Privacy Policy
lil health · Effective October 15, 2026
lil health brings your Apple Health data to the Mac. The iPhone app reads the Health data you allow it to and uploads it to my servers. lil health for Mac, which is in development, will download it so you can see it there. This policy explains what that involves.
lil health is made and run by Alexandru Ţurcanu (“I”, “me”), who is the data controller for it. You can reach me at hello@851.sh.
What I collect
- Your account. When you sign in with Apple or Google, I receive an identifier for your account with that provider, your email address (with Apple, possibly a private relay address), and your name if the provider shares it.
- Your devices. For each iPhone or Mac you sign in on: which app it is, its platform, its name if the app sends one (on a Mac, the computer's name, which often includes your name), when it signed in and when it was last used, and whether the iPhone is paired with an Apple Watch.
- Your Health data. What you allow lil health to read in Apple Health. Today that's: samples such as activity, body measurements, heart, sleep, hearing, cycle tracking, nutrition, respiratory and symptoms; workouts, with their activities, events and statistics; State of Mind logs and anxiety and depression assessments (GAD-7, PHQ-9); audiograms; Activity ring summaries; and characteristics such as your date of birth, sex and blood type. It also includes where each record came from, such as the app or device that recorded it, and the metadata Health keeps with it.
- Coming later. lil health will also sync workout routes, which contain the locations where you exercised, ECGs, heartbeat series, medications and vision prescriptions. They'll be listed above before any of them is uploaded.
- Technical information. Your IP address and the country it's in are used when you make a request, to limit abuse and to decide whether new accounts can be created from your region. They aren't stored with your account. My hosting provider keeps short-lived request logs.
lil health has no advertising, analytics or tracking. It doesn't read anything you haven't allowed it to in Apple Health.
How I use it
Only to provide lil health: to sync your Health data to your other devices, keep your account working, and keep the service secure and within its limits.
I never sell your data, never use it for advertising or marketing, and never share it with data brokers. I don't use it to train machine learning models. I don't look at your Health data, except when you ask me to for support.
Where it's stored
Your data is stored and processed by Cloudflare, Inc., my hosting provider, which acts as my processor under its Data Processing Addendum. Cloudflare runs data centers around the world, including in the United States, so your data may be processed outside your country. Transfers from the European Economic Area, the United Kingdom and Switzerland are covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the Standard Contractual Clauses in its Data Processing Addendum.
lil health doesn't store your Health data in iCloud. Sign in with Apple and Sign in with Google are provided by Apple and Google, under their own privacy policies.
Security
Your data is encrypted in transit and at rest. It isn't end-to-end encrypted: my servers can read it, which is what lets them sync it between your devices. Access to it is limited to running the service.
How long I keep it
For as long as you have an account. You can delete your account from the iPhone app (Delete Account), which deletes your Health data, your account and your devices from my servers straight away. Backups that allow recovery from mistakes keep it for up to 30 more days, and then it's gone. Deleting your account doesn't change anything in Apple Health on your iPhone.
Signing out of a device removes that device from your account, along with the step-count and other daily totals it computed for you. The Health records it uploaded stay with your account, since they're the same records your other devices show. Devices that stopped being used without signing out are removed the same way.
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it's processed, and receive it in a portable format. Until data export is built into the apps, email me and I'll send you your data. You can delete everything yourself at any time by deleting your account.
If you're in the European Economic Area, the United Kingdom or Switzerland, the legal bases are:
- Health data: your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you give on lil health's consent screen before anything is uploaded. You can withdraw it at any time in the app, or by turning off lil health's access in Settings › Privacy & Security › Health and deleting your account. Withdrawing doesn't affect what was processed before.
- Your account and devices: providing the service you asked for (Article 6(1)(b)).
- Security and abuse prevention: my legitimate interest in keeping the service safe and affordable to run (Article 6(1)(f)).
You also have the right to complain to your data protection authority. I'd appreciate the chance to sort things out first, at hello@851.sh.
Availability
lil health isn't meant for children under 16. New accounts can't be created from mainland China.
Changes
If this policy changes, I'll update it here and change the date at the top. If a change affects how your Health data is used, lil health will ask for your consent again before it applies.
Contact
Alexandru Ţurcanu · hello@851.sh