Introduction
Welcome to Healio. This Privacy Policy applies to the Healio mobile application and its related local feature pages (collectively, the "Service"). We value your privacy and aim to process information using a minimum-necessary, local-first, and permission-based approach. The current version does not require account registration and does not provide cloud syncing for health data.
To support app functionality, measure ad campaign performance, and improve the Service, Healio integrates certain third-party analytics and attribution SDKs as described further in this policy. These SDKs may collect device-level identifiers and app usage signals but do not access your locally stored health records. Health data remains on your device.
When you use camera-based measurement, health logging, report generation, subscription features, or related features, Healio processes information only to the extent necessary to provide that feature. If you do not agree to grant a certain permission, you may choose not to use the related feature. Features that do not depend on that permission will generally remain available.
1. Information We Collect and Use
Healio processes data that you enter, confirm, save, or generate locally on your device based on the features you choose to use. We do not collect health data for targeted advertising, cross-device profiling, or unrelated commercial purposes.
1.1 Basic Device and Runtime Information
When you install, launch, or report issues with the app, we process basic environment information made available by iOS for compatibility, stability, and anti-fraud purposes. This may include device model, operating system version, app version, screen parameters, storage capacity, battery status, carrier information, locale and region settings, system language, and a vendor-level device identifier (IDFV). These data points help us ensure the app runs correctly on your device and detect abnormal usage patterns.
1.2 Local Configuration and Preference Information
To preserve your usage state, Healio stores necessary local configuration on your device, such as onboarding completion status, hydration goals, reminder-related settings, do-not-disturb periods, and display-related preferences. This information is used to maintain continuity of use and is not shared externally.
1.3 Health Data You Enter, Confirm, Save, or Generate
When you manually log data or save health records within the app, Healio processes and stores the relevant health data locally on your device, including blood pressure, blood glucose, blood oxygen, hydration records, notes, assessment responses, and related timestamps. We use this data to display history lists, trend charts, statistical summaries, weekly or monthly reports, task completion states, and local analysis content within the app.
1.4 Camera and Physiological Signal Processing Key
Collection scenarios and data types. When you use PPG measurement features, Healio requires camera permission. During this process, the app may temporarily process rear-camera frames, optical signal changes caused by finger placement over the lens, and derived outputs such as heart rate, heart rate variability (HRV), respiratory rate, stress-related indicators, and heart-age-related metrics.
Purpose of processing. This processing is used only to complete camera-based measurement, generate result screens, produce trend statistics, and create local health reports and personalized recommendation text. It is not used for advertising, rewards, user profiling, or any purpose unrelated to the Service.
Security note. Based on the current implementation, the related camera-frame processing is primarily handled locally on the device. The current version does not upload raw camera frames, raw PPG signals, or raw health data to our own servers or third-party servers. Temporary capture content generally exists only for the duration of the relevant processing session, while the result data you choose to save is stored locally on your device by default.
Additional note. Healio's PPG measurement relies on the rear camera and flash to detect fingertip signals and is not intended to collect facial images. If you deny camera permission, camera-dependent measurement features will not be available, but non-camera features such as manual entry and history browsing will generally remain unaffected.
1.5 Analysis Results and Derived Data
Healio may generate derived results from the records stored locally on your device, such as averages, variability trends, anomaly counts, period summaries, heart-age results, AI-generated analysis suggestions, and wellness summary text. This derived data is intended to help you better understand changes in your records and is stored locally together with the underlying records so that you can review or delete it later.
1.6 Advertising Identifier (IDFA) Key
When and why. Healio may request access to the iOS Advertising Identifier (IDFA) through the App Tracking Transparency (ATT) prompt. If you grant permission, we use the IDFA solely to measure the effectiveness of our advertising campaigns and attribute app installs to the correct ad source. The IDFA is never linked to your health records, measurement data, or any locally stored wellness information.
Your choice. If you deny or later revoke tracking permission through iOS Settings, the IDFA will not be collected and ad measurement will fall back to aggregated, non-personalized methods. All other app features remain fully functional regardless of your tracking preference.
1.7 Third-Party Analytics and Attribution SDKs Key
To measure ad campaign performance, optimize user acquisition, and detect fraud, Healio integrates the following third-party SDKs:
- Adjust SDK — provides install attribution and campaign measurement. Adjust may process your IDFA (if authorized), IDFV, IP address, and basic device parameters to determine which ad led to your install. Adjust does not access your health data. For Adjust's privacy practices, visit adjust.com/terms/privacy-policy.
- BDASignal SDK — supports attribution and deep link resolution for certain advertising platforms. It may process click identifiers from ad URLs, IDFA (if authorized), and device parameters for install attribution purposes.
- FunReport SDK — our analytics and event-reporting layer that aggregates anonymized app usage events (such as screen views, feature interactions, and subscription funnel steps) and transmits them to our servers for product analytics. It also coordinates anti-fraud data collection using device-level signals.
- Google Ads On-Device Conversion SDK — measures ad conversions locally on your device without sending raw event data to Google's servers.
These SDKs operate on device-level and interaction-level signals only. They do not access, read, or transmit your locally stored health records, measurement results, or any personally identifiable wellness information.
1.8 Subscription and Purchase Information
When you subscribe to Healio premium features through Apple's In-App Purchase system, Apple processes the payment transaction. We receive a purchase receipt from Apple containing your subscription status, product identifier, transaction identifier, and purchase timestamp. This information is used to verify your subscription entitlement and provide access to premium features. We do not collect or store your payment method details, Apple ID, or billing address.
1.9 App Usage Events
Healio records anonymized app usage events to understand how features are used and to improve the Service. Examples include onboarding completion, subscription page views, feature unlock interactions, and session-level timing metrics. These events are associated with a device identifier (IDFV) but are not linked to your health records or personal identity.
2. Information Sharing
We do not sell, rent, or share your health data with third parties for advertising monetization. Your locally stored health records, measurement results, and wellness data are never transmitted to third-party advertisers, data brokers, or cross-site analytics platforms.
- Attribution and analytics partners. As described in Section 1.7, device-level identifiers (IDFV, IDFA if authorized) and anonymized usage events may be shared with Adjust, BDASignal, and our analytics infrastructure for ad measurement, install attribution, and anti-fraud purposes. These partners do not receive your health data.
- Apple. When you make an in-app purchase, Apple processes the payment and provides us with a transaction receipt to verify your subscription status. We do not share additional data with Apple beyond what is standard for the In-App Purchase flow.
- User-initiated sharing. If you voluntarily send content externally through screenshots, system sharing, or other actions initiated by you, the selected recipient will receive that information.
- Legal obligations. We may disclose necessary information where required by applicable law, court order, regulatory obligation, or where necessary to protect your rights, our rights, or public safety.
3. Your Choices and Rights
3.1 Data Retention
The records and analysis results you choose to save generally remain stored locally on your device until you manually delete them, clear app data, or uninstall the app. Temporary image frames and intermediate measurement processing artifacts are generally not retained as separate long-term archives.
3.2 Device Permission Management
You can manage Healio's access to system permissions such as the camera and tracking authorization through the Settings app on your iOS device. Camera permission is mainly used for PPG measurement; tracking permission (ATT) controls whether the IDFA is available for ad attribution. If you disable camera permission, measurement features will no longer be available. If you disable tracking permission, ad attribution will use aggregated methods only. The app does not require you to enable permissions unrelated to the feature you are using.
3.3 Access, Correction, Deletion, and Withdrawal of Consent
To the extent required by applicable law, you may have the right to request access to, correction of, deletion of, or restriction of processing of your personal information. For the current local-storage-focused version of the project, you can generally remove certain records directly in the app or delete locally stored content by clearing app data or uninstalling the app. If you withdraw a permission previously granted, Healio will no longer be able to provide the features that depend on that permission, but unrelated core usage will generally remain unaffected.
4. Information Security and Storage
We use reasonable technical and organizational measures to help protect data security, including reliance on the iOS sandbox, local storage isolation, and minimum-necessary permission access. In the current version, core health records are stored locally on the device rather than centrally hosted on Healio servers. Even so, no device, operating system, or storage medium can guarantee absolute security, so you should also consider device locking, system updates, and unauthorized physical access risks.
5. Links to Third-Party Websites or Services
If the Service contains links to third-party websites, platforms, or services, the handling of your information after you leave our Service will be governed by the relevant third party's own privacy policy and not directly by this policy. We recommend reviewing those policies before submitting information to them.
6. Updates to This Privacy Policy
We may update this policy based on feature changes, legal or regulatory requirements, or product adjustments. If an update materially affects your rights or obligations, we may notify you through in-app pages, release notes, or other reasonable means. The updated policy becomes effective once published unless applicable law requires us to obtain additional consent.
7. Subscription and Payment
Healio offers optional premium subscription plans through Apple's In-App Purchase system. All payment transactions are processed by Apple; we do not collect or store your credit card number, Apple ID password, or billing address.
- Subscription pricing, plan duration, and auto-renewal terms are presented on the subscription page before purchase.
- Subscriptions auto-renew at the end of each billing cycle unless you cancel at least 24 hours before the current period expires.
- You can manage or cancel your subscription through your Apple ID account settings or the App Store.
- We receive a purchase receipt from Apple that includes your subscription status, product identifier, and transaction identifier, which we use to verify your entitlement to premium features.
- Refund requests are handled by Apple in accordance with Apple's refund policies.
8. Contact Us
If you have any questions about this Privacy Policy, how personal information is handled, or the exercise of your rights, you may contact us at: [email protected]
The Service is operated by Solvathir Limited.
9. Effective Date
This Privacy Policy was last revised and became effective on October 7, 2026.