Privacy policy

Who we are

Health is a nutrition diary app for Android and the web, run by its developer ("we"). This policy explains what the app and the website at health.vigilotech.ca collect and why.

What stays on your phone

Without an account, everything you enter (food diary, check-ins, goals, health notes) stays on your phone only. We never see it.

What we store when you sign in

• Your email address and, if you choose, a display name.
• A backup of your diary, foods you created, check-ins and body measurements, goals and health notes you entered, your app settings and the badges you earned, so you can restore them on another device.
• Technical records needed to keep you signed in (sign-in sessions and the device name).

Services we use

• AI features send the photo or text you choose to analyse straight from your phone to Google Gemini, using your own Gemini API key; we never see it. Food searches go to USDA FoodData Central and Open Food Facts, and, when you are signed in, to FatSecret through our server, so no personal identifiers are sent with them.
• Sign-in emails are sent with Resend. Google Sign-In, if you use it, shares your email, name and profile photo with us.
• Our server runs in Canada (OVH). Encrypted backups of our database are stored with Cloudflare R2.

What we never do

We don't sell your data, show ads, or share your health information with anyone for marketing. Only you can see your diary.

Community

• If you join the community, your handle, name, profile photo, bio, posts, photos, comments and cheers, and the badges you choose to show, are visible to other members according to each post's visibility: public, followers or only you. Your diary and measurements are never shared unless you post them yourself.
• Photos are resized and their location and camera data are removed before they are stored.
• New posts and comments are checked automatically with Google Gemini for content that breaks the community rules; anything flagged waits for a human review. You can report posts and block people at any time.

Keeping and deleting your data

• You can download everything in your backup and delete your account at any time, in the app (Settings → Delete account) or on this website. Deleting removes your account and backup from our database immediately; encrypted backup copies expire within 12 months.
• Erasing personal data in the app while signed in also removes it from your backup.

Security

Connections use HTTPS, sign-in uses one-time codes or Google, and the database is not reachable from the internet. No system is perfectly secure, so please keep your email account safe.

Children

Health is not meant for children under 16.

Changes and contact

We will update this page when the policy changes. Questions or requests: see the contact address below.