Privacy Policy

Personal Health Bridge · last updated 10 September 2026

Who this covers

Personal Health Bridge is a private tool with exactly one user: its author. It is not offered to the public, has no accounts and no registration. This policy describes how that single user's own data is handled.

What data is accessed

With the user's explicit Google consent, the application reads the following from the Google Health API, and nothing else:

• Activity and fitness: steps, distance, calories, active minutes, workouts.
• Health metrics: body weight, body-fat percentage, heart rate, heart-rate variability.
• Sleep sessions and their stages.
• Profile fields needed for calculations: height and age.

Access is read-only. The application cannot modify or delete anything in the Google account.

How the data is used

Data is used for one purpose: answering the user's own questions about their activity, body composition and rest. Derived values such as muscle mass and basal metabolic rate are calculated from the same measurements.

Google user data is never used to develop, improve or train generalised models, nor for advertising, profiling or credit assessment.

Where the data is stored

• Measurements are kept in a local database on a private server controlled solely by the author.
• OAuth tokens are stored in files readable only by the server's owner (chmod 600) and are never transmitted anywhere except to Google's own token endpoint.
• All network access to the server requires HTTPS and a secret token; requests without it are rejected.

Sharing

Data is not sold, rented, published or shared with any third party. The only outbound network connections the application makes are to Google's own APIs.

Health measurements are shown to an AI assistant so it can answer the user's questions. That is a deliberate act by the user, in the user's own private session, and it is the entire purpose of the tool.

Retention and deletion

Measurements are retained so historical trends can be calculated. The user can delete the local database at any time, which removes all stored measurements permanently.

Access can be revoked at any moment at myaccount.google.com/permissions; after that the application can no longer read anything from the Google account.

Children

The application is used by an adult and is not directed at children.

Changes and contact

If this policy changes, the updated date above will change with it. Questions: flexkoot32@gmail.com.