Privacy Policy

1. Information we collect

Account and profile

• Your name, email address, and whether you are a patient or a provider.
• Profile details you choose to add, such as date of birth, gender and preferred language.
• How you sign in: email and password, Google, or Sign in with Apple. Passwords are handled by our sign-in service (Google Cloud Identity Platform). We do not store your password.
• For providers, two-factor authentication settings and recovery codes.

Health and wellness information you enter

• Medications and medication schedules.
• Allergies and immunizations, including immunization documents you upload.
• Measurements, such as weight and height, and daily routine check-ins.
• Journal entries.
• Nutrition records: food log entries, planned and saved meals, recipes, favorite foods, and nutrition targets.
• Fitness records: workouts, routines, your fitness profile, and progress photos.

Information your providers add

A provider you are connected with can add information to your record, such as allergies, immunizations, medications they assign to you, clinical notes and suggestions for nutrients to track.

Messages, posts and comments

• Chat messages you send to providers or other participants in a conversation.
• Workout posts, food photos and comments you add to your records.

Photos, videos and files

Progress photos, food photos, recipe images, workout photos and videos, and immunization documents. These are stored privately and can be opened only by you, and by providers you have shared the related category with.

Camera

The app uses your camera to scan food barcodes, and to take photos when you choose to. Barcode scanning happens on your device. The barcode number is then looked up in the Open Food Facts database (see Service providers).

Provider verification

Providers who apply to use HealthyWays give us:

• Their National Provider Identifier (NPI), provider type, and practice details.
• Licence or certification details: type, issuing state, number and expiry date.
• An identity check with our verification provider, Didit (see Service providers). Didit runs the check. We receive and keep the result: its status, whether the name matched, and the type and issuing country of the document used. We do not receive copies of identity documents from Didit.
• Signed agreements, such as our Terms of Service and the Business Associate Agreement. For each signature we record the document version, a fingerprint of its text, the signer’s email, the time, and the device and network address the signature came from.

Technical and security information

• A push notification token for your device, if you allow notifications.
• Your device platform and app version, used to keep the app compatible and secure.
• Security records, such as sign-in events and two-factor changes.
• An access log. Each time someone opens health information in a patient’s record, we record who opened it, when, and what kind of information it was, along with device and network details. Patients can see the log for their own records in the app.

We do not collect your precise location, your contacts, or your browsing activity in other apps or on other websites.

2. Apple Health

On iPhone, you can choose to connect HealthyWays to Apple Health. If you allow it:

• What we read: steps, active energy burned, heart rate, weight, height and workouts.
• Why: to show your activity, body measurements and workout history on your Fitness dashboard in the app.
• Where it goes: data read from Apple Health is shown in the app on your device. It is not sent to or stored on HealthyWays servers, and it is not shared with your providers.
• What we may write: the app asks permission to save workouts and active energy to Apple Health. Anything saved there stays in Apple Health, under your control.

We do not use information from Apple Health for advertising, marketing or data mining. We do not sell it or share it with third parties. We do not store it in iCloud. You can change or withdraw access at any time in the iPhone Settings app, under Health › Data Access & Devices › HealthyWays.

The Android app does not connect to Health Connect or other device health data.

3. How we use information

• To provide the app: your records, reminders, the Fitness and Nutrition features, and messaging.
• To share information with the providers you choose, and to show you who has opened your records.
• To verify that providers are who they say they are, and are licensed or certified, before they can see patient information.
• To keep accounts secure: sign-in, two-factor authentication, preventing misuse, and investigating security issues.
• To send notifications. Push notifications use generic text and do not include your health details. Medication reminders are scheduled on your device.
• To answer support requests, and to meet our legal obligations.

We do not sell your information, use it for advertising, or build advertising profiles.

4. Sharing with your providers

HealthyWays is built so that you decide what each provider can see.

• A provider can see your health information only after you accept a connection with them.
• You choose what each provider can see, by category: meals, activity, weight, journal, routines, measurements, allergies, immunizations and medications. For some categories you can share only the records you select. Sharing your journal requires an extra confirmation.
• A connected provider sees a limited profile: your name, email, language, gender and age in years. They do not see your date of birth, and they do not see who your other providers are.
• Providers must be verified, sign our Terms of Service and a Business Associate Agreement, and use two-factor authentication before they can see any patient information.
• You can stop sharing a category, or end a connection, at any time. The provider’s access stops immediately.
• Messages you send in a conversation can be read by its participants.

5. Service providers

We use these companies to run HealthyWays. They process information only to provide their service to us.

6. Other disclosures

We do not share your information with anyone else unless you ask us to, or the law requires it. For example, we may share information to respond to valid legal process, or to protect someone’s safety.

7. Security

• Information is encrypted in transit (HTTPS) and encrypted at rest in Google Cloud, with encryption keys managed in Google Cloud Key Management Service.
• The database is reachable only from our private network, never from the public internet.
• Every request is checked by our servers against your sharing choices. Providers and staff must use two-factor authentication.
• Staff sign in through a separate system, and access is limited to what each role needs.
• Access to health information is logged.

No system is perfectly secure, but we work to protect your information and to fix problems quickly.

8. Retention and deletion

We keep your information while your account is open. You can delete your account at any time, from the app or by request (see Delete your account).

What happens when you delete your account

• Your account is locked at once and you are signed out on every device.
• Connections with providers end, and their access to your information stops.
• We delete your profile, your health and wellness records, your messages, posts and comments, your photos, videos and documents, and your sign-in account. This normally finishes within minutes.
• For providers, we also delete verification records, signed agreement records and the clinical notes they wrote.

What we keep

• Access log entries. To keep a reliable record of who accessed health information, we keep the access log. Your identity is replaced with a random identifier, so the entries no longer identify you.
• Records in other people’s accounts. If you are a provider, medications you assigned to a patient stay in the patient’s record, without your identity. If you are a patient, a provider’s notes about you are deleted with your account.
• Backups. Deleted information can remain in encrypted database backups for up to about 30 days, and deleted files can be recovered for up to 7 days, before they are permanently removed. We do not use backups to restore a deleted account.
• Information held by others. Data in Apple Health stays in Apple Health. Information a provider gave Didit during an identity check is kept by Didit under its own policy.

9. Your choices and rights

• See and change your information: most of your information can be viewed and edited in the app.
• Control sharing: change what each provider can see, or end a connection, at any time.
• See who accessed your records: open your access log in the app.
• Notifications and Apple Health: turn these on or off in your device settings.
• Delete your account: see Delete your account.

Depending on where you live, you may have other rights over your information, such as getting a copy of it. To make a request, email bilal@healthywaysapp.com from the address registered to your account. We may need to confirm your identity first.

10. Children

HealthyWays is not intended for children, and we do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

If we change this policy, we will post the new version here and update the effective date. If a change significantly affects how we use your information, we will tell you in the app before it takes effect.

12. Contact us