Privacy Policy

Who we are

HealthOS (“we”, “us”) is operated by Tarek Junied, Pontstraße 117, 52062 Aachen, Germany. Tarek Junied is the controller responsible for your personal data under the EU General Data Protection Regulation (GDPR).

For anything about your data, including the requests described below, email support@healthosx.com. This is also the contact for privacy questions.

The short version

• We never sell your data. We do not share it with data brokers, advertisers or insurers, and we do not use it for advertising.
• Health and genetic data need your consent. We only process them for features you choose to use, and you can withdraw consent at any time.
• The free tools do as much as possible in your browser. The snore tool never uploads your audio, and the DNA tool reads your file on your device. The blood tool sends your report away only to read it, and keeps it only if you tick a box asking us to.
• You can delete your data. Delete your account in the app, or email us and we will delete what we hold about you.

The HealthOS app and app.healthosx.com

When you create an account, we store your email address, your name if you give it, and a sign-in identifier from Apple if you use Sign in with Apple. One-time sign-in codes are stored only in hashed form and expire quickly.

HealthOS stores your data on your device first and syncs it to our servers, so it is the same on your phone and on the web. What we store depends on the features you use. It can include glucose readings, meals and meal photos, lab results, DNA results, activity and heart data, profile details such as age, sex, height and weight, assistant conversations, and short sound clips your phone detects overnight (such as snoring) if you turn on sleep sound tracking.

Your data is encrypted in transit. It is not end-to-end encrypted: our servers can read it so they can sync it, compute your scores and run the features you ask for. Only the people who run HealthOS can access those servers, and only to operate and fix the service.

AI features

Some features use outside AI providers. They run only when you use the feature, and only after you agree in the app. When they run, the data described here is sent to that provider:

• Each AI job has a first provider and backups. If the first provider is unavailable (for example it is down or overloaded), the same data goes to the next one in the list below instead. Only one of them writes each answer.
• Meal photos go to OpenAI first. When you log a meal by photo, the photo and any description you type are sent to OpenAI’s API to estimate its nutrition. The backups are Anthropic’s Claude API, then Google’s Gemini API.
• Short AI reads go to OpenAI first. The short written reads on a meal or workout, and suggested meal names and emojis, send that meal or session and the glucose readings around it to OpenAI’s API. The backups are Anthropic’s Claude API, then Google’s Gemini API.
• Lab reports go to Anthropic first. When you upload a lab report, in the app or to the assistant, the whole document is sent to Anthropic’s Claude API to extract your lab values. That includes everything printed on it, such as your name and your results. The backups are Google’s Gemini API (the paid tier), then OpenAI’s API.
• The HealthOS assistant uses Anthropic only. When you ask the assistant (or Ask your DNA) a question, your question and the health data needed to answer it are sent to Anthropic’s Claude API. If the assistant reads a lab report or meal photo you attached, that file is handled as described above.
• Insight cards use Anthropic. To look for patterns in your data for your insight cards, a day-by-day table of your health data is sent to Anthropic’s Claude API, which analyses it and writes the cards.
• The assistant can search the web. To answer some questions, the assistant asks Anthropic to run a web search. The search terms are written from your question, so they can contain health details. Anthropic runs the search and sends the results back to us.
• The providers act on our behalf. Anthropic, OpenAI and Google process this data as our service providers under their API terms. Those terms do not allow them to use it to train their models. For Google, we use the paid Gemini API, whose terms exclude training.
• Translation never sees your data. We use Alibaba’s Qwen AI to translate the app’s own text into Arabic. None of your data is sent to it.
• You can switch these off at any time. In the app, go to Account → AI data sharing. Nothing more is sent from then on. Switching a feature off does not undo processing that has already happened.

Apple Health

If you allow it, the app reads data from Apple Health (HealthKit). We use it only to show your data and compute your insights. We never use it for advertising or marketing, never sell it, and never share it with third parties. The only exceptions are the AI features above, which you start yourself, and exports you make with your own API token.

Devices you connect

If you connect a Qingping (Cleargrass) air monitor, we store the access keys for your Qingping account and the readings its cloud sends us, such as temperature, humidity, CO₂ and fine dust.

Sharing with friends and family

• Circles. If you join a circle, its members see your first name, whether you showed up today and your streak. Your daily scores are shared only if you turn them on for that circle. Your DNA, blood results, glucose readings, weight and meals are never shown in a circle.
• Full view. You can give someone in a circle full view. That person can then see all your health data in HealthOS except your DNA. You choose each person, you can see when they last looked, and it ends when you switch it off or either of you leaves the circle.
• DNA family links. If you and a relative both accept a family link, HealthOS compares your DNA and shows each of you the results, for example how you are related and which stretches of DNA you share. Either of you can remove the link at any time.
• Share cards. When you share your DNA card, what you ticked (for example your ancestry regions) is written into the link itself, so anyone who has the link can see it. Our own analytics do not record it, but our hosting provider’s request logs can contain the full link.

Notifications

On the iPhone, notifications go through Apple and Expo. On the web, if you allow notifications, your browser gives us a push address and keys, which we store. Each web notification passes through your browser maker’s push service (such as Google, Mozilla or Apple) on its way to you.

Crash reports

When the HealthOS app or our servers hit an error, a report goes to Sentry, on servers in the EU (Germany). It contains the error, where it happened in our code, the device type and app version, and your account number. It does not include your email address, request contents, cookies or access tokens, and we do not attach your health data to it.

The free blood-test tool (/blood)

• Your report is read, then discarded. The file is sent to our server and passed to Anthropic’s Claude API to extract the numbers (if it is unavailable, to Google’s Gemini API, then OpenAI’s API). It is held in memory only while that happens. We do not save the file unless you tick the optional box below, and we never store your results or your answers to the questions.
• You agree first. Before you can upload, you tick a box to agree to this policy. Nothing is sent until you do.
• Keeping a copy is your choice. A second, optional box lets us keep a copy of your report and the markers read from it, to improve how reports are read. It is not linked to your name or email, and it is deleted after 12 months. If you want it deleted sooner, email us with the approximate upload date.
• Your results stay in your browser. They are saved in your browser’s local storage so you can compare later reports. Clearing your browser data deletes them.
• Ask your blood does not keep your chat. If you ask a question about your results (“Ask your blood”), your question, the earlier questions and answers of that chat, and the results shown on the page (including how they changed against earlier reports kept in your browser) are sent to Anthropic’s Claude API to write the answer. Nothing from the conversation or the report is stored. To limit free questions we count how many each IP address asked in the last 24 hours.
• “Keep my results” is your choice. If you tick the consent box and confirm a one-time code we email you, a HealthOS account is created for that email (or you are signed in to yours), the report on screen — and, if you tick the second box, the earlier reports kept in your browser — is stored in that account (Labs › Blood), and your next questions become conversations in the HealthOS assistant, which are stored in your account and handled as described for the assistant. You can delete the reports and the conversations at any time.
• Your email, if you give it. To see the full report, you enter your email. We store the email and a note that it came from the blood tool. Your results are not stored with it — unless you separately tick the box asking us to keep them for your HealthOS account, in which case we hold the markers, encrypted, only until you open the link we email you, and at most 24 hours. Opening the link puts them in your account and deletes the held copy.
• Older submissions. Before 18 September 2026, this tool kept a copy of uploaded reports and the extracted values to improve how reports are read. We have stopped doing that. Those records are being deleted. If you used the tool before then and want confirmation, email us.

The free snore tool (/snore)

• Your recording never leaves your device. The audio is analysed entirely in your browser. It is never uploaded to us or anyone else.
• Your nights stay in your browser. Your results are saved in your browser’s local storage so the tool can compare nights.
• Your email, if you give it. To see the full report, you enter your email. We store the email and a note that it came from the snore tool, and nothing about your sleep.

The free DNA tool (/dna)

• You agree first. Before you can choose your file, you tick a box to agree to this policy.
• Your file is read in your browser. Your report is computed on your device. The file itself is sent to us only if you choose to store it.
• Ancestry runs only with its own consent. It is the one analysis that runs on our server, and it never starts by itself. You first tick two boxes: your explicit consent for us to process and keep genetic data from your file for this, and that the file is yours or its owner agreed. Then a compact list of genetic markers (rsIDs and genotypes), not the whole file, is sent to our server in Germany.
• We keep the markers and your result. As you agreed, we keep the marker list and your ancestry result, so you can see it again and so we can re-run and improve the analysis. They are linked to a random code stored in your browser, not to your name or email, and are never sold or shared. The result is an estimate of similarity to present-day populations, not proof of origin or family relationships.
• Ask your DNA sends your question and your results, not the file. Answers are written by Anthropic’s Claude API, acting as our service provider. Conversations are stored with the email you gave, so you can sign back in with a one-time code and continue.
• Storing your file is your choice. We store your DNA file and its results only if you tick the consent box, so we can answer your questions in more depth. The file is encrypted at rest with its own key, linked to your email, and used for nothing else.
• A relative’s file needs their agreement. If you add a relative’s file to compare with yours, you confirm they agreed. It is used only for that comparison and is deleted together with yours.
• Delete it whenever you like. “Delete my DNA data” on your report removes everything we hold from your file straight away: the stored file and its results, relatives’ files, your Ask your DNA conversations, and your ancestry markers and result. If you no longer have the file or cleared your browser, use the request form at healthosx.com/legal/privacy/request.

The DNA API

If you buy DNA API credits, we store your API key, your credit balance and your payment records. A genome you upload through the API is encrypted at rest, used only to produce your report and answer questions about it, and deleted when you delete it. Payments are handled by Stripe. We never see or store your full card number.

HealthOS DNA Kit

When you buy a HealthOS DNA Kit, our payment provider Stripe collects your name, email address, phone number and shipping address, and we use them to ship the kit and to send your receipt and tracking. We never link an order to a HealthOS account by matching its email address: a kit is linked to an account when someone activates it with the code in the box. An order placed while signed in also records that account.

• The lab is our processor. LIFE & BRAIN GmbH in Bonn, Germany, analyses samples on our behalf as our processor. Your DNA data are processed and stored in Germany, in the EU.
• Coded samples. Your sample travels and is analysed under its kit code only. The lab does not receive your name, email address or postal address.
• Your consent. You give it in the HealthOS app when you activate the kit. It is a separate step, not part of accepting our terms, and nothing is ticked in advance. You also confirm that you are 18 or older.
• Three optional choices. At activation you can also agree to: keeping your sample after analysis; using your de-identified data for research; and marketing based on your DNA results. Each one is off unless you turn it on, and you can withdraw each one at any time. We record every consent and every change with its version and the time.
• The sample is destroyed. Unless you chose to keep it, the lab destroys your sample after analysis, and also if it cannot get a result from it. If you ask us to destroy your sample, it is destroyed within 30 days. The lab confirms each destruction in writing.
• Withdrawing your consent. You can withdraw your consent at any time in the app, under DNA kit → Privacy and sample. We act on it within 30 days: your sample is destroyed, and a sample that has not been analysed yet is never analysed. Deleting your DNA data in the app, or deleting your account, also has your sample destroyed.
• Your file. The raw file from the lab is stored encrypted in your HealthOS account until you delete it. You can download or delete it at any time.
• Never sold. We never sell your genetic data, and we never disclose it to insurers or employers. Law enforcement gets it only with valid legal process, such as a court order, warrant or subpoena, and we tell you unless the law forbids it.
• Sending your sample from the US. It goes back to the lab in Germany with a prepaid USPS label, which we email to you when you activate the kit.
• No health report. We do not produce a health report from kit samples. Kit results cover ancestry, traits and lineages.
• Legal basis. The order and its delivery: to perform our contract with you (GDPR Art. 6(1)(b)). The analysis of your DNA and each optional choice above: your explicit consent, given when you activate the kit (Art. 9(2)(a)). You can withdraw any of them at any time, as described above.

HealthOS Blood Test

When you buy a HealthOS Blood Test, our payment provider Stripe collects your name, email address, phone number and billing address, and we use them to book your draw and to send your receipt and test codes. We never link an order to a HealthOS account by matching its email address: a test is linked to an account when someone adds its code in the app. An order placed while signed in also records that account.

• The partner lab. The lab that takes and analyses your sample receives what it needs to identify you at the draw and to label the sample, and returns the results to us under your test code.
• Your results. Blood results are health data. We process them in your account on your explicit consent, given when you add the test code (GDPR Art. 9(2)(a)). You can withdraw it by deleting the report or your account.
• Never sold. We do not sell your results or use them for advertising.
• Storage. Your results stay in your HealthOS account until you delete them. The lab keeps its own records for as long as the law requires it to.
• Legal basis. The order, the booking and the results delivery: to perform our contract with you (GDPR Art. 6(1)(b)). The results in your account: your explicit consent (Art. 9(2)(a)).

HealthOS Blood Test — home kit

When you buy a home kit, our payment provider Stripe collects your name, email address, billing address and the shipping address for the kit, and we use them to send the kit and to send your receipt and kit codes. We never link an order to a HealthOS account by matching its email address: a kit is linked to an account when someone adds its code in the app. An order placed while signed in also records that account.

• The partner lab. Our certified partner lab in Germany ships the kit and analyses the sample. It receives the name and shipping address it needs to send the kit, receives your sample under its kit code, and returns the results to us under that code.
• Your results. Blood results are health data. We process them in your account on your explicit consent, given when you add the kit code (GDPR Art. 9(2)(a)). You can withdraw it by deleting the report or your account.
• Never sold. We do not sell your results or use them for advertising.
• Storage. Your results stay in your HealthOS account until you delete them. The lab keeps its own records for as long as the law requires it to.
• Legal basis. The order, the shipping and the results delivery: to perform our contract with you (GDPR Art. 6(1)(b)). The results in your account: your explicit consent (Art. 9(2)(a)).

Email sign-ups

When you join the waitlist, subscribe to the newsletter or enter your email in one of the tools, we store your email address, your name if you give it, and where you signed up. We also store how you reached us: the campaign tags in the link you followed, the referring website and the page you landed on. If you took the /start quiz, your answers are sent to our team along with your sign-up.

If you joined the waitlist or subscribed to the newsletter, we use your email to tell you about HealthOS. If you only entered it in a tool, we use it for that tool and do not send you marketing. We also use where you came from to understand which channels work. Every marketing email has an unsubscribe link. Our team gets a notification when someone signs up, by email and in a private Telegram group.

Cookies and analytics

We do not use advertising cookies, Google Analytics or any other ad or cross-site tracker.

To see which pages are used, we record page views, scroll depth and clicks with our own analytics. Each browser tab gets a random ID that is kept in session storage and deleted when you close the tab. It is not linked to your name or email, and we never record your health results with it. We also use Vercel Web Analytics, which does not set cookies and reports only aggregate numbers.

The tools use your browser’s local storage to keep your results and preferences on your own device. You can clear it at any time in your browser settings.

Like any website, our hosting and network providers process your IP address to deliver pages and protect against abuse. We also keep IP addresses in a few security records: sign-in codes and links, apps and AI assistants that register to connect to HealthOS, requests made to your data through the HealthOS API with a token or a connected app, and feedback or bug reports you send from the app. We use them only to prevent abuse and investigate security problems. Our analytics and the free tools record only your country, not your IP address.

Who else handles your data

We use these service providers. Each processes data only on our instructions, to run the part of HealthOS named here:

• netcup (Germany): the servers where our database and API run.
• Vercel (USA): hosts healthosx.com and app.healthosx.com.
• Cloudflare (USA): network delivery and protection against attacks.
• Anthropic (USA): AI for the app assistant (including its web searches), Ask your DNA, insight cards, the blood-tool assistant and reading lab reports, and the backup for meal photos and AI reads.
• OpenAI (USA): AI for meal photos and the short AI reads of meals and workouts, and a backup for lab reports and the blood-tool assistant.
• Google (USA): the Gemini AI as a backup for lab reports, meal photos, the short AI reads of meals and workouts, and the blood-tool assistant; plus our team email (Google Workspace).
• Resend (USA): sends our emails, including sign-in codes.
• Stripe (USA / Ireland): payments.
• Apple and Expo: Sign in with Apple, Apple Health and push notifications.
• Telegram: internal notifications to our team about sign-ups and service events.
• Sentry (EU, Germany): crash and error reports from the app and our servers.
• Qingping / Cleargrass: only if you connect one of their air monitors.
• Open-Meteo: weather, UV, air-quality and pollen data for your approximate location, for the sun and environment features, if you turn on location. It receives rounded coordinates and dates, never your name or email.
• Browser push services (such as Google, Mozilla, Apple): deliver web notifications, if you turn them on.

Transfers outside the EU

Some of these providers are based in the United States, and the AI providers may process your data in the United States or wherever their API runs. Where data is transferred outside the EU, we rely on the EU–US Data Privacy Framework for providers certified under it (such as Google), or on the European Commission’s Standard Contractual Clauses (such as with Anthropic and OpenAI).

Why we are allowed to process your data

• Your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a)): for health and genetic data, the AI features, the ancestry analysis, stored DNA files and kept blood reports, and marketing emails. You can withdraw it at any time. Withdrawing does not affect processing that already happened.
• Our contract with you (Art. 6(1)(b)): to provide your account, sync your data and provide paid features.
• Our legitimate interests (Art. 6(1)(f)): to keep the service secure, prevent abuse, and understand how the website is used through the cookie-free analytics described above.
• Legal obligations (Art. 6(1)(c)): for example, keeping payment records as tax law requires.

How long we keep it

• Account and health data: until you delete your account or ask us to delete it.
• Stored DNA files and DNA chats: until you delete them.
• Blood reports you did not ask us to keep: only for the duration of the analysis.
• Ancestry markers and results: until you delete them with “Delete my DNA data” or ask us to.
• Blood reports you chose to let us keep: up to 12 months.
• Email sign-ups: until you unsubscribe or ask us to delete them.
• Payment records: for as long as tax law requires, usually up to 10 years in Germany.
• Security records with IP addresses: as long as they are needed to protect accounts and investigate abuse. You can ask us to delete them.
• Nightly backups: 7 days.

Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict how it is processed, to receive it in a portable format, and to object to processing based on our legitimate interests. You can also withdraw any consent at any time. To use any of these rights, use the request form at healthosx.com/legal/privacy/request or email support@healthosx.com. We will answer within one month.

You also have the right to complain to a data protection authority, such as the one where you live or work.

Security

All connections to HealthOS are encrypted. Access to our servers is restricted to the people who run the service, and stored DNA files are encrypted with their own key. No system is perfectly secure. If a breach puts your data at risk, we will notify you and the authorities as the law requires.

We back up our database every night. Each backup stays on our server in Germany for 7 days and is then deleted.

Children

HealthOS is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

Not medical advice

HealthOS and its free tools provide educational information, not medical advice or a diagnosis, and results may be inaccurate. Discuss your results with a qualified clinician. Our Terms explain the limits of our responsibility for results.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use data you have already given us, we will tell account holders before it takes effect.

AI assistants you connect (Claude, ChatGPT and others)

You can connect your HealthOS account to an AI assistant such as Claude or ChatGPT. Nothing is shared until you do.

• What is shared. When you connect, you choose which kinds of data the assistant may see. When you ask a question, the assistant asks HealthOS for the data it needs, and HealthOS answers only within what you allowed. DNA, logging data for you and account changes are off unless you turn them on.
• Who receives it. The company that runs the assistant you connected, for example Anthropic for Claude or OpenAI for ChatGPT. What they do with it is governed by their privacy policy and your settings with them. HealthOS does not sell your data.
• No training. HealthOS does not use your data to train AI models and does not give it to anyone for training. Whether an assistant’s company may use your chats for training depends on your settings with that company.
• Legal basis. Your explicit consent, given on the connection screen. You can withdraw it at any time by disconnecting.
• Disconnecting. In Settings → Connected apps, in the app or on the web. Access stops immediately. Data the assistant already received stays in that chat; delete the chat in the assistant to remove it there.
• What we log. Each connection and each request: which assistant, which operation, when, and the result code. Not the health data returned.