Consumer Health Data Privacy Policy
Halera collects consumer health data only because you type it in: food, weight, blood pressure, fasting, sleep, mood and symptoms. None of it is sold, shared with advertisers, or sent to Halera's analytics provider. You can delete all of it from inside the app without contacting anyone.
This notice is provided separately from our general Privacy Policy, as required by Washington's My Health My Data Act (RCW 19.373) and similar state consumer health data laws, including Nevada's SB 370 and Connecticut's consumer health data provisions. It covers only consumer health data — information that identifies a consumer's physical or mental health status, such as the wellness data you log in Halera. For anything else (account data, your broader privacy rights), see the general Privacy Policy.
What consumer health data does Halera collect?
Only what you choose to log: nutrition and food/drink entries, hydration, intermittent-fasting windows, body weight, blood-pressure readings, mood, symptoms, bowel-movement logs, sleep, caffeine and alcohol intake (if enabled), and any meal or nutrition-label photos you submit for an AI estimate.
If you choose to connect Apple Health (iOS) or Health Connect (Android), we also receive the specific data types you approve there. Halera asks for: workouts (activity type, start and end time, duration, distance and calories burned), body weight, and height. Nothing else is requested, and you choose which of those to allow.
How is that health data collected?
Directly from you — everything you log is entered or submitted by you inside the app.
If you connect Apple Health or Health Connect, we additionally receive the data types listed above from that app on your device.
Connecting is entirely optional and off unless you turn it on: Halera works fully without it, you choose which data types to allow, you can disconnect at any time in Halera, and you can revoke Halera’s access at any time in Apple Health or Health Connect. Disconnecting stops any further data arriving; anything already imported stays in your log until you delete it, and deleting your account removes it along with everything else.
Those are the only two sources. We do not purchase, license, or buy consumer health data about you from data brokers or any other third party.
Why does Halera collect it?
To provide the Service you are using it for. That means three things and nothing else:
- storing your log;
- calculating your estimates and trends;
- generating AI-assisted nutrition and exercise estimates, including from photos, at your request.
Data received from Apple Health or Health Connect is used only to fill in your log. Workouts appear as activity entries, weight and height update your profile, and those figures feed the calorie and trend calculations.
Halera does not use your health data for advertising. It is not used for data mining, and it is not sold.
Who does Halera share health data with?
Only the processors needed to run the Service, under their own confidentiality and data-processing terms:
- Microsoft Azure — hosting and storage of your health log (Azure Cosmos DB), and generating AI estimates from text or photos you submit (Azure OpenAI Service).
- U.S. Department of Agriculture FoodData Central — food/nutrition lookups.
Apple Health and Health Connect are sources, not recipients. Connecting them sends data from your device into Halera; Halera does not write your log back to them, and does not share your log with Apple or Google. Health data received this way is stored in the same place as everything else you log (Azure Cosmos DB, US East) and is never stored in iCloud.
We do not sell consumer health data, and we do not share it with any other third party for advertising or unrelated purposes.
Does the analytics tool receive any of this?
Halera uses one product-analytics tool, HeyCatch, to see how people find the app and where they get stuck. None of the consumer health data described on this page is ever sent to HeyCatch.
From inside the app, HeyCatch receives seven named events and a random account identifier, and nothing else: you signed up, you signed in, you logged something for the first time, you came back on a later day, the upgrade screen was shown, you started a purchase, a purchase completed. The last two of those seven were added on and reach users with the next app release.
No food entries, weights, blood-pressure readings, fasting windows, mood, symptoms, sleep, photos or profile details are sent. The restriction is enforced in the app's code rather than by policy alone: the entire signed-in area is marked so that the analytics tool cannot record taps or on-screen text anywhere inside it. The Privacy Policy lists every event by name.
How is health data kept secure?
We maintain administrative and technical safeguards designed to protect the consumer health data we collect, including encryption of data at rest and in transit (Azure Cosmos DB, HTTPS/TLS) and access controls that require a verified sign-in to your account. No security program is perfect, and we cannot guarantee absolute security.
What rights do you have over this data?
- Withdraw consent at any time by deleting your account and data (Profile & goals → "Delete account & all data" in-app), which stops all further processing.
- Access or export your health log as a spreadsheet, any time, from within the app.
- Delete your account and all associated health data, any time, from within the app.
To exercise these rights another way, email privacy@gethalera.com.
Appeal process
If we deny a request you've made to exercise one of these rights, we will explain why and tell you how to appeal by emailing privacy@gethalera.com with "Appeal" in the subject line. We will respond to your appeal within 45 days of receipt, with a written explanation of our decision. If we deny your appeal, you may contact the Washington State Attorney General to submit a complaint, or the attorney general's office of your own state if it offers a similar consumer health data law.
How do you contact Halera about health data?
Questions about this policy? Email privacy@gethalera.com.