Privacy Policy隐私政策

1. Summary

• Local-first. Your health data is processed and stored on your iPhone. We do not operate a server that stores your health data.
• No account. You can use YesHealth without signing up or giving us your name or email.
• No ads, no tracking, no sale. We do not show ads, track you across apps or websites, or sell or rent your data.
• HealthKit protected. Apple Health data is never used for advertising or marketing and is never shared with third parties for those purposes.
• You are in control. You choose what to share, and can export, disconnect or delete at any time.

2. Who we are and scope

This Privacy Policy explains how the YesHealth iOS app (Chinese name: 医起行) and this website handle information. “YesHealth”, “we” and “us” refer to the developer of the app. It applies to the app as described in its current version. Questions: cathymanzkx@gmail.com.

3. Information the app processes

Everything below is processed on your device and only after you enable it:

• Apple Health (HealthKit) data you authorize: heart rate and resting heart rate, activity (such as steps and active energy), sleep, and optionally weight and blood glucose.
• Data from optional device connections you authorize: Oura (sleep, readiness, activity, heart rate), Garmin (daily steps, calories, resting heart rate, sleep) and Dexcom (CGM estimated glucose values).
• Content you enter: personal step and sleep targets, medication notes (names and time-of-day words), symptom journal entries and optional mood labels.
• Settings: chosen focus types, language, display units and reminder preference.
• Connection credentials: sign-in tokens for optional device connections, kept in the iOS Keychain on your iPhone.

What we do not collect: we do not ask for your name, email, phone number, address, precise location, contacts or payment information, and the app contains no third-party advertising or analytics SDKs. If you contact us by email, we receive your email address and whatever you write, and use it only to reply. If you choose to share analytics with app developers in iOS settings, Apple may provide us aggregated, anonymous crash and usage statistics under Apple’s own policy; these do not include your health data.

4. Apple Health (HealthKit)

In line with Apple’s App Store Review Guideline 5.1.3 and the HealthKit terms:

• YesHealth requests access only to the Health data types needed for the features you use, and you choose which categories to allow. The app keeps working if you decline.
• HealthKit data is used only to provide the app’s health features to you (timeline, targets, insights, chat, reports and summaries).
• HealthKit data is not used for advertising, marketing or data mining, and is not sold, rented or shared with advertising platforms, data brokers or information resellers.
• HealthKit data is not disclosed to any third party without your explicit action (for example, when you share a report yourself).
• YesHealth does not store your health information in iCloud and does not upload it to our servers.
• The current version reads Health data only and does not write data to Apple Health.
• You can change or revoke access at any time in Settings › Health › Data Access & Devices › YesHealth or in the Health app.

5. Third-party connections (Oura, Garmin, Dexcom)

Connecting a device is optional. You sign in on the maker’s own page — we never see your Oura, Garmin or Dexcom password. Some connections may be marked “Coming soon” in the app until they are available.

• Oura: after you authorize, the app reads sleep, readiness, activity and heart-rate data directly from Oura’s API to your iPhone.
• Dexcom: after you authorize, the app reads estimated glucose values (EGVs) from Dexcom’s API for display. CGM data is for information only.
• Garmin: after you authorize, the app obtains daily summaries (steps, active calories, resting heart rate, sleep duration).

Minimal authorization service

Some providers (Dexcom and Garmin, and optionally Oura) require a confidential “client secret” that must not be placed inside an app. For these, we use a minimal authorization service whose only job is to exchange and refresh sign-in tokens with the provider. Where a provider requires tokens to be held server-side (Dexcom), the service may keep the provider’s refresh token so it can issue short-lived access tokens to your app. This service does not store your health data, does not require a YesHealth account, and does not use tokens for any other purpose.

Garmin delivers data only to a server endpoint rather than directly to apps. If and when the Garmin connection is enabled, its daily summaries pass through this service only so they can be delivered to your iPhone, and are not used for any other purpose. Before enabling any connection that would cause your health data to be retained on a server we operate, we will update this policy and our App Store privacy details.

When you use Apple Health, Oura, Garmin or Dexcom, those companies process your data under their own terms and privacy policies. YesHealth receives only what you authorize them to release.

6. On-device storage and security

• Health data, synced device data, your notes and summaries are stored in the app’s private storage on your iPhone, protected by iOS file protection.
• Sign-in tokens are kept in the iOS Keychain and are designed not to migrate to other devices through backups.
• Insights and chat replies are generated on your device by rules in the app; no health data is sent to an AI service or cloud server.
• Demo mode uses built-in sample data only.
• Network connections to device makers and the authorization service use encrypted HTTPS.

7. How information is used

Information is used solely to provide YesHealth’s features to you on your device: showing your timeline and charts, tracking your personal targets, generating daily and weekly insights and comparisons, answering chat questions about your own trends, preparing reports and summaries you choose to share, scheduling your optional local reminder, and merging duplicate readings from different sources.

8. Sharing

We do not share your information. Data leaves your device only when you choose to share it — for example a weekly report, doctor-visit summary or JSON export through the iOS share sheet. Once shared, the recipient’s handling is outside our control, so share only with people and apps you trust. We may disclose information we actually hold (such as support emails) if required by law.

9. No ads, no tracking, no sale

• No advertising in the app and no advertising identifiers.
• No tracking as defined by Apple’s App Tracking Transparency, and no cross-app or cross-site profiling.
• We do not sell or rent personal information, and do not “sell” or “share” it for cross-context behavioral advertising as those terms are used in California law.

10. Data retention and deletion

• Data stays on your iPhone until you delete it. You can delete individual medication notes and symptom journal entries in the app.
• Disconnecting Oura, Garmin or Dexcom removes that connection’s tokens and synced data from your iPhone; you can also revoke access on the maker’s website or app.
• Turning off Health permissions stops further reading. Data in Apple Health itself is managed in the Health app.
• Deleting the app removes all YesHealth data from your iPhone.
• Support emails are kept only as long as needed to help you and are then deleted. Tokens held by the authorization service expire or are discarded when no longer needed or when you revoke access with the provider.

11. Children

YesHealth is not directed to children under 13 (or the minimum age required in your region, such as 16 in some countries). We do not knowingly collect personal information from children. A parent or guardian who believes a child has used the app can delete it from the device, or contact us for help.

12. International users and your rights

Because YesHealth keeps your health data on your device, you can exercise most rights directly in the app. Depending on where you live — for example under the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA) or China’s Personal Information Protection Law (PIPL) — you may have the right to:

• access and obtain a copy of your data (use Profile › Export a copy);
• correct or delete it (edit or delete notes, disconnect devices, or delete the app);
• withdraw consent at any time (turn off Health access or disconnect devices) without affecting earlier processing;
• object to or restrict processing, and not be discriminated against for exercising your rights;
• lodge a complaint with your local data protection authority.

Where data protection law applies, the legal basis for processing health data is your explicit consent, given through the iOS permission and sign-in screens. For any request about data we may hold (for example support emails), contact cathymanzkx@gmail.com. Device makers may process data in other countries under their own policies.

13. Privacy Nutrition Label summary

Apple’s App Store shows a “privacy label” for each app. Under Apple’s definitions, data is “collected” only when it is transmitted off your device in a way that lets the developer (or its partners) access it for longer than needed to service a request in real time.

For the current version, YesHealth’s App Store label is “Data Not Collected”, because:

• health data, notes and settings are processed and stored only on your iPhone and are not sent to us;
• there is no account, no analytics or advertising SDK and no tracking;
• the authorization service handles sign-in tokens only, not health data;
• data you send yourself (via the share sheet, or to Apple, Oura, Garmin or Dexcom under their own policies) is not collected by us.

If a future version changes any of this, we will update this policy and the App Store privacy label before releasing it.

14. Changes to this policy

We may update this policy. We will change the effective date above and, for material changes, give notice in the app or on this page before they take effect.

15. Contact

Privacy questions or requests: cathymanzkx@gmail.com