My Health Vault
Privacy policy
Effective 13 August 2026
What the app does
My Health Vault is a private health dashboard, food diary and report tool. It has no account system, advertising, analytics or developer-operated backend. It is not a medical device and does not diagnose conditions or recommend treatment.
Health information
With your separate permission for each type, the Android app reads weight, resting heart rate, heart rate variability, steps, active calories, exercise sessions, sleep and nutrition from Health Connect. The app never writes to Health Connect. Imported information is encrypted and stored in the app's private storage on this device.
Optional network features
The core app works without an account or cloud service. If you turn on AI features and add your own Anthropic API key, the meal words or coach question you submit—and for coaching only a bounded summary of averages, streaks and targets—are sent directly to Anthropic. Raw records, dates, notes, meal history and health-source identifiers are not sent. If you enable online barcode lookup, only the product barcode is sent to Open Food Facts.
Camera, microphone and device authentication
The camera is used to scan barcodes on the device; images are not stored or uploaded. Voice entry asks Android for on-device speech recognition; Android's speech service controls availability and processing. This app itself does not store or upload audio. Fingerprint, face or device-passcode checks are performed by Android, and the app receives only whether the check succeeded.
Backups and reports
Nothing leaves the device unless you choose an action that does so. A vault backup is encrypted with the passphrase shown to you. A GP report is a readable PDF after you authenticate, accept the warning and choose where to share it. Files you save or share are then controlled by the destination you selected.
Retention and deletion
Information remains in the encrypted local vault until you remove imported records or choose Delete local data. Complete deletion destroys the device-held encryption key before removing the encrypted file. It does not delete originals held by Health Connect or copies you previously exported.
Security and control
The vault uses AES-256-GCM encryption with a key protected by Android Keystore. Android backup is disabled, cleartext network traffic is disabled, and sensitive app screens block ordinary screenshots and recordings. You can grant or revoke each Health Connect permission at any time.
Children and contact
My Health Vault is intended for adults and is not directed to children. For privacy questions or support, email myhealthvaultsupport@gmail.com.