Privacy Policy — Healthcove

Healthcove is built so your health data stays yours. There are no accounts, no analytics, no tracking, and no cloud. Your data never leaves your devices unless you export a file or sync it directly to your own device over your local network.

The short version: We don't collect, store, or transmit any of your data. Everything happens on your device. We never see your health data — not even when you sync it between your devices.

Information the app accesses

  • Health & fitness data (Apple Health / HealthKit) — read on your device, so the app can show, chart, export, sync, and automate it at your direction. Healthcove never transmits your health data to us. It writes to Apple Health in exactly one case: when you import a health file on iPhone and turn on “Also add to Apple Health”, it saves those imported records into Health. Nothing else in the app writes to or changes your Health data.
  • Calendar (optional) — only if you turn on the Calendar automation, to create workout events in a calendar you choose.
  • Files and folders (optional) — only if you import a file you choose, or turn on a file-export automation, which saves export files into a folder you pick. Access is limited to that file or folder.
  • Local network (optional) — while you pair or sync devices, and while the optional Local API / assistant server is switched on, to connect with your other device or with clients on your own Wi-Fi over an encrypted (TLS) connection.

Information we collect

None. Healthcove contains no analytics, no crash-reporting SDKs, no advertising frameworks, and no third-party trackers. No personal data is collected, stored, or sent to the developer or anyone else. The App Store privacy label for this app is Data Not Collected.

When you contact us

If you email us or use the support form on this website, we receive the information you choose to send — your email address and message, plus a name or device detail if you add them — and use it solely to reply to you. We don't store it in a database, use it for marketing, or share it with anyone. The app itself still collects nothing.

Where your data goes

  • Nowhere, by default. All processing happens on your device.
  • Files you export are created locally and shared only through the system share sheet, at your direction.
  • Device-to-device sync is encrypted with TLS and certificate pinning, runs directly between your own devices on your local network, and never passes through any server — including ours.
  • Automations you configure (REST API, MQTT, Home Assistant, Calendar, file export to a folder) send data to endpoints you specify and control. We never see that data.
  • AI assistants, if you choose to use one. The Markdown export and Copy for AI put text on your clipboard or in a file; where you paste it is up to you, and that service's privacy policy applies to it. Healthcove itself contains no AI features and never contacts any AI service. Pro users can also switch on a local server that lets an assistant you run connect to your data using the Model Context Protocol: on your Mac it reads the data already synced there, and on iPhone it answers only over your local network to clients that present your access token. It is off by default, serves nothing to us, and stops when you turn it off.

Health data and advertising

Your health data is never used for advertising, marketing, or data mining, and is never shared with third parties (Apple App Store Guideline 5.1.3).

In-app purchases

The optional 7-day free trial and the one-time "Pro" purchase are both processed by Apple. We do not receive or store your payment information, and we cannot see who has purchased. Apple's privacy policy governs payment processing.

Data security

  • Pairing tokens, encryption keys, automation secrets, and Local API access tokens are stored in the device Keychain (device-only; never synced to iCloud Keychain). Access tokens can be revoked at any time in Settings.
  • An optional Face ID / Touch ID lock can protect access to the app.
  • All device-to-device transfers use TLS 1.2+ with pinned certificates.

Children's privacy

Healthcove is not directed to children under 13, and we do not knowingly collect data from anyone — because we don't collect data at all.

Your control

You control all of your data. Deleting the app removes its local data from your device. You can revoke or narrow Apple Health access at any time in the Health app or iOS Settings; on iOS 27 you can also limit sharing to recent history only, and the app tells you when that is in effect.

Changes to this policy

If this policy changes, we'll update the date above and note material changes in the app's release notes.

Contact

Questions about your privacy? Email healthcove@timetapapp.com.