Privacy Policy

Last Updated: September 14, 2026

Health Data Export ("we," "our," or "the App") is committed to protecting your privacy. This Privacy Policy explains how the App handles health data and related information.

1. Health Data Access and Use

Health Data We Access

The App requests permission to read health-data types that you can select for export, including:

• Activity and mobility: Steps, walking/running and cycling distance, energy, exercise time, daylight time, speed, cadence, and supported running dynamics
• Heart health: Heart rate, resting and walking heart rate, heart-rate variability, VO₂ max, and cardio recovery
• Vitals: Blood oxygen, respiratory rate, blood pressure, body temperature, and supported sleeping wrist temperature
• Body measurements: Weight, height, body mass index, body-fat percentage, and lean body mass
• Sleep: Sleep analysis and stages, breathing disturbances on supported operating-system versions, and heart-rate samples occurring within sleep sessions
• Nutrition: Dietary energy, macronutrients, fiber, sugar, sodium, and water
• Workouts: Workout sessions, workout samples and events, and workout routes when available
• Mindfulness: Mindful sessions

The exact types available depend on your device, operating-system version, connected accessories, HealthKit data, and the permissions you grant.

How We Use Health Data

The App uses health data only to:

• Create the manual and scheduled exports you request in JSON, CSV, or GPX format
• Calculate transparent summaries or derived values included in an export
• Deliver an export to a destination you choose

The App does not use HealthKit data for advertising, marketing, data brokerage, or user profiling.

2. On-Device Processing and Export Destinations

On-Device Processing

Health data is read from HealthKit and processed on your device. We do not operate a server that receives or stores your health data.

Files and Sharing

When you create a file export:

• You choose where the file is saved or shared
• A destination may include local device storage, iCloud Drive, another Files provider, or an app selected through the iOS share sheet
• Apple or a third-party destination provider may process the file under its own terms and privacy policy
• You are responsible for the destination you select and for anyone with access to the exported file

Optional HTTPS Webhooks

If you create a webhook automation, the App sends the health data you selected directly from your device to the HTTPS endpoint you supplied. Health Data Export does not receive, operate, or control that endpoint.

• Webhook automations are optional and must be configured by you
• The App sends JSON exports only to an HTTPS URL you provide
• The receiving endpoint and its operator may store or process the transmitted data under their own terms and privacy policy
• You are responsible for choosing and securing the endpoint and for confirming that you are authorized to send the selected data to it
• Disable or delete the automation to stop future webhook delivery

3. Credentials, Local Records, and Retention

The App stores the following information locally on your device:

• App settings: Selected metrics, export preferences, and other configuration
• Automation settings: Schedule, destination, webhook URL, and selected export options
• Export history: Operational metadata such as export date, file name, destination, delivery status, attempt count, and HTTP status
• Optional bearer token: Stored in the iOS Keychain under the automation's identifier; it is not written to exported files or included in logs

Deleting a webhook automation deletes its associated bearer token. Deleting the App removes its locally stored app data, subject to normal iOS and backup behavior. Files already saved or delivered to another destination must be deleted from that destination separately.

4. Developer Data Collection, Analytics, and Tracking

We do not collect health data, exported files, webhook payloads, webhook credentials, analytics events, advertising identifiers, or telemetry from the App. The App does not contain third-party analytics, advertising, or tracking SDKs.

User-directed transmission to a destination you select is not transmission to Health Data Export. The destination provider may collect or retain information independently, and you should review its privacy practices.

5. Third-Party Services

• Apple HealthKit: Supplies health data according to the permissions you grant and Apple's policies
• Apple Files, iCloud, and share services: Handle destinations you choose according to Apple's or the selected provider's policies
• Apple StoreKit: Processes optional tip purchases; we do not receive or store your payment-card information
• Your webhook provider: Receives data only when you configure webhook delivery; its processing is governed by its own terms and privacy policy

6. Your Choices and Controls

• Health access: Grant or revoke HealthKit permissions in Apple's Health settings
• Metric selection: Choose which health types are included in exports
• Destination control: Choose whether to save, share, or deliver an export to a webhook
• Webhook control: Test an endpoint with a sample-free payload, disable an automation, or delete it to stop future delivery
• Local deletion: Delete export history, exported files, automations, or the App as appropriate

7. Security

The App uses Apple's HealthKit framework and iOS sandboxing. Webhook delivery requires HTTPS, and optional bearer credentials are stored in the iOS Keychain. No method of storage or transmission is completely secure; you should use a trusted endpoint, protect access credentials, and restrict access to exported files.

8. Children's Privacy

Health Data Export is not intended for children under 13. We do not knowingly collect personal information from children.

9. Regional Privacy Rights

Because Health Data Export does not operate a service that collects App health data or webhook payloads, we generally do not possess health data to access, correct, or delete. Your data controls are described above. A third-party destination you select may be subject to separate privacy obligations; contact that provider regarding data it receives.

10. Changes to This Policy

We may update this Privacy Policy when the App or applicable requirements change. We will indicate material changes by updating the "Last Updated" date. Your continued use of the App after an update is subject to the revised policy.

Health Data Export is an independent app and is not affiliated with Apple Inc.