Privacy Policy — Personal OS Health

Last updated: 2026-08-21

Personal OS Health is a companion app for a self-hosted personal-os server. It is built for a single user: the person who runs the server. The developer operates no backend service and receives no data from anyone who installs this app.

What the app reads

With your explicit permission, the app reads exactly six data types from Android Health Connect: steps, sleep sessions, heart-rate variability (RMSSD), resting heart rate, heart rate, and exercise sessions.

This list is fixed in the app's manifest. The app cannot read any other Health Connect data type (nutrition, body composition, cycle tracking, blood glucose, and so on) — the permissions are simply not declared.

Where the data goes

The data is uploaded over HTTPS only to a single destination: the personal-os server whose URL you typed into the app yourself, and which you host and control. Authentication uses a device key that you issue on your own server. There is no other endpoint — no analytics, no crash reporting, no advertising SDKs, no third parties of any kind.

Daily check-ins you record in the app (energy, stress, mood, soreness, and an optional note) go to the same server, and nowhere else.

What is stored on the phone

The server URL, your device key, and sync bookkeeping (what has already been uploaded) are stored in the app's private storage. Raw heart-rate series are read for on-device display but only summary values are uploaded.

Deletion

• Uninstalling the app removes everything it stored on the phone and stops all syncing.
• Data already uploaded lives in your own server's database; you delete it there, because you are the operator.
• Health Connect permissions can be revoked at any time in Health Connect settings; the app then reads nothing.

Children

The app is an owner-operated tool for adults administering their own server. It is not directed at children.

Contact

henzardkruger@gmail.com