Last Updated: January 2025
Summary: BioStat processes your health data entirely on your device. We do not collect, store, or transmit your personal health information to any external servers.
1. Introduction
BioStat ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our BioStat application ("App") for Apple Watch and iOS devices.
By using BioStat, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Health Data (HealthKit)
With your explicit permission, BioStat accesses the following health data from Apple HealthKit:
- Activity Data: Step count, distance walked/run, flights climbed, active energy burned, exercise minutes, stand hours
- Heart Data: Heart rate, resting heart rate, heart rate variability (HRV), VO2 Max
- Sleep Data: Sleep duration, sleep stages (Core, Deep, REM), time in bed
- Body Measurements: Height, weight, biological sex, date of birth
Important: This health data is processed entirely on your device and is never transmitted to external servers.
2.2 Survey Data
BioStat collects lifestyle information through optional surveys, including:
- Smoking status
- Alcohol consumption
- Exercise habits
- Diet quality
- Stress levels
- Sleep habits
- Medical history (optional)
This survey data is stored locally on your device and used solely to calculate your personalized life expectancy predictions.
2.3 Purchase Information
If you subscribe to BioStat Pro, your purchase is processed by Apple through the App Store. We do not have access to your payment details. We only receive confirmation of your subscription status to unlock Pro features.
3. How We Store Your Data
3.1 Local Storage
All health data, survey responses, and prediction history are stored locally on your Apple devices using:
- Core Data (local database)
- UserDefaults (preferences)
- Keychain (secure storage)
3.2 iCloud Sync (Pro Feature)
Pro users can optionally enable iCloud sync to keep data synchronized across devices. When enabled:
- Data is encrypted end-to-end by Apple's iCloud infrastructure
- We have no access to your iCloud data
- You can disable sync at any time in Settings
4. How We Use Your Data
Your data is used exclusively to:
- Calculate your personalized life expectancy predictions
- Track changes in your health metrics over time
- Generate insights and recommendations
- Provide achievement tracking and gamification features
- Display watch complications with your countdown
We do not use your data for:
- Advertising or marketing
- Selling to third parties
- Research purposes
- Creating user profiles for external services
5. Data Sharing
We do not share your personal health data with anyone.
The only third-party services involved are:
- Apple HealthKit: For reading health data (with your permission)
- Apple StoreKit: For processing in-app purchases
- Apple iCloud: For optional data sync (if you enable it)
We have no analytics, tracking, or advertising SDKs in our app.
6. Data Retention
Your data remains on your device until:
- You delete the app
- You manually clear data in Settings
- You reset your device
If you use iCloud sync, data persists in your iCloud account until you remove it.
7. Your Rights
You have the right to:
- Access: View all data stored by BioStat in the app's Settings
- Correction: Update your survey responses at any time
- Deletion: Delete all your data through Settings > Privacy > Delete All Data
- Portability: Export your data using the app's export feature
- Revoke Permissions: Remove HealthKit access through iOS Settings > Privacy > Health
8. Children's Privacy
BioStat is not intended for users under 17 years of age. We do not knowingly collect data from children. The app's content and life expectancy predictions are designed for adult users.
9. Security
We implement appropriate security measures:
- All local data is protected by iOS/watchOS device encryption
- Sensitive data uses the iOS Keychain
- iCloud data is encrypted end-to-end by Apple
- The app requires device authentication (Face ID, Touch ID, or passcode)
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- Sending an in-app notification for significant changes
If you have questions about this Privacy Policy or your data, please contact us:
12. Legal Basis (GDPR)
For users in the European Economic Area, our legal basis for processing data is:
- Consent: You explicitly grant permission for HealthKit access
- Contract: Processing is necessary to provide the service you requested
- Legitimate Interest: Improving the app and providing support
13. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA. Since we do not sell personal information and process data locally, most CCPA provisions do not apply. However, you may still:
- Request disclosure of data practices (this policy)
- Request deletion of your data
- Not face discrimination for exercising your rights
Our Commitment: Your health data is sensitive. We built BioStat with privacy-first architecture specifically to ensure your personal information never leaves your control.