Privacy Policy

This privacy policy describes, in general terms, how HeartTraxIQ handles information when you use the software.

Information You Provide

You may provide account details and personal tracking entries, such as vitals or medication notes, that you choose to enter.

How Information Is Used

Information is used to operate core application features, display your records, and maintain basic account functionality and security.

Cookies and Local Storage

HeartTraxIQ uses essential cookies and browser storage for sign-in sessions, security, and preference storage. See the Cookie Policy for additional details.

Data Sharing

Your information is not sold. Data may be shared only as needed to provide authentication, hosting, or other technical services required to run the application.

Google Health Data

If you choose to connect a Google Health account (Profile Settings > Connect Google Health), HeartTraxIQ requests read-only access to the following raw data types: weight, heart rate, core body temperature, blood glucose, step count, active energy burned (calories), blood oxygen (SpO2), and sleep duration. HeartTraxIQ does not access, and has no scope to access, any other Google Health or Google Account data. No aggregated or anonymized Google user data is collected separately from these raw values.

Use: This data is used exclusively to automatically populate your own Vitals History, Blood Glucose Logbook, and Fitness Activity History records, so you don't have to enter those readings by hand. It is not used for advertising, lending, profiling, or any purpose unrelated to displaying your own health information back to you.

Transfer: Google Health data is never sold, shared with advertisers or data brokers, or transferred to any third party, except as strictly necessary to operate the application's hosting and database infrastructure. It is not used to develop, improve, or train any AI/ML models.

Protection: OAuth access and refresh tokens used to sync your Google Health data are encrypted at rest using ASP.NET Core Data Protection before being stored, and all data is transmitted over HTTPS.

Retention and deletion: Synced Google Health data is retained for as long as your HeartTraxIQ account is active, the same as any other record you keep in the app. You can disconnect your Google Health account at any time from Profile Settings, which immediately stops all further syncing. You can request deletion of previously synced data by contacting HeartTraxIQ LLC at support@hearttraxiq.com.

Limited Use compliance: HeartTraxIQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Apple Health and Health Connect Data

If you choose to connect Apple Health (iOS) or Health Connect (Android) from the HeartTraxIQ mobile app (Profile Settings > Connect Apple Health / Health Connect), HeartTraxIQ requests read-only access to the following data types: weight, heart rate, blood pressure, blood glucose, blood oxygen (SpO2), step count, and sleep. HeartTraxIQ never requests or is granted write access to Apple Health or Health Connect, and does not access any other data stored in those platforms.

Use: This data is used exclusively to automatically populate your own Vitals History, Blood Glucose Logbook, and Fitness Activity History records, so you don't have to enter those readings by hand. Existing entries you or another connected service (such as Withings or Google Health) have already recorded are not overwritten; Apple Health and Health Connect data is only used to fill in readings you don't already have. It is not used for advertising, lending, profiling, or any purpose unrelated to displaying your own health information back to you.

Transfer: Apple Health and Health Connect data is never sold, shared with advertisers or data brokers, or transferred to any third party, except as strictly necessary to operate the application's hosting and database infrastructure. It is not used to develop, improve, or train any AI/ML models.

Protection: Health data read from the device is transmitted to HeartTraxIQ over HTTPS and stored using the same security controls as data you enter manually. HeartTraxIQ does not store your device-level Apple Health or Health Connect authorization; the mobile operating system manages and enforces those permissions directly.

Retention and deletion: Synced Apple Health and Health Connect data is retained for as long as your HeartTraxIQ account is active, the same as any other record you keep in the app. You can disconnect Apple Health or Health Connect at any time from Profile Settings, which immediately stops all further syncing, and you can revoke the app's access directly from the Health app (iOS) or Health Connect settings (Android) at any time. You can request deletion of previously synced data by contacting HeartTraxIQ LLC at support@hearttraxiq.com.

Data Retention and Control

Information is retained while your account is active or as needed for operational and legal purposes. You can request account or data changes by contacting HeartTraxIQ LLC at support@hearttraxiq.com or by using the account deletion request page.

Important Notice

HeartTraxIQ is general-purpose software for personal record-keeping. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Always consult a healthcare professional for medical advice, diagnosis, or treatment. HeartTraxIQ is provided on an "as is" basis.

Policy Updates

This policy may be updated from time to time. Continued use of the software after updates means you accept the revised policy.