Privacy Policy

Last updated: September 26, 2026

This policy explains what information Medor Health ("the app", "we") collects, how it is used, and the choices you have. Medor Health is a personal health dashboard run by an independent developer. Questions can be sent to medorj@gmail.com.

Information we collect

Google account information

When you sign in with Google, we receive your Google account ID, email address and name (the openid, email and profile scopes). We use these only to create your account, recognize you when you sign in, and check that your account has been invited.

Google Health data

If you choose to connect Google Health, we request read-only access to the following categories of data:

• Health metrics and measurements - for example resting heart rate, heart rate variability, blood oxygen and weight.
• Activity and fitness - for example steps, exercise and active minutes.
• Sleep - sleep duration and sleep stages.
• Nutrition - for example logged calories and hydration.

We also store an OAuth refresh token so the app can keep your dashboard up to date without asking you to reconnect. Medor Health never writes to or changes your Google Health data.

Information you enter

Entries you add to the Activity Log, activities you define, and your dashboard and notification settings (including an optional Pushover user key if you turn on notifications).

Browser storage and technical data

The app uses a sign-in cookie to keep you signed in, and your browser's local storage for display preferences such as theme and layout; these stay in your browser. Our hosting provider records standard server logs (such as request times, URLs, IP addresses and errors) used to keep the service running and secure. We do not use advertising or third-party tracking cookies.

How we use your information

Your information is used only to provide the features you see in the app:

• Displaying your health data as charts and tables.
• Computing rolling baselines, trends and a daily readiness score from your own data.
• Generating the optional Daily Briefing, a short written summary of your readiness insights.
• Sending notifications you have opted into.
• Operating, securing and troubleshooting the service.

We do not sell your data, use it for advertising, use it to determine credit-worthiness or for lending purposes, or use it to develop, improve or train generalized AI or machine learning models.

Google API Services User Data Policy

Medor Health's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

People do not read your Google user data except with your explicit permission (for example, when you ask for help with your account), when necessary for security purposes such as investigating abuse, or to comply with applicable law.

How information is shared

We share information only with the service providers needed to run the app's features:

• Microsoft Azure hosts the app and its database in the United States.
• Anthropic generates the Daily Briefing. It receives only derived summary values (such as your readiness score and flagged trends), not your raw health records or your name or email address. Anthropic does not use this data to train its models.
• Pushover delivers notifications, only if you turn them on. Notification text includes a short summary of your readiness for the day.

We may also disclose information if required by law, or as part of a merger or acquisition, in which case this policy would continue to apply to your information.

Storage and security

Data is stored in a managed Azure SQL database. All connections to the app use HTTPS, OAuth refresh tokens and Pushover keys are encrypted at rest with AES-256-GCM, and application secrets are kept in Azure Key Vault. No method of storage or transmission is completely secure, but we take reasonable measures to protect your information.

Retention and deletion

• Disconnect Google Health at any time in Settings. This revokes the app's access with Google and deletes the stored refresh token. You can also remove access from your Google Account permissions page.
• Delete your account by emailing medorj@gmail.com from the address you sign in with. We will delete your account and all associated data, including synced health data, Activity Log entries and settings, within 30 days.
• Otherwise, we keep your data for as long as your account is active.

Children

Medor Health is not directed at children under 13, and we do not knowingly collect their information.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will be communicated in the app.

Contact

Email medorj@gmail.com with any questions about this policy or your data.