Privacy Policy

Introduction

Chickadee Health ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS mobile application and services.

Key Privacy Principle: Your health data stays on your device. We only store contact information on our servers to enable SMS notifications to your family members.

Health Data Collection and Use

What We Access from Apple HealthKit

Our app reads the following types of health data from Apple HealthKit with your explicit permission:

• Heart rate and heart rate variability
• Activity levels and step counts
• Sleep patterns and quality
• Walking speed and mobility metrics

How We Use Your Health Data

Important: We do not store your health data on our servers. All health data remains securely on your device within Apple's HealthKit. Our app analyzes your health data locally on your iPhone to:

• Detect patterns that may indicate increased fall risk or health concerns
• Send timely alerts to your designated family members when concerning patterns are identified
• Provide you with insights about your health trends within the app

Your health data never leaves your device. We only transmit notifications to family members when the app detects concerning patterns. These notifications may include general health observations (like "sleep has been declining") but never contain specific measurements, exact numbers, or detailed health data.

SMS Notifications

How SMS Alerts Work

When you add family members to your health monitoring network, they will receive SMS text message alerts when our app detects concerning health patterns. These alerts may include general observations (such as "sleep has been declining" or "activity is lower than usual") but will not include specific measurements, exact numbers, or detailed health data. These alerts help your loved ones know when to check in with you.

Phone Number Privacy - Required Disclosure

Your mobile phone information will not be sold or shared with third parties for promotional or marketing purposes.

We collect and use phone numbers only to:

• Send health monitoring alerts to designated family members
• Send account and service-related notifications
• Verify user identity during account setup

Family members can opt out of SMS alerts at any time by replying STOP to any message. Standard message and data rates may apply based on your mobile carrier's plan.

Data Security and What We Store

What Information We Store on Our Servers

We store only the following contact information on our servers:

• Your name and phone number
• Family members' names and phone numbers (for SMS notifications)
• Basic account information (email, account preferences)

We do not store any health data on our servers. All health metrics, measurements, and patterns remain securely on your device within Apple HealthKit.

How We Protect Your Contact Information

We implement industry-standard security measures to protect your contact information:

• All data is encrypted in transit using secure HTTPS connections
• Contact information is encrypted at rest on our servers
• We use secure, authenticated connections for all data transmission
• Access to your data is strictly limited to authorized systems needed to provide our SMS notification service
• We conduct regular security audits and updates

SMS Messages and Protected Health Information (PHI)

Important: We do not send sensitive health data or measurements via SMS text messages. Our SMS alerts may include general health observations (such as "sleep has been declining" or "activity levels are lower than usual") but will never include:

• Specific health measurements or numeric values (heart rate, step counts, etc.)
• Medical diagnoses or conditions
• Detailed health metrics or data points
• Protected Health Information (PHI) as defined by HIPAA

SMS messages are limited to high-level observations and alerts to notify family members when they should check in with you.

HIPAA Considerations

Because we do not store health data on our servers, we are not a covered entity under HIPAA. Your health data remains on your device and is protected by Apple's HealthKit security framework. The contact information we store is handled with the highest standards of data security.

Your Rights and Choices

Access and Control

You have the right to:

• Access your health data: View all health data through Apple's Health app on your iPhone - this data is stored on your device, not our servers
• Access your contact information: View and edit your contact information and family member contacts in the app at any time
• Revoke permissions: Disconnect HealthKit access through your iPhone Settings
• Update family network: Add or remove family members from SMS alerts
• Opt out of SMS: You or your family members can stop receiving SMS alerts by replying STOP

Data Deletion

You can request deletion of your account and all associated contact information at any time by:

• Using the "Delete Account" option in the app settings, or
• Contacting us at privacy@chickadee.family

Upon deletion, we will permanently remove all your contact information, account details, and SMS notification preferences from our servers within 30 days. Your health data remains on your device in Apple HealthKit and is not affected by account deletion. Note that some contact data may be retained for a limited time as required by law or for legitimate business purposes (such as fraud prevention).

Data Sharing and Third Parties

We do not sell your data. We only share information in the following limited circumstances:

• Family members you designate: General health observations via SMS (such as "sleep has been declining") - never specific measurements or detailed health data
• SMS service providers: Trusted partners who help us deliver SMS notifications, who only have access to phone numbers and the general notification messages we send, and who are contractually bound to protect your data and use it only for providing services to us
• Legal requirements: When required by law, such as in response to valid legal processes

Your specific health data and measurements are never shared with anyone because they never leave your device. Only contact information and general health observations (without specific numbers or measurements) are transmitted to our servers for SMS delivery.

Children's Privacy

Chickadee Health is not intended for use by individuals under the age of 18. We do not knowingly collect health information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through the app or via email. Your continued use of Chickadee Health after changes become effective constitutes your acceptance of the updated policy.