Health Diary – Privacy Policy

Last updated: 2025-11-30

Thank you for using Health Diary.
We know your health information is highly sensitive, and we take your privacy seriously.
This Privacy Policy explains what data we collect, how we use it, when it may be shared, and what choices you have.

By using Health Diary, you agree to the practices described here. If you do not agree, please do not use the app.

1. Who we are

Health Diary is developed and operated by the team behind pickrabbit.net (“we”, “our”, “us”).

If you have any questions about this Privacy Policy or our data practices, you can contact us:

In the app: Settings → Contact Us, or
By email: support@pickrabbit.net

2. Scope of this Privacy Policy

This Privacy Policy applies to:

The Health Diary mobile application (the “App”); and
Any support or communication channels linked from within the App.

It does not apply to:

Third-party websites or services that you may visit through links in the App; or
Apple’s own system services such as iCloud Backup, App Store, or device-level analytics, which are governed by Apple’s privacy policies.

3. Our core privacy principles

Local-first storage
Your health notes and records are stored on your device by default. We do not run our own cloud storage for your diary.
Minimal collection
We only collect the minimum data necessary to provide and improve the App.
Transparent processing
When we use third-party services (including AI services), we explain what we send and why.
No selling of personal data
We do not sell your personal data.

4. Information we collect

4.1 Information you enter into the App

These are the things you actively type or choose:

Health notes and entries
Free-text descriptions of how your body feels, symptoms, triggers, relieving factors, and any other content you type into your diary.
Tags, labels, and metadata
When available, any tags, labels, or custom fields you add to your entries.
Settings and preferences
For example:
– Language and region settings
– Notification preferences
– Feature toggles (e.g., whether iCloud backup-related features are enabled)

Health information notice: Your diary entries may contain health-related information. While we aim to keep this data on your device, certain features (like AI-generated summaries and weather-related trends) may send limited, necessary information to third-party services as described below.

4.2 Information collected automatically by the App

When you use Health Diary, we may automatically collect certain technical and usage information, such as:

Device information (e.g., device model, operating system version, language, region)
App version and basic usage information (e.g., which screen is opened, feature usage counts)
Non-identifying crash reports and performance data

We use this to understand how the App performs, diagnose problems, and improve stability.

Where possible, this information is processed in an aggregated or pseudonymous form.

4.3 Subscription and purchase information

Health Diary offers subscriptions and a lifetime access option. Purchases are handled by Apple through the App Store using StoreKit.

We receive from Apple:

A non-identifiable transaction identifier
The product purchased (e.g., monthly, yearly, lifetime)
Subscription status (active, expired, refunded where applicable)

We do not receive your full payment card details.
Billing information is processed by Apple according to their own privacy policy.

This information is used solely to check whether you have access to premium features.

4.4 Approximate location and weather-related information

If you enable features such as weather impact / trend summaries, the App may need to obtain:

Your approximate location or city/region (either from your device’s location services, or from manual input, depending on your settings)
Date and time of your entries or selected time ranges

This information may be sent to a third-party weather API to retrieve weather conditions (e.g., temperature, humidity, pressure) for the relevant place and time.

We use the returned weather data only to calculate correlations between your health entries and weather patterns and to display these insights in the App.

4.5 Information from “Sign in with Apple”

Health Diary supports Sign in with Apple as a login and account identity option.
Depending on the type of login you choose (full email or private relay email), we may receive different levels of contact information.

When you choose to sign in using Apple, Apple shares the following with us:

Full email address (when you choose “Share My Email”)
Private relay email (xxxx@privaterelay.appleid.com) (when you choose “Hide My Email”)
A unique, app-specific user identifier that does not reveal your actual Apple ID

How we use this information

We use your email address (whether full or private relay) only for purposes such as:

Responding to support messages and feedback
Contacting you about issues related to your account or access to premium features
Sending essential service-related communications (if necessary)

We do not use your email for:

Marketing campaigns
Advertising personalization
Selling or sharing with third-party advertisers
Building user profiles outside of the App’s support and account-related interactions

If you sign in using a private relay email, our replies will be routed to your real mailbox by Apple’s relay system.
We do not have access to your real email address unless you choose to share it explicitly (for example, in a support message).

No access to your Apple ID or password

We never receive:

Your Apple ID password
Your full Apple account details
Any Apple account information beyond what Apple provides through the Sign in with Apple API

Optional and revocable

You may revoke Sign in with Apple credentials at any time in your Apple ID settings.
You may also contact us at support@pickrabbit.net if you wish to request deletion of your account or associated login email from our support records.

5. How we use AI and third-party services

Health Diary uses AI to:

Automatically extract structure from your free-text notes (e.g., main issue, body area, severity, timing, duration, triggers, relievers)
Generate health overviews and trend reports over a selected time range

To provide these AI features, we currently use a third-party AI service, for example:

ChatGPT 4.1 mini model API (an AI model service provided via OpenAI infrastructure and/or Apple’s integrated AI services, depending on platform capabilities)

5.1 What AI features do with your data

When you use AI-powered features, we may send only the necessary parts of your data to the AI service, such as:

Text of your selected diary entries
Previously extracted structured fields (e.g., severity, body region, timing)
Time range context (e.g., “entries from the last 30 days”)
Non-identifying context like “user is tracking headaches and fatigue”

We do not intentionally send:

Your name or email (unless you include them inside your own note text)
Device identifiers beyond what is required by the platform’s API integration

5.2 Purpose of AI processing

The third-party AI service processes this information in order to:

Extract structured health-related fields from your free-text entries
Generate natural-language summaries, trend reports, and doctor-ready overviews
Help you better understand patterns in your own data

5.3 AI data handling

We design our integration with the following goals:

Send the minimum amount of text needed for each request
Avoid including direct identifiers (like your name or email) where feasible
Use the resulting summaries only inside your App experience

That said, your diary entries may still contain personal information you choose to include.
By enabling and using AI features, you understand and agree that relevant portions of your input will be processed by this third-party AI provider in accordance with their own terms and privacy policies.

If you prefer not to send data to AI services, you can simply:

Avoid using AI-powered features (such as trend summaries or AI extraction).

6. Weather API

To display and analyze weather impact on your health, we use a third-party weather API service.

6.1 What we send

Depending on your configuration, we may send:

A geographic reference (e.g., city name, coordinates approximated to a general area)
A date or time range
Possibly a simple category (e.g., “user is checking weather correlation for headaches”)—without including your raw diary text

6.2 What we receive and how we use it

We receive weather data such as:

Temperature
Humidity
Pressure
Weather conditions (rain, clouds, etc.)

We use this solely to:

Display weather information in the App
Calculate correlations or trends like “symptoms are often worse on humid days”

We do not use weather API data to identify you as an individual.

7. Advertising and third-party ad networks

Health Diary may display third-party advertisements in some parts of the App, except for users who subscribe to remove ads.

These ad networks may collect information such as:

Device identifiers for advertising (e.g., IDFA or equivalent, where allowed by your OS settings)
Approximate location or region
Device type, OS version, language
Interactions with ads (e.g., impressions, clicks)

We do not control all aspects of how third-party ad networks use this information, and their practices are governed by their own privacy policies. Where applicable, we rely on platform-level consent and privacy controls (for example, iOS App Tracking Transparency settings).

If you enable a subscription or lifetime purchase that removes ads, we stop requesting ad content for your account on that device.

8. How your data is stored

8.1 On your device

By design, your diary data (entries, structured extractions, and local statistics) are stored locally on your device.

We do not maintain our own backend servers for storing your diary.

8.2 iCloud and device backups

We do not directly upload your diary to any cloud storage that we control.

However, your device may be configured to use:

iCloud Backup, or
Local device backups via Finder/iTunes

If so, your diary data may be included in those backups as part of your device’s normal backup process, under Apple’s control. We do not have access to these backups.

For reliable protection of your records, we strongly recommend keeping iCloud Backup (or an equivalent backup solution) turned on, especially when changing or restoring devices.

9. How we use your information

We use the information we collect for the following purposes:

To provide core App functionality
– Storing and displaying your diary entries
– Extracting structured information from your notes
– Generating trend summaries and doctor-ready timelines
– Showing statistics and charts
To personalize your experience
– Remembering your settings and preferences
– Showing weather-related patterns when enabled
To operate subscriptions and purchases
– Verifying your subscription status
– Enabling or disabling Pro / premium features
To show and manage ads
– Displaying third-party ads where applicable
– Respecting your purchase of ad-free plans
To maintain and improve the App
– Monitoring performance and crash analytics
– Understanding feature usage to improve design and functionality
To provide support and communicate with you
– Responding to your messages via in-app contact or email
– Sending important notices about changes to the App or this Privacy Policy (where appropriate)

We do not use your diary entries to build marketing profiles or to target you with advertising outside of the App’s context.

10. When we share information

We do not sell your personal data. We may share limited information in the following situations:

Service providers and third-party processors
– AI providers (e.g., ChatGPT 4.1 mini model API)
– Weather API providers
– Ad networks and mediation partners
– Crash reporting and analytics services
These providers process information only on our behalf and only to provide their services to us.
App Store / payment processors
– Apple, for handling subscriptions and purchases.
Legal reasons
We may disclose information if we believe it is reasonably necessary to:
– Comply with applicable law, regulation, legal process, or governmental request
– Protect the rights, property, or safety of our users, ourselves, or others
– Enforce our terms and policies or detect/prevent fraud
Business transfers
If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to obligations to protect your privacy.

We do not share your diary entries for third-party advertising or data-broker purposes.

11. Data retention

Diary content on your device
Stored until you delete it, uninstall the App, clear data, or reset your device.
AI and weather requests
We aim to keep only what is necessary for providing the feature and improving reliability. Any further retention depends on the policies of the third-party providers.
Subscription and purchase information
Retained as long as needed to manage your access, comply with legal obligations (e.g., accounting), and resolve any disputes.
Support communications
Retained as long as necessary to handle your request and for a reasonable period afterwards to improve support.

12. Your rights and choices

Depending on your location, you may have certain rights regarding your personal data, such as:

The right to access your data
The right to correct inaccurate data
The right to delete your data
The right to restrict or object to certain processing
The right to withdraw consent where processing is based on consent
The right to export or backup your records (to the extent the App supports this)

In practice, you can exercise many of these rights directly:

By editing or deleting entries inside the App
By uninstalling the App (which removes local data from your device)
By managing your subscription via App Store account settings
By controlling system settings such as location access, notifications, and tracking permissions

If you need help exercising any privacy rights, you can contact us at support@pickrabbit.net. We may need to verify your identity before responding.

13. Children’s privacy

Health Diary is not designed for children under 13 (or the minimum age in your jurisdiction).
We do not knowingly collect personal data from children under this age.

If you believe that a child has provided us with personal information in violation of this Policy, please contact us at support@pickrabbit.net, and we will take appropriate steps to address the issue.

14. International users

The App may be used from different countries and regions.
Your data may be processed on servers operated by third-party providers (such as AI or weather services) located in other jurisdictions, which may have different data protection laws than your home country.

We take steps to work with providers who commit to protecting personal data in accordance with applicable standards, but we cannot control all aspects of their infrastructure.

15. Security

We take reasonable technical and organizational measures to help protect your information, including:

Local-first storage design
Reducing the amount of data sent to third-party services
Using secure communication channels (e.g., HTTPS) where applicable
Limiting access to support data to necessary personnel only

However, no system is perfectly secure. We cannot guarantee absolute security of your data.
You are responsible for keeping your device secure and for choosing whether to include identifying details in your notes.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes in the App’s functionality or features
Changes in third-party services (e.g., AI models, weather providers, ad networks)
Changes in applicable laws or regulations

When we make significant changes, we will:

Update the “Last updated” date at the top of this document, and
Where reasonable, notify you within the App or through other appropriate channels.

Your continued use of the App after any changes means you accept the updated Privacy Policy.

Thank you for trusting Health Diary with your health story.
We are committed to handling your information with care, transparency, and respect.