Privacy policy
Last updated: 2026-10-01
Health OS is a personal health and fitness app run by TechFi Ventures LLC. This page says what data the app holds, why, and who can see it.
Data we collect
- Account data. Your name and email from Google sign-in, a user ID, and sign-in records. Health OS does not store a password.
- Data you enter or import. Meals, workouts, targets, goals, numbers you type in, MyFitnessPal files you import, and files you add to the Health Record Vault.
- Data from devices you connect. From Withings: body measurements such as weight and body composition. From WHOOP: recovery, sleep, cycles, workouts, profile, and body measurements. Health OS asks each provider for read access to the data types listed here. You approve or decline on the provider's page.
- From Google Calendar (read-only): for events from 7 days ago to 14 days ahead, the title (up to 200 characters), start, end, all-day flag, and busy flag. Not location, attendees, description, or links.
- Coach chats. The messages you send to Coach and its replies. Health OS saves them. Coach can also save meals and workouts you tell it you ate or did.
How we use it
We use your data to run Health OS for you: dashboards, trends, logs, syncing your connected accounts, and Coach answers. We also use it to keep the service secure and to fix problems. We do not sell your data. We do not use it for advertising or tracking. We do not use it to train AI models.
Who can see it
- You. Each account can read only its own rows. The database enforces this.
- TechFi Ventures LLC can access your data only to run, fix, or secure Health OS, or when the law requires it.
- Service providers. Vercel hosts the app. Supabase stores your data and files. OpenRouter carries Coach requests to AI model providers.
- AI model providers, when you use Coach and say yes to Coach sharing. Health OS sends your recent chat messages and a short summary of your data to OpenRouter, which sends it to an AI model provider that Health OS chooses. The summary holds your latest readings with their source and age, 7-day averages, today's food against your targets, the meals you saved in your Meal Library (name, restaurant, serving, calories, macros and whether they were checked), the supplements you listed in your Supplement Drawer (name, brand, dose, timing, note), your recent workouts, your calendar events for the next 2 days, the body-composition and metabolic numbers you checked from Vault files, and where each target came from. It does not hold your email or database IDs. When you press Read with Coach on a Vault file, Health OS sends that one file, without its file name, the same way. Numbers read from a file count only after you check them. When you log a branded or restaurant food, or ask Coach to check a Meal Library entry, Coach may look up its nutrition label on the web. OpenRouter runs that search with Exa Labs, and only the food, brand and restaurant names are searched.
- Withings, WHOOP, and Google. They already hold the data you connect. Health OS reads it. It does not write to those accounts.
How we protect it
- Provider access tokens are encrypted before they are stored.
- All traffic uses HTTPS.
- Row-level security limits every table to the owner of the row.
- Vault files are in private storage. They open only through links that expire after 120 seconds. Each open is logged.
Your choices
- Disconnect Withings or WHOOP at any time on the Integrations page. This tells the provider and deletes the stored tokens. Readings already imported stay in your account. To delete them, email us at the address below.
- Disconnect Google Calendar to delete all stored events and tokens.
- Delete meals, workouts, and Vault files in the app.
- To get a copy of your data or delete your account and all data, email us. We answer within 45 days. We delete within 30 days after we confirm it is you. If we say no, you can appeal by replying to our answer.
Not medical advice
Health OS is not a medical device. It does not diagnose, treat, cure, or prevent any medical condition. Ask a doctor or other health professional before you make medical decisions.
Changes and contact
We will change the date at the top of this page when this policy changes. Questions: admin@techfiventures.com.