Privacy policy

healthd · last updated 15 October 2026

healthd is a personal, self-hosted health dashboard used by one person: the person who runs it. This policy explains what it accesses and what it does with that data.

Data accessed

With the account owner's consent, healthd requests these read-only Google Health API scopes:

• googlehealth.activity_and_fitness.readonly: steps, distance, calories, active minutes and exercise sessions;
• googlehealth.health_metrics_and_measurements.readonly: heart rate, resting heart rate, heart rate variability, SpO2, respiratory rate, weight and body fat;
• googlehealth.sleep.readonly: sleep sessions and stages.

healthd requests no write access and cannot change anything in the Google account.

How it is used

The data is used only to show the account owner their own health trends on their own dashboard. healthd does not use it for advertising, does not sell it, does not use it to determine creditworthiness or for lending, and does not use it to train AI or machine-learning models.

Storage

Data and the OAuth refresh token are stored in a database on the owner's private home server, which is not reachable from the public internet. No copy is sent to any third-party server. The owner's private backups of that server may include the database.

Sharing

healthd does not share, transfer or disclose Google user data to anyone. No people other than the account owner have access to it.

Limited Use

healthd's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

Data is kept until the owner deletes it. Access can be revoked at any time at myaccount.google.com/permissions; after that, healthd can no longer read new data. Deleting the database removes everything healthd stored.

Contact

Questions about this policy: new.can9404@fastmail.com.