Privacy Policy

Last Updated: June 2, 2026

HealthBuddy AI ("we", "our", or "us"), a product of Aftermath Designs Limited, is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your choices. Please read it carefully before using the app.

1. Information we collect

Depending on how you use the app, we may collect:

• Account information: Email address, display name, and authentication identifiers when you sign in with Apple, Google, or email.
• Health & care data: Medications, schedules, vitals, lab values, appointments, notes, emergency contacts, and profile details you enter.
• Location data: If you enable safety or sharing features, we may collect device location (including background location where permitted) for maps, geofence alerts, and emergency sharing with authorised caregivers.
• Motion data: If you enable fall detection, we use the device accelerometer to detect possible falls. This processing occurs on your device; we do not sell motion data.
• Apple Health / Health Connect: If you connect a health platform, we read only the categories you approve (e.g. heart rate, blood pressure) to display in the app.
• Photos & documents: Images or files you choose to upload (e.g. profile photo, lab report scans for optional AI analysis).
• Contacts: Only if you choose to pick emergency contacts from your address book.
• Usage & diagnostics: Anonymous or pseudonymous analytics (e.g. feature usage, crashes) to improve reliability.
• Subscription status: Whether you have an active premium subscription. Payment card details are handled by Apple or Google; we do not store them.
• Advertising identifiers: Our app may initialise the Google Mobile Ads SDK for future advertising. We do not display personalised ads until approved and enabled. When ads are shown, standard ad identifiers may be used as described by Google.

2. How we use your information

• Provide core features: reminders, calendars, health logs, reports, and cloud sync.
• Enable caregiver or family sharing when you connect with a code you authorise.
• Send push notifications you opt into (medication reminders, caregiver alerts, safety events).
• Operate optional AI-assisted features (e.g. lab or vital insights) using only the data required for that request.
• Process subscriptions and restore purchases.
• Improve security, prevent abuse, and analyse aggregated usage trends.

3. Caregiver & family sharing

When you share a connection code or authorise a caregiver, they can access the health information linked to that profile according to the permissions you grant. You control who you connect with. We do not sell your personal health data to advertisers or data brokers.

4. Third-party services

We use trusted service providers that process data on our behalf, including for:

• Authentication and secure cloud storage (e.g. Firebase / Google Cloud)
• Push notifications (Apple Push Notification service, Firebase Cloud Messaging)
• Subscriptions (RevenueCat)
• Analytics (e.g. Mixpanel)
• Sign-in (Apple, Google)
• Maps and location services
• Advertising platform (Google AdMob), when enabled

These providers are contractually required to use your data only to deliver services to us, subject to their own privacy policies where applicable.

5. Legal bases (EEA / UK users)

Where GDPR or UK GDPR applies, we rely on: performance of a contract (providing the app), legitimate interests (security, improvement, fraud prevention), consent (optional features such as location, health sync, notifications, or AI tools), and legal obligations where required.

6. Your rights & choices

• Access and update your data in the app at any time.
• Turn off location, notifications, fall detection, or health sync in device or app settings.
• Delete your account from Settings to remove associated cloud data tied to your account.
• Contact us to request access, correction, deletion, or portability where applicable by law.
• Object to or restrict certain processing, or withdraw consent where processing is consent-based.

7. Security & retention

We use encryption in transit, access controls, and industry-standard practices designed to protect your data. We retain information while your account is active and delete or anonymise it when you delete your account, subject to short backup and legal retention periods.

8. International transfers

Your data may be processed in countries outside your own, including the United States and European Economic Area, where our infrastructure or providers operate. We use appropriate safeguards where required by law.

9. Children's privacy

HealthBuddy AI is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the latest version. Material changes may be communicated in the app or by email where appropriate. Continued use after changes means you accept the updated policy.

11. Contact us

Privacy questions or requests: support@healthbuddy.ai

HealthBuddy AI is a product of Aftermath Designs Limited
Registered in England & Wales · Company No. 16724522