Health Atlas Privacy Policy

Effective November 7, 2026. Short version: your health data never leaves your iPhone.

What’s stored

Your answers, profile (with your profile photo, if you add one), lab results, to-dos and score history are saved only in the app’s storage on your iPhone. Your photo is never uploaded by the app; it appears only on a challenge picture you choose to send. None of this is sent to us or anyone else.

Your account (optional)

You can use every part of Health Atlas without an account. If you create one, it keeps your email address, your password if you chose one (stored scrambled, so no one can read it), your first name and your challenge records: your best times and reps, which of them you filmed, and how many tries you did in the last 90 days. It also keeps your link ID (the code in your challenge links) and the link IDs of the friends you’ve added, so your records and those friends come back when you sign in on a new iPhone. Friends who already have your challenge link and an account can see your latest records and first name without a new link; you can switch that off in the app under You → Your account. It never holds your answers, your Atlas or area scores, lab results, Apple Health data, photo or videos. If you continue with Apple or Google instead of a password, Apple or Google only confirms it’s you and shares your email address (with Apple you can hide it behind a relay address that forwards to you). We never see your Apple or Google password. The account is stored with Supabase (our account service, servers in the United States), and the emails with your sign-in and password-reset codes are sent through Resend. They handle it only to provide that service to us. Only you can read your account; delete it any time in the app under You → Your account → Delete my account, which removes it and everything in it.

Apple Health

If you connect Apple Health, Health Atlas reads steps, exercise minutes, sleep, heart rate, heart rate variability, VO₂ max, blood pressure, weight, height and body fat. It uses them only to show your scores and plan on your iPhone. Health Atlas never writes to Apple Health, and this data is never sent off your device, shared with anyone, used for advertising or stored in iCloud by the app. You can turn access off at any time in Settings → Health → Data Access & Devices → Health Atlas.

Ask Atlas

Questions you ask Atlas are answered by Apple Intelligence running on your iPhone. Your question and your data stay on the phone and are never sent to us or anyone else.

Friends and challenges

When you send a challenge, the link you share carries your first name, your Atlas and area scores and your challenge records (which of them you filmed, but never the video itself, and how many tries you did in the last 90 days), plus your lab results only if you switch that on. You send it yourself, through Messages or any app you choose. To keep links short, your iPhone locks your card (AES-256) with a 10-character code that exists only in the link, and our server keeps just the locked copy, found by a fingerprint of the code, for 90 days. We never see the code, because it sits after the “#”, a part of a link browsers never send to a website, so we can’t unlock or read your card. Your friend’s app, or this website’s challenge page (c.html), fetches the locked copy and unlocks it with the code from the link. The page has no analytics. If you choose to send a picture with the challenge, it shows your first name, your result and your profile photo if you added one; it goes only where you send it. Your challenge attempts and the friends’ cards you add are saved only on your iPhone.

Challenge videos

If you switch on “Video” for a challenge, the camera is used only while that challenge runs. No sound is recorded. The video is made on your iPhone with your first name, the challenge, the date and the timer on it, and your best filmed try for each challenge is kept on your iPhone as your record video, until a better filmed try replaces it or you delete it. It goes only where you choose to send or save it. We never receive it.

Lab reports and screenshots

A PDF, screenshot or photo of lab results that you import is read on your iPhone (pictures with Apple’s on-device text recognition). Only the numbers you confirm are saved, and the file isn’t kept or uploaded.

Apple Health files

When you import an Apple Health export, the file is read on your iPhone. Only the numbers you choose are saved in the app. The file itself isn’t kept or uploaded.

No tracking

No ads, no analytics, no third-party trackers, and no data sold or shared. We can’t see what you enter in the app.

Backups

Like other app data, Health Atlas data can be included in your own iPhone or iCloud device backup, which Apple encrypts and only you can restore. You can also make a backup file yourself (You → Back up my data) and save it where you choose, such as Files or iCloud Drive. It holds everything in the app, so keep it somewhere private. We never receive it.

Deleting your data

In the app, go to You → “Delete everything and start over”, or delete the app. Either one removes all your data from the phone for good. If you made an account, delete it with You → Your account → Delete my account; that removes it from Supabase too.

Not medical advice

Health Atlas is for general wellness and education. It doesn’t diagnose or treat any condition and isn’t a substitute for a doctor.

Children

Health Atlas isn’t meant for children under 13.

Changes

If this policy changes, we’ll update this page and the date above.