Back to Home
Health Track

Privacy Policy

Effective Date: October 24, 2026

Application: Health Track (NutriHealth)

Package Name: bd.com.appstick.healthtrack

Developer: Appstick Ltd.

Our Commitment to Health Privacy: At Health Track, your personal vitals and health logs are strictly confidential. We do NOT sell, rent, or trade your personal health data to any third parties, brokers, or advertisers.

1. Introduction

Health Track ("NutriHealth", "we", "our", or "us") provides a personal mobile application designed to help users track and monitor their health metrics, blood sugar levels, blood pressure readings, medications, prescriptions, and meal logs. This Privacy Policy explains what information we collect, how we use it, how it is safeguarded, and your rights regarding your data.

2. Information We Collect

We only collect data that is strictly necessary for the core functionalities of the application:

A. Account & Profile Information

  • User Identity: Full name, email address, and profile photo (selected by you).
  • Biometric & Demographic Parameters: Age, date of birth, gender, height, body weight, and blood group. These are used solely to calculate Body Mass Index (BMI) and tailor health threshold charts.
  • Authentication: Login credentials managed securely via Supabase Authentication and Google Sign-In.

B. Health & Vitality Records (Sensitive Personal Information)

  • Blood Glucose Readings: Fasting, post-meal, or bedtime blood sugar records (mg/dL or mmol/L).
  • Blood Pressure & Pulse: Systolic and diastolic blood pressure (mmHg) and pulse rate (BPM).
  • Medication Logs: Medicine names, dosage, scheduled reminder times, and adherence records.
  • Prescriptions & Medical Reports: Photos or digital copies of prescriptions and diagnostic reports uploaded by you.
  • Meals & Nutrition: Self-reported daily meals and dietary entries.
  • Symptom & Pain Records: User-logged physical symptom details.

C. Device & Technical Information

  • Device Identifiers: Device model, OS version, Firebase Cloud Messaging (FCM) tokens for scheduled reminder delivery, and advertising identifiers (AAID) for ad serving.

3. Device Permissions & How They Are Used

Health Track requests only the permissions necessary for user-initiated actions:

  • Camera (android.permission.CAMERA): Required only when you take photos of your physical medical prescriptions, lab reports, or set a profile picture.
  • Photos & Storage (READ_MEDIA_IMAGES, READ/WRITE_EXTERNAL_STORAGE): Required to select prescription files from your gallery and save/download your exported PDF/Excel health reports.
  • Notifications & Exact Alarms (POST_NOTIFICATIONS, SCHEDULE_EXACT_ALARM, USE_EXACT_ALARM): Required to trigger local alarms and push notifications for your scheduled medication doses, vital checks, and meal reminders.
  • Internet Access (INTERNET, ACCESS_NETWORK_STATE): Required to sync your data with our secure cloud servers, enable Google Sign-In, and load advertisements.

Note: We do NOT request access to your GPS location, microphone/audio, phone contacts, or SMS messages.

4. How We Use Your Information

  • Personal Health Visualization: Displaying your historical health trends, statistical charts, and comparing readings against standard clinical reference thresholds (e.g., ADA, AHA guidelines).
  • Reminders & Alerts: Sending timely notifications so you never miss a medication dose or vital measurement.
  • Diagnostic Report Generation: Compiling your logged vitals into exportable PDF or Excel files that you can share with your doctor or physician.
  • Cloud Sync & Backup: Synchronizing your logs across devices via our database and allowing optional backup to your personal Google Drive account.

5. Third-Party Services & Advertising

We work with trusted third-party SDKs to operate and monetize the app:

  • Supabase: Provides secure cloud database storage and authentication. Enforces Row-Level Security (RLS) so only you have access to your personal records.
  • Google Firebase: Used for Firebase Cloud Messaging (FCM) to deliver push notifications and authentication services.
  • Google Drive API: Used solely if you explicitly choose to back up or restore your health reports to your own Google Drive account.
  • Google AdMob (Google Mobile Ads): Displays in-app banner, interstitial, and rewarded advertisements. AdMob may collect your device's advertising identifier and basic usage data to serve ads. Important: Your private medical vitals, prescriptions, and health logs are NEVER shared with or accessible by Google AdMob or advertising partners.

6. Data Security & Storage

  • Encryption in Transit: All communications between the app and backend servers are encrypted using modern TLS 1.3 / HTTPS protocols.
  • Encryption at Rest: Server-side database records and uploaded files are safeguarded with AES-256 encryption.
  • Local Storage: Local preferences and offline caches are stored securely within your device's private sandboxed app storage.

7. Data Retention & Account Deletion (Your Rights)

You maintain full control and ownership over your data:

  • Edit or Delete Logs: You can edit or permanently delete individual vital entries, medication schedules, or uploaded prescriptions directly inside the app at any time.
  • Export Data: You can download and export your complete health history into PDF and Excel reports at any time.
  • Complete Account Deletion: You can permanently delete your entire account and all associated health records directly in the app under Profile > Settings > Delete Account. Upon confirmation, all personal profiles, vitals, prescriptions, and database records are immediately and permanently erased from our Supabase cloud database and local device storage.
  • You can also request manual data deletion by contacting us at: [email protected].

8. Medical Disclaimer

Health Track (NutriHealth) is an informational wellness aid designed to support personal self-monitoring of blood glucose, blood pressure, medications, and nutrition. It is not an FDA-certified medical diagnostic device and does not provide formal medical diagnoses or clinical advice. Always consult a certified healthcare professional for medical concerns. In an acute health emergency, contact your local emergency medical service immediately.

9. Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect personal identifiable information from children under 13. If you believe a child has provided us with personal information, please contact us immediately for prompt deletion.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of the application constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, privacy inquiries, or data deletion requests, please contact us:

© 2026 Appstick Ltd. All rights reserved.