Effective Date: September 27, 2026
Self Health Living (“we”, “us”, or “our”) operates the SelfHealth iOS application (the “App”). This Privacy Policy explains how we collect, use, store, and protect your personal information. By using the App, you agree to the collection and use of information in accordance with this policy.
1. Information Collection & Usage
To provide a personalized health experience, we collect data in the following ways:
- Account Data: Email and password used for authentication and cross-device syncing via Supabase.
- User-Entered Health Data: Lab result values (e.g., cholesterol, glucose), cycle tracking entries, and personal health notes.
- HealthKit Integration: With your permission, we read metrics like heart rate, HRV, and sleep. This data is processed locally to generate health scores and shared with AI providers only when you request specific coaching insights.
- HealthKit data is never used for advertising or shared with third parties for purposes unrelated to health and fitness.
- Food Logging Data: Meals and foods you log, including photos of meals or nutrition labels and meal descriptions you type. When you scan a barcode or search for a food by name, the barcode digits or search term you enter are sent to Open Food Facts and USDA FoodData Central to look up nutrition information — no account or health data is included in these lookups.
- Usage Data: App interaction logs (e.g., screens visited, errors) collected anonymously for debugging and improvement.
2. Artificial Intelligence (AI) Features
SelfHealth utilizes Large Language Models (LLMs) to provide automated health coaching and lab analysis.
- Providers: We currently use Google Gemini (operated by Google LLC). The AI provider we use may change over time and this policy will be updated to reflect any such changes.
- What data is sent: When you use an AI feature, the following data may be transmitted to the AI provider: your health metrics and scores (e.g., HRV, sleep, vitals score), lab result values, biomarker data, workout and exercise history (e.g., exercises performed, weights, repetitions, and dates) and recovery indicators, your self-reported mood or soreness when it factors into a fitness recommendation, photos of meals or nutrition labels, meal descriptions you type, and the text of your query. Raw HealthKit sensor data is never sent.
- Your consent: We will always ask for your explicit permission — via an in-app consent screen — before sending any personal health or food data to a third-party AI service, the first time you use any AI feature. You can review or revoke this consent at any time via Settings → AI & Data Usage.
- Security: Requests to Google Gemini run under Google’s paid API service tier, not the free/unpaid tier. Your prompts and Google’s responses are never used to train Google’s models and are handled under Google’s Data Processing Addendum for paid services.
- Retention: Personal data sent to AI providers is typically deleted within 30 days.
- Third-party privacy policies: Google Privacy Policy
You may opt out of AI features at any time via Settings → AI & Data Usage, though this will limit personalized coaching functionality.
3. Medical Disclaimer
[!IMPORTANT] Important: All App content, including AI-generated coaching and lab analysis, is for informational purposes only. It is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition.
4. Storage, Security & Deletion
- Infrastructure: Data is stored securely in Supabase with Row Level Security (RLS) and end-to-end encryption.
- Data Control: You can delete your account at any time via Settings → Delete Account. This permanently and irreversibly wipes all your data from our servers.
- Third-Party Sales: We never sell your health data to advertisers or third-party data brokers.
5. Family & Managed Profiles
- Managed Profiles: Account owners can create additional profiles within their own account for a minor child or another individual in their care (e.g. an aging parent) — these are called “Managed Profiles.” Managed profiles have no separate login or account of their own; all data is entered, viewed, and controlled solely by the account owner.
- Managed profiles for minors: For a managed profile representing a minor child, the account owner is the child’s parent or legal guardian and provides consent on the child’s behalf. SelfHealth does not knowingly collect personal information directly from children under 13 — all data about a managed child profile is entered by the parent/guardian, not the child.
- Managed profiles for other adults: For a managed profile representing another adult, SelfHealth sends a one-time email notice to that person’s contact email when the profile is created, as a record that they were informed.
- Linked Adult accounts: Separately, SelfHealth supports “Linked Adult” accounts, where two independent adult account holders can invite each other to share visibility into their own health data. This requires the invited person to accept using their own SelfHealth account, and is never available for minors.
- Applicable practices: All data practices described elsewhere in this policy (AI usage, storage, deletion) apply equally to managed-profile and linked data.
- Account deletion: Deleting your account permanently deletes all of your managed profiles’ data as well.
6. Contact Us
Questions regarding your privacy? Reach out at:
Self Health Living
Email: privacy@selfhealthliving.com
Web: selfhealthliving.com