Privacy Policy

We collect only the data needed to run the features you use. Health-summary features, chat health-Q&A context, AI memory, Care sharing, nutrition/skin/clinical records, account information, push identifiers, and de-identified crash/performance telemetry — the source, whether it leaves your device, where it is stored, which category of processor handles it, and how long it is retained are all detailed in the AI & Data Processing notice.

Our AI advice, health Q&A, and analysis are produced by a third-party AI processing service. Your health data is not used to train any model.

Your health summary is uploaded for AI analysis only after you explicitly consent to “AI health analysis” in the app. You can turn it off anytime under Settings → Privacy; once off, we stop analysis and delete the health summaries and AI health memory already uploaded to the server.

Care sharing is a separate, per-grant authorization, independent of AI consent; revoking a friend's grant stops only that share and affects nothing else.

We rely on several categories of third-party service providers to deliver features, disclosed by category:

We share with each category of processor only the data necessary for the service it provides.

• A third-party AI processing service — powers AI advice, health Q&A, and analysis
• A third-party email delivery service — sends login / verification-code emails
• The platform push service — delivers push notifications
• A third-party crash-diagnostics service — receives de-identified crash/performance telemetry (no PII, tokens, or health values)
• Third-party cloud and edge providers — provide hosting, CDN, and edge

When you use voice input in Chat, or describe a meal by voice in a nutrition record, the app collects that audio and sends it to a third-party AI processing service for transcription (speech-to-text). The sole purpose is to turn your speech into editable text input.

The voice audio is discarded immediately once transcription completes and is not retained on our servers; only the resulting transcribed text is kept, as chat or nutrition-record content, under that category's retention. Your voice is not used to train any model.

• Access / export: you may request access to or an export of your data.
• Deletion: deleting your account in-app permanently removes all your server-side data (health summaries, AI memory, Care shares, account).
• Withdraw consent: turn off “AI health analysis” anytime; we stop processing and delete the related server data.
• Object to / restrict processing: you may exercise these rights to the extent permitted by applicable data protection laws.

Retention per data category is listed below; content you delete is removed from our servers, and copies in backups are cleared as those backups rotate (within 30 days).

• Health summaries & AI memory: deleted when you withdraw consent or delete your account.
• Chat conversations & attachments: kept until you delete the conversation or your account.
• Voice audio (chat voice input and nutrition voice descriptions): discarded once transcription completes, never stored on our servers; only the transcribed text is kept, as chat / nutrition-record content.
• Push tokens: unbound on logout; cleared when invalidated; deleted with your account.
• Subscription & transaction records: kept as long as needed for accounting, refund disputes, and legal obligations; unlinked from your account identity after account deletion.
• Care messages & shares: kept until you delete them or your account; revoking a share stops it immediately.
• Reports & evidence snapshots: kept until the report is resolved, to handle it and prevent abuse; after account deletion only a de-identified minimal record is retained.
• Crash & performance telemetry: de-identified, kept at most 90 days.

Encryption in transit (HTTPS/TLS); the on-device health store is excluded from iCloud backup and encrypted; server access is minimized; telemetry is de-identified at a single egress.

HealthDoor is intended for users aged 16 and older. It is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child under 16 has provided us data, contact us and we will delete it.

Your personal data is processed by the data controller, SUNFLORET PTE. LTD., on its international infrastructure in accordance with this policy. Where data is transferred across borders, we provide appropriate safeguards through contractual commitments and technical measures (encryption in transit, data minimization, and de-identification); health data enters the AI processing chain only after your explicit consent.

HealthDoor provides health information and lifestyle support. It is not a medical device, does not provide medical diagnosis or treatment, and is not a substitute for care from a doctor or other qualified professional. Any advice or analysis is for reference only; do not self-diagnose or medicate based on it.

Any emergency guidance shown in the app is region-localized general information, not an emergency service; in an emergency or life-threatening situation, call your local emergency number or go to the nearest medical facility immediately.

The data controller under this policy is SUNFLORET PTE. LTD. (a company registered in Singapore that operates the HealthDoor product). For privacy inquiries or to exercise your data rights, contact contact@eurekailab.com.