Privacy policy

Last Updated: October 12, 2026

Introduction

Welcome to Cholesterol Heart Tracker ("we," "our," or "us"). This Privacy Policy explains how we handle information when you use our mobile application (the "App"), available on both the Apple App Store (iOS) and Google Play Store (Android). Some features and third-party integrations differ between platforms; where that's the case, we call it out explicitly below. We are committed to protecting your privacy and ensuring you understand how your data is managed.

Information we don't collect

Cholesterol Heart Tracker is designed with privacy at its core. We want to be clear about what we DON'T do:

• We do NOT have a login or account system, and we do NOT collect any login credentials
• We do NOT collect your name, email address, or any personal identifiers
• We do NOT store your meal logs, cholesterol results, recipes, or other health data on our servers
• We do NOT track your precise location
• We do NOT share your meal logs, cholesterol results, or health data with third parties
• We do NOT sell your data to anyone

Data storage

On-device storage

All your health data, including meal logs, cholesterol test results, custom recipes, and food items, is stored locally on your device — using Apple's SwiftData framework on iOS, or an on-device database on Android. This data never leaves your device unless you explicitly choose to:

• Share recipes or meals via AirDrop, Messages, Mail, or Android's share sheet
• Sync data to Apple Health or Health Connect (requires your explicit permission)
• Back up your device to iCloud or your Google Account (controlled by your device settings)

Device backups

If you have iCloud Backup (iOS) or Google/Android device backup enabled, your app data may be included in that backup. This is controlled entirely by your device's operating system settings, not by our App. On iOS, review this under Settings > [Your Name] > iCloud > iCloud Backup. On Android, review this under Settings > System > Backup.

Support codes

The App has no login or account system — you never create a username, password, or sign in. If you contact us for help, the App can generate a support code, an anonymous identifier not tied to your name or email, that you can share with us. If you choose to share it, we use it to view the data you've sent us (such as your meal logs or settings) so we can troubleshoot your issue. This is entirely optional and only happens if you generate and share a code with us.

Generating a support code stores that code and the associated data you're sharing in Firestore (Google's cloud database) so we can look it up. It does not include your name, email address, or any other personal identifier, and it is not used to authenticate or identify you across sessions.

Apple Health integration (iOS)

With your explicit permission, the iOS App can read and write data to Apple Health:

• Data We Read: Workouts, active energy, steps, heart rate, VO₂ max, and sleep data
• Data We Write: Meal nutrition data and water intake

This integration is entirely optional and can be managed through iOS Settings > Privacy & Security > Health > Cholesterol Heart Tracker. Apple Health data is protected by Apple's security measures and is not accessible to us.

Health Connect integration (Android)

With your explicit permission, the Android App can read and write data to Health Connect, Android's on-device health data platform:

• Data We Read: Workouts, active energy, steps, heart rate, and sleep data
• Data We Write: Meal nutrition data and water intake

This integration is entirely optional and can be managed through Android Settings > Apps > Health Connect > App permissions, or from within the Health Connect app. Health Connect data is stored on your device and is not accessible to us beyond what you explicitly permit the App to read or write.

Camera & microphone (Android)

The Android App may request the following device permissions to support specific features. Each is optional and only used for the purpose described:

• Camera: Used to scan barcodes and food labels so you can quickly add items to your food diary. Images are processed on-device to read the barcode/label and are not uploaded to our servers or stored after scanning.
• Microphone: Used for voice-based meal logging, letting you describe a meal or search for a food by speaking instead of typing. Audio is processed to transcribe your request and is not stored or uploaded after processing.

You can manage these permissions at any time through Android Settings > Apps > Cholesterol Heart Tracker > Permissions.

AI & automated features

The App does not use any third-party AI service, and does not send your meal logs, cholesterol results, voice recordings, or any other personal or health data to one.

• Health Insights: The summaries and recommendations shown with your cholesterol test results are calculated on your device using fixed rules based on published health guidelines (cited in the App). Your results are not sent anywhere to produce them.
• Voice meal logging (iOS): Your speech is transcribed by Apple's Speech framework — on your device wherever your device supports it, otherwise by Apple's speech recognition service under Apple's privacy policy. The transcript is turned into food items on your device, using Apple's on-device Foundation Models (Apple Intelligence) where available. Nothing is sent to us or to any third-party AI provider.
• Voice meal logging (Android): Your speech is transcribed by your device's built-in Android speech recognition service and matched to foods on your device. Nothing is sent to us or to any third-party AI provider.
• Barcode scanning: Barcodes are read on your device (Apple's camera frameworks on iOS, Google ML Kit's on-device scanner on Android). Only the barcode number is sent to the food database described below.

Third-Party Services

Food database API

When you search for foods or scan barcodes, the App communicates with Open Food Facts, a free, open nutrition database, to retrieve food information. Only the barcode number or search term is sent. These API requests are anonymized and do not include any personal information or identifiable data.

Firebase

We use several Firebase services (Google) across both platforms:

• Firestore: Stores support codes and the data associated with them, as described above under "Support codes." It is only used if you choose to generate and share a support code with us.
• Firebase Analytics: Helps us understand how users interact with the App so we can improve features and fix bugs. The data collected is anonymized and includes device type and OS version, app version and crash reports, general usage patterns (e.g., which features are used most), and session duration and frequency.

Firebase Analytics does NOT collect your health data, meal logs, cholesterol results, or any personally identifiable information.

Google AdMob

The App displays advertisements through Google AdMob. AdMob may collect certain information to serve relevant ads, including:

• Device advertising identifier
• IP address
• Device type and operating system
• General location (city/region level, not precise location)

You can manage ad personalization through your device's ad settings — iOS Settings > Privacy & Security > Apple Advertising, or Android Settings > Privacy > Ads — or through the App's Privacy Options (available in regions with GDPR compliance).

For more information on how Google uses data, visit: Google Privacy Policy

Data sharing

User-initiated sharing

The App allows you to share recipes, meals, and food items with others through:

• AirDrop (iOS, device-to-device, no server upload)
• Messages, Mail, Android's share sheet, or other sharing apps (data leaves your device only when you explicitly share)

Shared data includes only the recipe/meal information you choose to share. No personal health data or user profile information is included.

No third-party data sharing

We do not sell, rent, or share your personal information or health data with third parties for marketing or any other purposes.

Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect information from children under 13. If you are a parent or guardian and believe your child has provided us with information, please contact us immediately.

Security

We take security seriously:

• Your health data is stored locally on your device, protected by your device's built-in security features
• Communication with external APIs (food database, Firebase) uses encrypted HTTPS connections
• The App has no login or password, eliminating account breach risk entirely
• Your device passcode, Face ID/Touch ID, or Android biometric unlock protects access to the App and your data

Data retention and deletion

Since all your health data is stored on your device:

• You can delete individual meals, recipes, or test results at any time within the App
• Deleting the App from your device permanently removes all locally stored data
• If you've synced data to Apple Health or Health Connect, you can manage it through the Health app or Health Connect app
• If you've shared a support code with us, you can request deletion of that data by contacting us (see "Contact us" below)

Your rights

Depending on your location, you may have certain rights regarding your data:

• Access: All your data is accessible within the App at any time
• Deletion: You can delete any or all data within the App or by uninstalling the App; you can also request deletion of any support-code data by contacting us
• Portability: You can export data through Apple Health/Health Connect or by sharing individual items
• Opt-Out: You can disable analytics and ad personalization through your device settings

International users

If you are located outside the United States, please be aware that information we process may be transferred to and processed in the United States or other countries. By using the App, you consent to the transfer of your information to countries outside your country of residence.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@hearttracker.app
Website: www.hearttracker.app