Privacy Policy for [HealthApp Name]

Making Your Privacy Easy to Understand

Last Updated: [Date] Version: 1.0

---

A note before we begin: Privacy policies are often written in ways that make them difficult to understand. We've deliberately written this one differently. We want you to actually know what happens with your health information — because you deserve to.

---

Table of Contents

1. Quick Summary — The Important Stuff
2. Who We Are and How to Reach Us
3. What Information We Collect
4. Why We Collect Your Information
5. How We Store and Protect Your Data
6. Who We Share Your Data With
7. Your Rights and Choices
8. Children's Privacy
9. International Data Transfers
10. How Long We Keep Your Data
11. Cookies and Tracking Technologies
12. Changes to This Policy
13. Legal Compliance Details
14. Contact Us

---

1. Quick Summary — The Important Stuff {#quick-summary}

This section gives you the highlights. Please read the full policy for complete details.

What You Should Know	Our Commitment
What we collect	Biometric data, health metrics, device information, and account details — only what's needed
Why we collect it	To provide your health tracking services and improve your experience
Who sees it	Our team (limited access), service providers bound by strict agreements, and only others with your explicit consent
Do we sell your data?	Never. We do not sell your personal or health information to anyone.
Your control	You can access, correct, download, or delete your data at any time
Legal basis	Your informed consent, plus legal obligations under GDPR and HIPAA
Data location	Stored in encrypted servers in [jurisdiction]; transfers abroad are protected
Questions?	Contact our Privacy Officer at [privacy@healthapp.com]

---

2. Who We Are and How to Reach Us {#who-we-are}

[HealthApp Name] is operated by [Company Legal Name], a company registered in [State/Country] with registration number [XXXXX].

Under GDPR terminology:

• We are the "Data Controller" — meaning we determine how and why your data is processed
• Some of our service providers act as "Data Processors" — they handle data only on our instructions

Under HIPAA terminology:

• We function as a "Covered Entity" and/or "Business Associate" depending on the services provided
• Our service providers sign Business Associate Agreements (BAAs) before accessing any Protected Health Information (PHI)

Contact Information

Contact Type	Details
General Privacy Questions	privacy@[healthapp].com
Data Protection Officer (DPO)	dpo@[healthapp].com
HIPAA Privacy Officer	hipaa@[healthapp].com
Mailing Address	[Full Company Address]
Phone	[Phone Number]
Response Time	We aim to respond within 72 hours

EU/EEA Representative: [Name and address of EU representative, required under GDPR Article 27]

UK Representative: [Name and address of UK representative, post-Brexit requirement]

---

3. What Information We Collect {#what-we-collect}

We only collect information that genuinely helps us provide your health tracking services. Here's a complete, honest breakdown:

3.1 Biometric and Health Data

This is the most sensitive information we handle, and we treat it accordingly.

Data we collect directly from you or your device:

• Heart rate and cardiovascular data — resting heart rate, heart rate variability, ECG readings (if your device supports it)
• Physical activity metrics — steps taken, distance traveled, calories burned, exercise type and duration
• Sleep data — sleep duration, sleep stages (light, deep, REM), sleep quality scores
• Body measurements — weight, body mass index (BMI), body composition (if entered or measured)
• Blood oxygen levels (SpO2) — if supported by your connected device
• Menstrual cycle and reproductive health data — only if you choose to use these features
• Stress and recovery metrics — derived from heart rate variability and activity patterns
• Nutrition data — food and water intake, if you choose to log it
• Medication tracking — names, dosages, and timing, only if you use this feature
• Symptoms and health notes — anything you manually enter into the app

⚠️ Important: Reproductive health data, mental health indicators, and medication information receive our highest level of protection and are never shared, even in aggregate form, without your specific and separate consent.

3.2 Account and Identity Information

• Full name
• Email address
• Date of birth (used to calibrate health metrics)
• Biological sex (used for health calculations — you may choose not to provide this)
• Profile photo (optional)
• Username and encrypted password

3.3 Device and Technical Information

• Device type, model, and operating system version
• App version
• Unique device identifier
• IP address (used for security purposes and rough location detection)
• Bluetooth-connected device information (e.g., fitness trackers, smart scales)
• Crash reports and performance data

3.4 Usage Information

• Features you use and how often
• Time spent in different sections of the app
• Goals you set and how you interact with them
• In-app purchases or subscription status

3.5 Information We Do NOT Collect

To be equally clear about what we don't collect:

• ❌ Your precise GPS location (unless you explicitly enable location-based features)
• ❌ Your contacts, messages, or call history
• ❌ Your social media profiles or content
• ❌ Your financial information beyond what's needed for subscription billing (handled by our payment processor)
• ❌ Information from your camera or microphone (unless you use specific features that require this)
• ❌ Data from third-party apps unless you explicitly connect them

---

4. Why We Collect Your Information {#why-we-collect}

Every piece of data we collect has a specific, legitimate purpose. Here's what we use your information for and the legal basis we rely on:

4.1 Core App Functions

Purpose	Data Used	Legal Basis (GDPR)	HIPAA Basis
Tracking and displaying your health metrics	Biometric and health data	Consent (Art. 9(2)(a))	Treatment/Healthcare Operations
Generating health insights and trends	All health data	Consent + Legitimate Interest	Healthcare Operations
Setting and tracking health goals	Activity, health, nutrition data	Consent	Healthcare Operations
Sending reminders and notifications	Usage data, goals	Consent	Healthcare Operations
Syncing with connected devices	Biometric data, device info	Contract performance (Art. 6(1)(b))	Healthcare Operations

4.2 Safety and Security

Purpose	Data Used	Legal Basis (GDPR)	HIPAA Basis
Detecting unusual activity or security threats	Device info, IP address, usage	Legitimate Interest (Art. 6(1)(f))	Required by Law
Preventing fraud and unauthorized access	Account info, device info	Legitimate Interest	Required by Law
Emergency alert features (if enabled)	Heart rate, location (if enabled)	Vital Interests (Art. 6(1)(d))	Treatment

4.3 Improving Our Services

Purpose	Data Used	Legal Basis (GDPR)	HIPAA Basis
Understanding how features are used	Anonymized usage data	Legitimate Interest (Art. 6(1)(f))	Healthcare Operations
Bug fixes and technical improvements	Crash reports, device info	Legitimate Interest	Healthcare Operations
Research to improve health algorithms	Anonymized/aggregated health data only	Consent (for identifiable data)	Research (with safeguards)

📌 Plain language note: When we say "legitimate interest," it means we have a genuine business reason to process data without asking for consent each time — but only when it doesn't override your fundamental rights. We always balance this carefully.

4.4 What We Will Never Do With Your Data

• ❌ Sell your personal or health data to advertisers, data brokers, or any third parties
• ❌ Use your health data to determine your eligibility for insurance, employment, or credit
• ❌ Share identifiable data with law enforcement without a valid legal order (and we will notify you when legally permitted to do so)
• ❌ Use your data to build advertising profiles
• ❌ Make automated decisions about your health that have significant legal or medical consequences without human review

---

5. How We Store and Protect Your Data {#how-we-store}

Your health information deserves serious protection. Here's exactly what we do to keep it safe:

5.1 Encryption

• In transit: All data moving between your device and our servers is protected using TLS 1.3 encryption (the strongest current standard)
• At rest: Your stored data is encrypted using AES-256 encryption
• Your password: We use bcrypt hashing — we never store your actual password, so even our own staff cannot see it
• Biometric data on your device: Protected by your device's built-in secure enclave technology

5.2 Access Controls

• Only employees who need your information to do their job can access it
• All staff with data access undergo background checks and sign confidentiality agreements
• Access logs are maintained and regularly audited
• Multi-factor authentication is required for all internal systems
• Any employee access to health data is logged and reviewed

5.3 Infrastructure Security

• Servers are hosted in SOC 2 Type II certified data centers
• Regular third-party security audits and penetration testing
• Intrusion detection systems operating around the clock
• Regular automated backups with encryption
• Incident response plan tested regularly

5.4 What Happens if There's a Data Breach

We have a detailed incident response plan. If a breach occurs:

1. Within 72 hours — We notify regulatory authorities as required by GDPR
2. Within the timeframe required by HIPAA (typically 60 days for larger breaches, shorter for smaller ones)
3. Promptly — We notify you directly via email if your specific data is at risk, in plain language explaining what happened, what data was affected, and what we're doing about it
4. We provide guidance on steps you can take to protect yourself

🔒 Honest disclosure: No system is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. What we can guarantee is that we take this seriously, have robust safeguards in place, and will act swiftly and transparently if anything goes wrong.

---

6. Who We Share Your Data With {#who-we-share}

We are very selective about who sees your data. Here is the complete list:

6.1 Our Service Providers (Data Processors)

These companies help us operate our app. They access only the minimum data necessary and are contractually prohibited from using it for their own purposes.

Service Type	Purpose	Location	Safeguards
Cloud Storage Provider (e.g., AWS/Google Cloud)	Storing your data securely	US/EU	BAA signed, GDPR SCCs in place
Analytics Provider	Understanding app usage	US	Anonymized data only; BAA signed
Customer Support Software	Responding to your inquiries	[Location]	Limited data access; BAA signed
Payment Processor (e.g., Stripe)	Processing subscriptions	US/EU	No health data shared; PCI-DSS compliant
Push Notification Service	Sending app reminders	US	Device IDs only; BAA signed
Crash Reporting Tool	Fixing technical bugs	[Location]	No health data; technical data only

6.2 Healthcare Providers (Only With Your Consent)

If you choose to share your health data with a doctor, clinic, or other healthcare provider through our app, we will transmit that data on your behalf. You control this completely — you must explicitly authorize each sharing event.

6.3 Research Partners (Only With Your Explicit Consent)

We may offer you the opportunity to contribute anonymized data to health research studies. This is entirely optional and separate from your normal app use. If you participate:

• Data will be anonymized before sharing
• You'll receive a full description of the research
• You can withdraw at any time
• You'll never be identifiable in research outputs

6.4 Legal Requirements

We may disclose your information if genuinely required by law:

• In response to valid court orders or legal process
• To comply with regulatory obligations
• To protect the safety of our users or the public in genuine emergencies

What we commit to:

• We will challenge overly broad legal demands
• We will notify you before complying when legally permitted
• We publish a transparency report [annually/semi-annually] detailing government requests

6.5 Business Transfers

If our company is acquired, merged, or undergoes significant changes, your data may be transferred as part of that transaction. We commit to:

• Notifying you at least 30 days before any transfer
• Ensuring the receiving party provides equivalent privacy protections
• Giving you the option to delete your account before any transfer is finalized

6.6 Who We Never Share With

• ❌ Data brokers or list companies
• ❌ Advertisers or marketing companies (for targeting purposes)
• ❌ Insurance companies, employers, or financial institutions
• ❌ Social media platforms
• ❌ Any party not listed here without your explicit prior consent

---

7. Your Rights and Choices {#your-rights}

You have significant rights over your data. We've made these easy to exercise.

7.1 Your Rights Under GDPR (EU/EEA/UK Users)

Your Right	What It Means	How to Exercise It	Our Response Time
Right to Access	Get a copy of all data we hold about you	In-app: Settings → Privacy → Download My Data	Within 30 days
Right to Rectification	Correct inaccurate data	In-app: Edit your profile or health data directly	Immediate for profile; 5 days for other data
Right to Erasure ("Right to be Forgotten")	Request deletion of your data	In-app: Settings → Privacy → Delete My Account, or email us	Within 30 days
Right to Restriction	Limit how we process your data	Email: privacy@[healthapp].com	Within 30 days
Right to Data Portability	Receive your data in a machine-readable format	In-app: Settings → Privacy → Export Data (JSON/CSV available)	Within 30 days
Right to Object	Object to processing based on legitimate interests	Email: privacy@[healthapp].com	Within 30 days
Right to Withdraw Consent	Change your mind about any consent you've given	In-app: Settings → Privacy → Manage Consent	Immediate
Rights re: Automated Decisions	Request human review of automated processing	Email: privacy@[healthapp].com	Within 30 days

💡 Note: Some deletions may take up to 90 days to fully propagate through all backup systems. Certain data may be retained longer if required by law.

7.2 Your Rights Under HIPAA (US Users)

Your Right	What It Means
Access your PHI	Receive a copy of your Protected Health Information
Amend your PHI	Request corrections to inaccurate health information
Accounting of disclosures	See a list of when and to whom your health information was disclosed
Restrict uses and disclosures	Request limits on how your PHI is used
Confidential communications	Request that we communicate with you in specific ways
File a complaint	Complain to us or directly to the U.S. Department of Health and Human Services (HHS)

To exercise HIPAA rights: Contact our HIPAA Privacy Officer at hipaa@[healthapp].com or write to us at [address].

To file a complaint with HHS: Visit www.hhs.gov/ocr/privacy or call 1-800-368-1019. We will never retaliate against you for filing a complaint.

7.3 Rights for California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Know what personal information is collected and how it's used
• Delete personal information (with some exceptions)
• Opt-out of the sale or sharing of personal information (we don't do this, but you have the right)
• Non-discrimination — we will not treat you differently for exercising your rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

Shine the Light Law: California residents may request information about disclosures of personal information to third parties for direct marketing purposes. We do not make such disclosures.

7.4 How to Exercise All Your Rights

Three easy ways:

1. In the App — Settings → Privacy & Data → Your Rights
2. By Email — privacy@[healthapp].com (with subject line "Privacy Rights Request")
3. By Mail — [Full company mailing address]

We'll verify your identity before processing requests to protect your security. We will never charge you for exercising your rights.

If we decline a request: We'll explain why in writing, and tell you how to appeal or complain to a regulator.

---

8. Children's Privacy {#childrens-privacy}

[HealthApp Name] is not intended for children under 16 years of age (or under 13 for US users under COPPA).

• We do not knowingly collect personal information from children below these age thresholds
• If a parent or guardian believes their child has provided us with personal information, please contact us immediately at privacy@[healthapp].com
• We will promptly delete any data found to have been collected from children below the applicable age threshold
• If you are a healthcare provider seeking a version of this app for pediatric patients, please contact us directly to discuss appropriate safeguards

For users aged 13-17 (US) or 16-17 (EU):

• Additional consent protections apply
• Parental or guardian consent may be required for certain features
• Some data uses are restricted for minor users

---

9. International Data Transfers {#international-transfers}

Our servers are primarily located in [primary jurisdiction]. If you use our app from outside this location, your data may be transferred internationally.

For EU/EEA Users

When we transfer your data outside the EU/EEA, we use these protections:

Mechanism	Description
Standard Contractual Clauses (SCCs)	EU-approved contract terms that protect your data in transit
Adequacy Decisions	We use providers in countries the EU has deemed adequately protective
Binding Corporate Rules	Internal policies ensuring data protection across our operations

For UK Users

Post-Brexit UK data transfers are protected through International Data Transfer Agreements (IDTAs) or UK-approved SCCs.

For All Users

You can request a copy of the specific safeguards we use for any transfer by emailing our DPO at dpo@[healthapp].com.

---

10. How Long We Keep Your Data {#data-retention}

We keep your data only as long as we genuinely need it.

Data Type	How Long We Keep It	Why
Active account health data	For the life of your account	Needed to provide the service
Deleted account data	30 days after deletion request	Allows account recovery if deletion was accidental
Backup copies	Up to 90 days after deletion	Technical necessity; then permanently purged
Financial records	7 years	Legal and tax requirements
Security logs	12 months	Security monitoring and incident investigation
Anonymized research data	Indefinitely (it's not linked to you)	Scientific value; cannot identify you
Legal hold data	Duration of legal proceedings	Legal obligation
Customer support records	2 years from resolution	Quality assurance and dispute resolution

What "deleted" actually means: When you delete your account, we begin a secure deletion process. Within 30 days, your identifiable data is removed from our live systems. Within 90 days, it's removed from backups. After that, it's gone — we cannot recover it.

---

11. Cookies and Tracking Technologies {#cookies}

In the Mobile App

Our mobile app uses similar technologies to cookies:

Technology	Purpose	Can You Opt Out?
Session tokens	Keeping you logged in securely	No — essential for security
Local storage	Saving your preferences	Limited — disabling may affect functionality
Crash reporting SDKs	Detecting and fixing app crashes	Yes — in Settings → Privacy
Analytics SDKs	Understanding app usage (anonymized)	Yes — in Settings → Privacy → Analytics

On Our Website

Our website uses:

Cookie Type	Purpose	Duration	Opt Out
Essential	Website security and function	Session	Cannot opt out
Analytics	Understanding website usage	12 months	Via cookie banner
Preferences	Remembering your settings	12 months	Via cookie banner

We do not use advertising or tracking cookies. Third-party cookies for advertising purposes are not permitted on our platform.

You can manage cookie preferences at any time using the "Cookie Settings" link in our website footer.

---

12. Changes to This Policy {#policy-changes}

Health privacy law evolves, and so do we. When we update this policy:

For minor changes (e.g., clarifications, typo corrections):

• We'll update the "Last Updated" date at the top
• A summary of changes will be posted in the app

For significant changes (e.g., new data uses, new sharing practices):

• We'll send you an email notification at least 30 days before changes take effect
• We'll show a prominent in-app notification
• Where required, we'll ask for your renewed consent
• Previous versions of this policy will remain available at [URL]

You always have the option to delete your account if you don't agree with updated terms.

---

13. Legal Compliance Details {#legal-compliance}

This section provides more detailed legal information for those who want it.

GDPR Compliance Summary

Requirement	How We Comply
Lawful basis for processing	Consent (Art. 6(1)(a)); Contract (Art. 6(1)(b)); Legal Obligation (Art. 6(1)(c)); Legitimate Interests (Art. 6(1)(f))
Explicit consent for health data	Collected separately at onboarding and for each health feature (Art. 9(2)(a))
Data minimization	We collect only what's necessary (Art. 5(1)(c))
Purpose limitation	Data used only for stated purposes (Art. 5(1)(b))
Data Protection Officer	Appointed; contact details above
Privacy by Design	Incorporated into all new features
Data Protection Impact Assessment (DPIA)	Conducted for all high-risk processing
Records of processing activities	Maintained as required by Art. 30

HIPAA Compliance Summary

Requirement	How We Comply
Notice of Privacy Practices	This document serves as our Notice
Business Associate Agreements	Signed with all vendors who access PHI
Minimum Necessary Standard	Only minimum necessary PHI accessed for each purpose
Administrative Safeguards	Policies, training, access management
Physical Safeguards	Secure data center access controls
Technical Safeguards	Encryption, access controls, audit logs
Breach Notification	Procedures in place; notifications per 45 CFR §164.400-414

Supervisory Authority Contact Information

EU Users: You have the right to lodge a complaint with your national Data Protection Authority. Find yours at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

UK Users: Information Commissioner's Office (ICO)

• Website: www.ico.org.uk
• Helpline: 0303 123 1113

US Users (HIPAA complaints): HHS Office for Civil Rights

• Website: www.hhs.gov/ocr
• Phone: 1-800-368-1019

---

14. Contact Us {#contact-us}

We genuinely want to hear from you about privacy. Here's how to reach the right person:

For General Privacy Questions

📧 privacy@[healthapp].com 📬 [Physical address] ⏱️ We respond within 3 business days

For GDPR-Specific Requests

📧 dpo@[healthapp].com Our Data Protection Officer: [Name] 📬 [DPO's address or same company address]

For HIPAA Requests

📧 hipaa@[healthapp].com Our HIPAA Privacy Officer: [Name] 📬 [Physical address] 📞 [Phone number]

For Security Vulnerabilities

If you've found a security issue, please report it responsibly: 📧 security@[healthapp].com 🔑 PGP Key available at [URL]

---

Glossary of Terms

We've tried to avoid jargon, but some terms are unavoidable. Here's what they mean in plain language:

Term	Plain Language Explanation
Biometric data	Measurements from your body — heart rate, sleep patterns, steps, etc.
GDPR	Europe's main privacy law — General Data Protection Regulation
HIPAA	US law protecting medical/health information — Health Insurance Portability and Accountability Act
Data Controller	The company responsible for deciding how your data is used (us)
Data Processor	A company that handles data on the controller's behalf (our vendors)
PHI	Protected Health Information — health data protected by HIPAA
Standard Contractual Clauses (SCCs)	Legal contracts approved by the EU to protect your data when it moves internationally
BAA	Business Associate Agreement — a contract our vendors sign promising to protect your health data
Anonymized data	Data that has had identifying information removed so it can't be linked back to you
Pseudonymized data	Data where your name is replaced with a code — still technically personal data
Legitimate interest	A legal basis for using data when we have a genuine business reason that doesn't override your rights
DPO	Data Protection Officer — our designated expert responsible for privacy compliance
TLS	Transport Layer Security — the technology that encrypts data as it travels across the internet
AES-256	A strong encryption standard used to protect stored data

---

This Privacy Policy was last reviewed by our legal team and Data Protection Officer on [Date]. The next scheduled review is [Date].

This policy is available in [other languages] at [URL]. If there is any conflict between translated versions, the English version prevails.

---

[HealthApp Name] | [Company Legal Name] | [Registration Number] | [Address]

If you've read this far, thank you. Your privacy genuinely matters to us, and we're committed to earning your trust every day.

Privacy Policy for HealthTrack App

Effective Date: [Insert Date]

At HealthTrack, we are committed to protecting your privacy, especially when it comes to sensitive biometric data like heart rate, steps, sleep patterns, and other health metrics collected through our mobile app. This Privacy Policy explains how we collect, use, share, and protect your information in compliance with GDPR (for users in the European Economic Area) and HIPAA (for protected health information in the US). We use plain language to make this easy to understand. By using the HealthTrack app, you agree to these practices. If you do not agree, please do not use the app.[1][2][3]

1. Who We Are

HealthTrack is a mobile app that helps you track and monitor your health through biometric data from your device's sensors (e.g., heart rate monitor, accelerometer). We act as a data controller under GDPR, meaning we decide how and why your data is processed. For US users, we are a covered entity under HIPAA when handling protected health information (PHI), such as biometric readings linked to your identity.[1][3][4]

2. Types of Information We Collect

We collect only the data needed to provide our services (data minimization principle under GDPR). Here's what we may collect:

• Personal Information: Name, email, phone number, date of birth, and login credentials you provide during registration.[2][3]
• Biometric and Health Data (Sensitive PHI): Heart rate, blood pressure, steps, sleep data, GPS location for activity tracking (if permitted). This is collected via your device's sensors or linked fitness apps like Apple Health or Google Fit.[1][3][4]
• Device and Usage Data: IP address, device ID, operating system, app usage logs, crash reports, and approximate location (for analytics only).[1][2][3]
• Automatically Collected Data: Traffic data, session duration, and interactions within the app.[2]

We do not collect financial data, camera access, or contacts unless you explicitly link them for health syncing, and even then, only with your consent.[3][4]

Note: Providing biometric data is voluntary but required for core features like health tracking. Without it, some functions may be limited.[1][6]

3. How We Collect Your Information

• Directly from You: During signup, profile setup, or manual input.[2]
• Automatically: Via app sensors, cookies/trackers, or device permissions (e.g., location, health kit).[1][3]
• From Third Parties: With your permission, from Apple Health, Google Fit, or healthcare providers for syncing.[1]

We ask for explicit consent via on-screen prompts before accessing sensitive data like biometrics or location. You can withdraw consent anytime in app settings.[3][4]

4. How We Use Your Information

We use your data only for legitimate purposes, compatible with your consent or legal obligations:

• To provide and improve app features (e.g., personalized health insights).[3]
• To monitor your health trends and share with your doctors (if you authorize).[1]
• For analytics, bug fixes, and service development (using anonymized data).[2][5]
• To comply with legal requests or protect safety.[5]

Under GDPR, processing biometric data requires your explicit consent or is necessary for healthcare purposes. Under HIPAA, PHI is used only for treatment, payment, or operations (TPO), or as permitted by your authorization.[4]

5. How We Share Your Information

We do not sell your data. Sharing happens only in these cases:

• With Your Consent: To linked doctors, fitness apps, or family members you approve.[1]
• Service Providers: Encrypted cloud storage (e.g., AWS with HIPAA BAA), analytics tools (anonymized data only). They are bound by strict contracts.[2]
• Healthcare Providers: PHI shared only for treatment with your explicit authorization under HIPAA.[1][4]
• Legal Requirements: To authorities if required (e.g., court order), minimizing disclosure.[5]
• Business Transfers: In a merger, your data transfers with notice.[5]

For EU users, international transfers use Standard Contractual Clauses or adequacy decisions under GDPR. No sharing with advertisers.[3]

6. Data Security and Retention

We protect your data with:

• Encryption: In transit (TLS) and at rest.[2]
• Access Controls: Only authorized staff access PHI on a need-to-know basis.[1][2]
• Privacy by Design: Anonymization where possible, regular audits.[4]

We retain data only as long as needed:

• Biometric/PHI: For your active account duration + 6 years post-deletion (HIPAA minimum) or legal requirements.
• Usage data: 12-24 months. After that, we securely delete or anonymize it.[1][2]

7. Your Rights and Choices (GDPR and HIPAA)

You have strong control over your data:

Right	Description	How to Exercise
Access	Request a copy of your data.	App settings or email privacy@healthtrack.com
Rectification	Correct inaccurate data.	Profile edit.
Erasure (Right to be Forgotten)	Delete your data (subject to legal holds).	Account deletion in settings.
Restriction/Objection	Limit processing (e.g., no marketing).	Consent settings.
Portability	Export data in machine-readable format.	Download tool in app.
Withdraw Consent	Stop processing at any time.	Settings toggle.
HIPAA Rights	Accounting of disclosures, amendment requests.	Contact us.

We respond to requests within 30 days (GDPR) or as per HIPAA. No fee unless excessive. EU users can complain to your data protection authority.[3][4]

To opt out of non-essential tracking, adjust device permissions or app settings.[1]

8. Children's Privacy

Our app is not for children under 13 (US) or 16 (EU). We do not knowingly collect their data. Parents can contact us to delete any.[3][8]

9. International Users

Data may be stored in the US (HIPAA-compliant servers). EU users: See GDPR safeguards above.[3][5]

10. Changes to This Policy

We may update this policy. We'll notify you via app/email for material changes. Continued use means acceptance.[2]

Contact Us

Questions? Email privacy@healthtrack.com or write to HealthTrack, [Address]. For HIPAA complaints, contact the US Dept. of Health & Human Services.[1][4]

This policy ensures explicit consent for biometrics, clear disclosures, and robust protections as required by GDPR and HIPAA. [3][4]