HealHub AI — Privacy Policy

This Privacy Policy (“Policy”) explains how Artem Leschenko, operating as an individual developer (“we,” “us,” or “our”), processes information when you use the HealHub AI mobile application (the “App”). By using the App, you agree to this Policy. If you do not agree, please do not use the App.

1. Contact

Privacy contact: leschenkoapp@gmail.com

We do not publish a postal address for privacy correspondence. Please use the email above for privacy requests, account deletion assistance, and related inquiries.

2. What HealHub AI is (and is not)

HealHub AI is a wellness and information application. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Any AI-generated content is informational only, may be incorrect, incomplete, or outdated, and is not a substitute for advice from a qualified healthcare professional. If you believe you may have a medical emergency, contact emergency services immediately.

3. Information we collect and how we use it

3.1 Apple Health (HealthKit)

With your permission, the App may read health and fitness-related data you authorize through Apple Health (HealthKit) (for example activity, heart-related metrics, sleep, nutrition, body measurements, and other categories you choose in iOS). We use this information to display statistics and trends in the App and to supply context if you use features that rely on that context.

We do not use HealthKit data for advertising. We do not sell HealthKit data.

3.2 Information you provide

You may provide information such as profile/wellness-related details, daily notes, and other inputs you choose to enter. Unless the App explicitly states otherwise for a specific feature, documents such as lab-related photos/PDFs you analyze are handled on your device as implemented (not stored in our cloud as part of that feature).

3.3 AI chat

When you use the AI chat, your prompts and the context you choose to include may be transmitted to our configured AI backend (Firebase AI Logic / Google AI services) to generate responses. Chat history is handled on your device as implemented (we do not maintain a cloud copy of your full chat transcript as described in this Policy). Do not submit information you are unwilling to have processed by Google’s services.

3.4 Account authentication

If you sign in, we process authentication-related identifiers through Firebase Authentication, including where you use Google Sign-In, Sign in with Apple, or email/password authentication.

3.5 Cloud data stored in Firebase (Firestore)

If you are signed in, certain information may be stored in Google Cloud Firestore under your user record, including as implemented:

• User info (profile/wellness-related information stored under your account),
• AI subscription / usage,
• AI context,
• Daily notes.

This supports account-linked features such as syncing and personalization where enabled.

3.6 Analytics

We use Firebase Analytics to collect aggregated / event-based usage information to understand how the App is used and to improve stability and product experience.

3.7 Technical, security, and operational data

We and our providers may process limited technical information needed to operate and secure the App (for example app version, device/OS class identifiers, diagnostic data as collected by Firebase/Apple).

4. Purposes of processing

We process information to:

• provide, maintain, and improve the App;
• authenticate accounts and protect security;
• display statistics and trends;
• operate AI features when you choose to use them;
• sync account-linked content where enabled (including Firestore data described above);
• understand usage through analytics;
• comply with legal obligations and protect rights and safety.

5. Legal bases (EEA / UK / Switzerland, where applicable)

Where GDPR-style laws apply, we may rely on:

• Consent (for example HealthKit permissions and optional features you enable);
• Contract (providing the App and account features you request);
• Legitimate interests (for example security, abuse prevention, service improvement, analytics), where not overridden by your rights.

6. Service providers, sharing, and “sale”

We use service providers to operate the App, including Google (Firebase: Authentication, Firestore, Firebase AI Logic, Analytics, and related infrastructure) and Apple (HealthKit, Sign in with Apple, and platform services). These providers process information under their own terms and privacy notices.

We do not sell your personal information in the sense commonly used in U.S. state privacy laws, and we do not sell HealthKit data. We do not use HealthKit data for advertising.

We do not use your information to send marketing communications unless we introduce that feature and provide a separate lawful basis and controls.

7. International transfers (including the United States)

We operate with a global audience and a strong focus on the United States. Your information may be processed in the United States and other countries where our providers operate. If we transfer personal data from the EEA, UK, or Switzerland to countries not considered to provide an adequate level of protection, we use appropriate safeguards where required (for example Standard Contractual Clauses and/or provider transfer mechanisms offered by Google).

8. Retention

We retain information for as long as needed to provide the App and for legitimate purposes such as security, troubleshooting, and legal compliance. We do not operate a separate automatic “timed deletion” schedule beyond what the App provides (for example, account deletion where available). Provider systems may retain certain logs or backups according to their own retention practices.

9. Your choices and rights

Health permissions: You can manage or revoke Health access in iOS Settings (Health → Data Access & Devices → HealHub AI, labels may vary by iOS version).

Account deletion: Where the App provides account deletion, you may use it to request deletion of your Firebase Authentication account and associated Firestore user data as implemented. If deletion fails (for example because re-authentication is required), contact leschenkoapp@gmail.com.

Privacy rights (EEA/UK and similar): You may contact leschenkoapp@gmail.com to exercise rights such as access, deletion, correction, objection, or portability, subject to verification and applicable law.

California residents (summary): Depending on eligibility, you may have rights to know/access/delete/correct certain personal information, and rights against discrimination for exercising privacy rights. Submit requests to leschenkoapp@gmail.com. We do not “sell” or “share” personal information for cross-context behavioral advertising as described in this Policy.

10. Children

The App is not directed to children. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, contact leschenkoapp@gmail.com and we will take appropriate steps.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure.

12. Apple HealthKit requirements (summary)

HealHub AI’s use of information received through HealthKit follows Apple’s requirements for apps using HealthKit, including: not using HealthKit data for advertising or sale, and not disclosing HealthKit data to third parties except to enable features you use, comply with law, or as otherwise permitted by Apple’s HealthKit rules.

13. Your responsibility after AI outputs; limitation of liability (Privacy Policy scope)

13.1 Informational AI only; your decisions are yours

AI outputs are not medical advice and may be wrong. You are solely responsible for evaluating any AI output and for any action or inaction you take after receiving or viewing AI-generated content—including, without limitation, decisions about diet, exercise, sleep, supplements, medications, scheduling, contacting or not contacting healthcare professionals, emergency services, insurers, coaches, employers, or any other third party.

13.2 No supervision, no provider relationship

We have no duty to monitor, supervise, validate, or approve your real-world decisions after an AI reply. The App does not create a doctor–patient (or other clinician–patient) relationship, does not create a duty of care toward you based on AI replies, and does not undertake to verify whether you followed, ignored, or misunderstood any AI content.

13.3 Assumption of risk; no warranty as to AI

To the fullest extent permitted by applicable law, you agree that your use of AI features is at your own risk, and AI outputs are provided “as is” without warranties of accuracy, completeness, timeliness, fitness for a particular purpose, or safety for any use case.

13.4 Limitation of liability (to the extent this Policy may govern liability topics)

To the fullest extent permitted by applicable law, Artem Leschenko shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenues, goodwill, or data, arising out of or related to: (a) your reliance on AI outputs; (b) your failure to seek professional advice; or (c) any conduct by you or third parties after you receive AI content—including any health outcomes or non-health outcomes—whether or not the App was used “correctly.”

Nothing in this Policy is intended to exclude or limit liability where such exclusion or limitation is prohibited by mandatory law (for example certain consumer rights that cannot be waived).

14. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date when we do. If changes are material where required by law, we will provide additional notice or obtain consent as required. Continued use of the App after the effective date of changes constitutes acceptance of the updated Policy, unless applicable law requires otherwise.

15. Entirety of this Policy document

This document is the Privacy Policy for HealHub AI. If you offer separate Terms of Use / EULA, you should align overlapping topics (especially medical disclaimers and liability caps) with counsel; some jurisdictions treat certain liability limitations primarily as contractual terms.