Privacy Policy

1. Who we are

HealthLog is operated by HealthLog Digital, based in Ireland. HealthLog Digital is the data controller for personal information processed through the service. Our privacy contact is the HealthLog Privacy Lead, reachable at privacy@healthlog.ie.

Postal address:
HealthLog Digital
29/30 Baggot Street Lower
Dublin 2
D02 XT93
Ireland

2. Legal basis for processing

We process personal information under one or more of the following lawful bases:

• Performance of a contract — to provide the HealthLog service.
• Explicit consent — for health data, voice recordings, AI features, notifications, family sharing, and WhatsApp reminders.
• Legitimate interests — security, fraud prevention, service reliability.
• Compliance with legal obligations — where required by law.

3. What information we collect and why

The table below mirrors the categories used in the Google Play Data Safety form so you can see what we collect, why, how long we keep it, and which provider helps us process it.

We do not collect or use the Android Advertising ID, and we do not use third-party advertising or behavioural-tracking SDKs.

4. Sensitive permissions on your device

HealthLog only asks for a permission when you use a feature that needs it. You can turn any permission off in your device settings at any time.

• Notifications: Send medication and appointment reminders you set up.
• Microphone: Record appointments and voice notes when you tap record.
• Camera: Take a photo of a medication label or scan a document when you choose to.
• Photos / Files: Let you attach an image or document from your device to your Vault.
• Storage: Save downloaded documents and keep the app working offline.

5. Accounts and sign-in

You can create a HealthLog account using:

• Email and a one-time passcode (magic link) sent by email. We use the email address to sign you in and contact you about the service.
• Google sign-in. Google shares your name, email and profile picture with us so we can create your account. Google's use of your information is governed by their own privacy policy.

A free trial period applies to new accounts; after that you can choose a paid subscription or continue with limited access. Billing is handled by Stripe.

6. Health data

HealthLog processes sensitive health-related data including medications, conditions, appointments and recordings, notes, reminders, uploaded photos and documents, and AI-generated summaries. We treat all health data with the highest level of protection:

• Health data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256 via our cloud provider).
• We do not sell, rent, trade, share, or use personal health information for advertising, behavioural profiling, or marketing.
• We do not use your health data to train AI models, and our AI providers are contractually prevented from doing so.
• Health data is only accessible to you and anyone you explicitly authorise (for example, a family member you add as a companion, or someone you send a share link to).
• You can export or delete all your health data at any time from within the app.

HealthLog is a personal health organisation and reminder tool. It does not provide diagnosis, treatment, telehealth, prescriptions, medical monitoring, or medical advice. HealthLog is not a medical device. See our Medical Disclaimer for details.

7. Photos, files and voice recordings

When you photograph a medication label, scan a document, attach a file to your Vault, or record an appointment or voice note, that content is uploaded over an encrypted connection and stored in your private storage area in the EU. Only you and people you choose to share with can access it. You can delete any item from the app at any time.

8. AI features

HealthLog uses AI to help you understand and organise your health information. AI features are powered by the Lovable AI Gateway, which routes requests to Google (Gemini) and OpenAI models. The features that use AI are:

• Ask HealthLog — the in-app help chat.
• AI medication understanding — looking up information about medications you add and checking medication labels.
• AI document analysis — reading and summarising documents you scan.
• AI voice transcription and summaries — turning recordings and notes into text and short summaries.
• AI companion summaries — short daily summaries for the family member you choose.

AI outputs can be wrong. They are not medical advice, diagnosis, or treatment recommendations. Always consult a qualified healthcare professional for medical decisions. AI processing does not make automated decisions that produce legal or similarly significant effects about you (GDPR Article 22).

If you believe an AI-generated response, summary, document analysis, medication explanation, or chat reply is inaccurate, misleading, or inappropriate, please contact us at support@healthlog.ie so we can review it.

9. Reminders and notifications

If you turn on reminders, we deliver them through Firebase Cloud Messaging (push notifications on Android), web push (in your browser), email via Resend, and — if you choose WhatsApp reminders — the WhatsApp Business API operated by Meta. To do this we share the minimum information needed: a device token or phone number, and the reminder text you set up. You can turn any reminder channel off at any time.

10. Family sharing and share links

You can invite a family member as a companion, or create a read-only health share link that expires. You control exactly what is shared, and you can revoke access or expire the link at any time from within the app.

11. Service providers (sub-processors)

We share strictly necessary data with a small number of trusted providers acting on our instructions and under written data-processing agreements:

• Supabase (EU region) — database, authentication, file storage and serverless functions.
• Lovable AI Gateway — routes AI requests to Google (Gemini) and OpenAI. Audio and text sent for AI processing are not used to train models.
• Google — Google sign-in (if you use it) and Firebase Cloud Messaging for Android push notifications.
• Meta Platforms Ireland — WhatsApp Business API for WhatsApp reminders (only if you enable them).
• Resend — transactional email delivery (sign-in links, receipts, reminders).
• Stripe — payment processing. We never see or store your full card details.

We do not use third-party analytics, advertising, or crash-reporting SDKs.

12. How we store and protect your data

Your primary data is stored in the European Union. It is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Access is protected by authentication and row-level security so that one account cannot read another account's data. Our cloud provider maintains short-term encrypted backups for disaster recovery; these are retained for up to 30 days and are not used for any other purpose.

13. International data transfers

Some providers (for example Google, OpenAI, Stripe, Meta) may process data outside the European Economic Area. Where this happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent legal protections.

14. Children's privacy

HealthLog is intended for adults. Because we are an Irish controller, we apply the Irish digital age of consent: we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has created an account, contact us and we will delete it.

15. Your rights

Under GDPR and Irish data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (the "right to be forgotten").
• Receive a copy of your data in a portable format (Article 20).
• Restrict our processing of your data in certain circumstances.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for features that rely on consent.
• Lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

16. How to delete your account

You can delete your account at any time from Me → Delete account within the HealthLog app, or by visiting healthlog.ie/delete-account. When you confirm deletion, we immediately remove your profile, medications, appointments, notes, documents, recordings, reminders, companion links and uploaded files from our live systems, and we delete your authentication record. Encrypted backups expire within 30 days, after which no copy of your data remains. Some limited records (for example, a record that an account was deleted, or invoices we are legally required to keep) may be retained for the period required by law.

17. Data retention

We keep your data for as long as your account is active. Individual retention periods are listed in the table in section 3. Diagnostic data is kept for up to 90 days. Backups expire within 30 days. Anonymised, aggregated statistics that cannot identify you may be kept to help us improve the service.

18. Cookies and similar technologies

HealthLog uses essential cookies and local storage only — for example to keep you signed in. We do not use tracking, advertising, or cross-site analytics cookies.

19. Changes to this policy

We may update this policy from time to time. We will tell you about significant changes through the app or by email. The "Last updated" date at the top shows when this version took effect.

20. Contact us

HealthLog Digital
29/30 Baggot Street Lower
Dublin 2
D02 XT93
Ireland

Privacy contact: privacy@healthlog.ie
You can also reach us via the Contact page.