 30 days. Health Genie does not write any data to Health Connect
- Health Connect data is used to calculate your Vitality Score, trends, goals, notifications and the AI insights you request. It is not sold, not used for advertising, and not used to determine credit-worthiness or for lending purposes
- Health Genie’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements
- You can revoke Health Connect access at any time in the Health Connect app or your Android settings
- The deterministic Vitality Score is calculated on your device
- When an AI feature is requested, selected metrics needed for that request may be sent to Health Genie’s Convex backend and then to OpenAI or Anthropic to generate the response. The morning brief currently uses an Anthropic Claude model and, if that request fails, retries once with an OpenAI model; other AI features currently use OpenAI
- AI requests can include values such as the Vitality Score, steps, resting heart rate, recent score history, sleep values and optional profile or journal-derived context used by that feature
- A limited internal Health Lab test lets designated accounts choose a lab-report PDF. The PDF, including any identifiers it contains, is sent through Convex to OpenAI for marker extraction. Health Genie does not persist the PDF or extracted result in its Convex database, and requests deletion of the OpenAI file after processing; provider retention rules may still apply
- Operational AI usage records store metadata such as feature, model, token counts, success status and time; the application schema does not store the AI prompt or health metrics in those usage records
3. Authentication & Account Data
- The iOS app supports Sign in with Apple and the Android app supports Sign in with Google, both through Convex Auth
- The app stores the provider account identifier and may store the name or email returned by the sign-in provider
- Account records also include subscription status and service timestamps needed to operate the app
4. Analytics and Error Reports
- Health Genie uses PostHog for product analytics such as app opens, screen views and feature events
- Some analytics events include app-state values such as a Vitality Score, streak count or step-goal status
- When a journal check-in is completed, the selected mood and selected context tags are included in the analytics event. Available tags cover workout, sleep, social activity, time outdoors, rest, stress, alcohol, illness, medication and travel. Journal note text and protein amounts are not included in that event
- After sign-in, PostHog is identified with the application user ID and receives the account email, name, internal-account flag and subscription-status flag when those values are present
- Development and designated internal-account events are marked so they can be excluded from product analysis
- Release builds of the app send crash and error reports to Sentry. A report includes the error type, a shortened error message, the stack trace, the app version, build and update identifiers, and device and operating-system details such as device model, OS version, memory and locale. For some handled errors it also names the app feature that failed and, when creating a Health Plan, the selected goal
- Sentry reports include a short trail of recent app events: app state changes, taps on screen elements, the addresses and status codes of network requests the app made, and console log messages. Before a report leaves the device, error and console messages are shortened, the values that some errors quote are removed, and the data logged alongside console messages is dropped. Health Genie does not add health metrics, journal text or AI responses to error reports
- After sign-in, Sentry reports carry the application user ID, never the account email or name. Sentry’s default collection of personal data is turned off. Sentry also records app sessions (start, end and whether the app crashed) to measure stability
- In development builds, or a release build in which Sentry is unavailable, crash and error reports are sent to PostHog instead, with the same message shortening and under the PostHog identity described above
- The Health Genie website uses Google Analytics 4 for page-traffic and acquisition measurement, including outbound App Store or Google Play clicks with the current page, destination store and campaign token. Google can receive standard website event and request data such as page URL, referrer, browser or device details, and network information used to derive approximate location. Values entered into the website calculators are not included by their calculation code
5. Subscriptions & Payments
- Subscriptions and in-app purchases are managed through Apple’s App Store or Google Play, and RevenueCat
- We do not store or process payment information
- RevenueCat begins with an app-generated identifier and is linked to the Health Genie application user ID after sign-in so purchases and entitlements can be restored
- For subscription-related billing, refer to Apple's or Google's privacy policy
6. Third-Party Services
We use the following third-party services:
- Apple Health (HealthKit) — to read health metrics from your iPhone
- Health Connect — to read health metrics from your Android device
- Google Sign-In — to sign in on Android
- Convex — for authentication, backend functions, AI requests, subscription state and encrypted app-data storage
- OpenAI — to generate requested AI features from the metrics and context supplied for that request, and to extract markers from Health Lab PDFs
- Anthropic — to generate requested AI features (Claude models) from the metrics and context supplied for that request
- RevenueCat — for subscription management
- PostHog — for product usage analytics
- Sentry — for crash and error reports from the app
- Google Analytics — for website traffic and acquisition measurement
7. Journal and Health Plan Storage
- Sensitive Health Journal fields are encrypted on the device before they are stored in Convex
- The journal date and service timestamps are stored unencrypted so entries can be indexed and retrieved
- Body weight and protein-target settings are encrypted on the device before Convex storage; the selected unit and service timestamp are stored unencrypted
- The active Health Plan is mirrored to Convex so it can survive a reinstall or sync across devices; the plan can contain derived scores and plan progress
- AI-generated briefs and nudges can be stored inside encrypted journal fields
8. Retention and Deletion
- Data is retained for as long as needed to provide the applicable feature or account
- To delete your account, open Health Genie, go to Settings and choose Delete Account. If you no longer have the app installed, email prashanthvaidya@therunninggenie.com from the address on your account with the subject “Delete my Health Genie account”, and the account and the data listed below will be deleted within 30 days
- The in-app deletion flow removes journal entries, correlations, encrypted user settings, user-linked AI usage records, the active Health Plan mirror, the application user record, authentication accounts and linked session, refresh-token and verification records
- The flow also attempts to reset the local RevenueCat account identity, resets the PostHog identity, deletes the device-held journal encryption key, clears locally cached Today actions and history, cancels scheduled Health Genie notifications, and resets app data stored in Redux Persist and AsyncStorage. A RevenueCat network or SDK failure does not block deletion of the Health Genie account. Once you are signed out, new error reports no longer carry your user ID; reports already sent to Sentry are kept under Sentry’s retention period. Operational records held by service providers may be subject to their own retention rules. Contact support with a deletion question
9. Children's Privacy
Health Genie is not directed at children under 13. We do not knowingly collect data from children under 13.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify users of significant changes through the app or on our website.
11. Contact
If you have questions about this privacy policy, contact us at: prashanthvaidya@therunninggenie.com