The short version
- Your health readings are stored only on your phone, in an encrypted database.
- Camera video used for pulse measurement is processed in real time on your phone and is never recorded or uploaded.
- We never share health data with advertisers or analytics providers, and never sell it.
- Optional cloud backup is end-to-end encrypted with a passphrase only you know.
Healthovia ("the app") is developed and operated by Tech Avenue Labs ("we", "us"). It helps you measure and track vital signs. This policy explains what data the app handles, where it is stored and who it is shared with. It applies to the Healthovia apps for iPhone and Android and to this website.
1. Health data
| Data | Source | Where it is stored | Shared with |
|---|---|---|---|
| Heart rate, HRV, stress index, breathing rate, blood oxygen estimates | Phone camera (processed on the device) | Encrypted database on your phone | Nobody |
| Blood pressure, SpO2, glucose, weight, temperature, notes | Manual entry, Bluetooth devices, Apple Health, Health Connect | Encrypted database on your phone | Nobody |
| Medications and dose log | Manual entry | Encrypted database on your phone | Nobody |
| Profiles (name, age, sex, height, weight) for you and family members | Manual entry | Encrypted database on your phone | Nobody |
The encryption key is created on first launch and stored in the iOS Keychain or the Android Keystore.
Apple Health and Health Connect
If you enable it, Healthovia reads heart rate, blood pressure, blood oxygen, respiratory rate, weight, blood glucose and heart rate variability, so that readings from your watch, cuff or oximeter appear in the app. This data is used only to show your readings and trends inside the app. It is not transferred to us or to third parties, not used for advertising or marketing, not sold, and not used to train models.
Healthovia's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Data from Apple HealthKit is not stored in iCloud by us, and is not disclosed to third parties.
Bluetooth devices
When you connect a blood pressure monitor, pulse oximeter, heart rate sensor or scale, readings are transferred directly from the device to your phone and stored locally.
2. Optional cloud backup
If you choose to back up, you sign in with Google or with an email address (Firebase Authentication, operated by Google). Before upload, your entire database is compressed and encrypted on your phone with AES-256-GCM, using a key derived from a backup passphrase that only you know. Only this encrypted file is stored in Google Cloud Firestore under your account. We cannot read it, and we cannot recover it if you forget the passphrase.
You can delete your backup and account at any time in Settings → Cloud backup → Delete account & cloud backup, or as described on our account deletion page.
3. Data collected by services we use
None of these services receive your health readings.
| Service (provider) | Purpose | Data |
|---|---|---|
| Firebase Analytics (Google) | Understand which features are used | App events (for example "measurement completed", without values), app version, device model, OS, approximate country, app-instance ID |
| Firebase Crashlytics (Google) | Fix crashes | Crash traces, device model, OS |
| Firebase Cloud Messaging (Google) | Send reminders, tips and weekly reports | Device push token |
| Firebase Remote Config (Google) | Tune settings without an app update | App-instance ID |
| Firebase Authentication (Google) | Account for the optional backup | Email address, name, user ID |
| Google AdMob (free version only) | Show ads | Advertising ID, IP address (approximate location), device information, ad interactions |
| RevenueCat | Manage Premium purchases | Anonymous app user ID, purchase history |
Payments are processed by Apple or Google. We never see your card or payment details.
4. Advertising
The free version shows ads from Google AdMob. Ads are never based on your health data.
- In the European Economic Area, the UK and Switzerland, we ask for your consent before personalised ads are shown (Google User Messaging Platform). You can change your choice in Settings → Ad privacy choices.
- On iPhone, the advertising identifier is only used if you allow it in the App Tracking Transparency prompt. You can change this in iOS Settings → Privacy & Security → Tracking.
- Premium removes ads entirely.
5. Permissions
- Camera and flash: fingertip pulse measurement.
- Notifications: reminders and optional tips.
- Bluetooth (and location on Android 11 and earlier, required by the system for Bluetooth scanning): connecting to health devices. Your location is not collected.
- Apple Health / Health Connect: see section 1.
6. Retention and deletion
- Data on your phone stays until you delete it (Settings → Delete all data) or uninstall the app.
- Cloud backups stay until you delete them or your account.
- Analytics data is retained by Google for 14 months.
7. Security and international transfers
Data on your phone is encrypted at rest, and all network traffic uses TLS. The service providers above may process data in the United States and other countries; they use appropriate safeguards such as the EU Standard Contractual Clauses.
8. Children
Healthovia is not directed to children under 13. Family profiles for children are created and managed by an adult on the adult's own device.
9. Medical disclaimer
Healthovia is not a medical device and does not diagnose, treat, cure or prevent any disease. Always consult a healthcare professional.
10. Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or export your data, and to object to or restrict processing. Most of this you can do directly in the app: export CSV or PDF, delete data and delete your account. For anything else, email [email protected]. You may also complain to your local data protection authority.
11. Changes and contact
We will update this policy when our practices change and show the new "Last updated" date on this page.
Questions? Email [email protected].