Privacy notice

Updated September 9, 2026. This notice describes the current private, single-owner HealthCollector installation.

Operator and contact

Fabian Pieringer. Privacy and support: fabian.pieringer@googlemail.com.

Information processed

With your authorization, HealthCollector reads Fitbit information through Google Health, including available sleep, heart rate, activity, exercise and other wellness records covered by the permissions you grant. It stores provider identifiers, authorization scopes and encrypted connection credentials to keep that connection working.

The iPhone app may also import supported WHOOP-labelled Apple Health records when permitted. Manually supplied WHOOP and Withings exports are used separately for personal research comparisons. Check-ins, logged activities, notes and optional Coach conversations are stored when you submit them.

Why and where information is used

The private backend stores and processes this information to synchronize devices, display your history, calculate wellness summaries and compare measurements. The app keeps a local copy of synchronized information. The public website is hosted separately on a VPS and does not expose the health dashboard or collect health uploads.

Optional AI analysis

AI-assisted Coach and analysis features use selected wellness context through the backend’s authenticated OpenAI Codex connection after separate in-app consent. That selected context is sent to OpenAI for processing. Provider access and refresh tokens are not included in that context. OpenAI’s handling is subject to the connected account’s applicable service terms and settings.

Your controls

You can disconnect a provider and revoke its authorization through Google. Disconnecting stops future access; it does not by itself delete previously imported records. HealthCollector includes account export and deletion controls. Separately created research exports, sealed comparison snapshots and operational backups are managed by the operator and must also be considered when requesting deletion.

Storage and access

Health records remain in the private installation until removed by its operator or the applicable deletion controls. Encrypted provider credentials and authenticated sessions protect access. Health data is not published on this website, sold, or used here for advertising.

Website requests

This site uses no analytics scripts, advertising, third-party fonts or application cookies. Its hosting and network services necessarily handle connection information such as IP addresses and request details to deliver and secure the pages.

Changes and questions

The notice will be updated when this installation’s data practices change. Contact the operator above with questions or requests about access, correction, export or deletion.