Privacy policy
Effective October 4, 2026. This policy covers the Health Score mobile app and the services at health-score.app.
Draft for legal review. This text describes what the product actually does today and is to be reviewed by the operator's counsel before launch.
1. Who we are
Health Score is operated by the company named in the app stores (the "Operator"). Contact: privacy@health-score.app.
2. Health data we read, and why
With your permission, the app reads these data types from Apple Health (iOS) or Health Connect (Android):
| Data | Used for |
|---|---|
| Steps (daily totals) | Your daily Steps score and credits |
| Workouts (type, duration, heart rate during the workout, active calories) | Your daily Workout score and credits |
| Sleep sessions (duration and stages) | Your daily Sleep score and credits |
| Resting heart rate | Your daily Resting Heart Rate score and credits |
We read only what is needed to compute the score. We do not read location, nutrition, reproductive health, body measurements or any other category. Entries typed by hand in a health app are ignored: only device-recorded data counts, which is part of how credits are kept fair.
3. Other data
- Account: e-mail address, first name (optional), year of birth (optional, used only for heart-rate zones), time zone, and the sign-in credential (a password hash, or your Apple or Google identifier when you use those buttons).
- Device: platform, an installation identifier, a push-notification token if you allow notifications, and device attestation data (Apple App Attest or Google Play Integrity) used to confirm the app on your device is genuine.
- Usage of the service: your scores, credits, coupons and redemptions, and technical logs needed to run the service.
4. How we use the data
- To compute your daily scores, consistency, streak and credits.
- To issue and validate coupons at partner businesses.
- To send notices about your credits and your account (for example, credits about to expire), if you allow notifications.
- To detect and prevent fraud, including implausible values and tampered apps.
- To comply with legal obligations.
We do not sell your data and we do not use health data for advertising.
5. Sharing
- Partner businesses see only what is needed to honor a coupon: the coupon code, the offer and whether it is valid. They never see your health data or your score.
- Service providers that host the service and deliver push notifications process data on our behalf under contract.
- Apple and Google receive attestation requests from the app to confirm device integrity; this does not include your health data.
- Authorities, when required by law.
6. Retention
Raw health samples are deleted 90 days after they are received; the daily results computed from them are kept while your account exists. Credit and coupon records are kept as required for accounting. When you delete your account, your health data, scores, devices and sessions are deleted and the account record is anonymised after a 30-day grace period during which you can change your mind.
7. Your choices and rights
- You can revoke health permissions at any time in Apple Health or Health Connect; the app stops reading and your score is based on what remains.
- You can export your data and request deletion from the app (Profile) or as described at Delete your account.
- Depending on where you live, you may have rights to access, correct, delete or port your data, and to object to or restrict processing. Write to privacy@health-score.app.
8. Security
Data travels encrypted (TLS) and is stored on servers with access restricted to the people who operate the service. Sign-in uses short-lived tokens. Sensitive operations require proof that the app on your device is genuine.
9. Children
The service is not directed to children under 16, and we do not knowingly collect their data.
10. Changes
We will post changes on this page and, for material changes, notify you in the app.