Legal
Privacy Policy
HealthWizard records and reminds; it does not diagnose, prescribe, or recommend treatment. This policy explains what data the app and its server collect, how that data is used, and the choices you have.
Who we are
HealthWizard is developed and operated by Warky Devs. This policy covers the HealthWizard mobile app, its sync server, and the pages on this site. Questions can be sent to support@warky.dev.
Data we collect
Account data. Email address and credentials used to register, sign in, and maintain a session.
Health data you record. Medication and insulin schedules, dose logs, blood-glucose readings, symptoms, vitals, notes, emergency contacts, and related profile information you choose to enter.
Health Connect data (optional). If you enable it, HealthWizard reads heart rate and blood pressure entries from Android Health Connect to import into your history. This is read-only — HealthWizard never writes data back to Health Connect.
Device and sync data. Device identifiers and sync cursors needed to keep your data consistent across devices.
Diagnostics (opt-in). If you choose to submit a failed-sync bug report, it contains only aggregate failure metadata and device/app details (app version, OS version, device model) — never health records, sync payloads, authentication tokens, or profile data.
Biometric app-lock. If you enable the optional PIN or biometric lock, authentication happens on-device through the operating system. HealthWizard never receives or stores biometric data.
How we use your data
Data is used only to operate, secure, support, and improve HealthWizard, including internal analytics that support the product. Health data is never sold, rented, or shared for unrelated third-party purposes. This does not change HealthWizard's tracking-not-advice boundary: it does not use your data to generate a diagnosis or a treatment recommendation.
Where your data is hosted
Production data is hosted on PostgreSQL, primarily in South Africa, on infrastructure operated by Warky Devs. Expansion to other jurisdictions is a future, separately approved rollout that would establish the applicable data-residency and processing obligations before any data is hosted there.
How we protect your data
- Health data is encrypted on your device.
- Authentication tokens and encryption keys use secure, OS-level storage.
- All network traffic uses HTTPS; the app does not permit cleartext connections.
- Clients access health data only through the authenticated, authorised API — the database and backup storage are never directly reachable from the app.
- Synchronised data is scoped to its owning account.
- Clinical values are excluded from diagnostic and crash logs.
Data retention
Personal and health data, including backup copies, is retained for a maximum of five years unless a more specific legal obligation requires a shorter or longer period. Live data, sync tombstones, audit/security records, and backups are retained under this same cap.
Your rights
You can review and edit most of your information from within the app. You can request deletion of your account and data at any time — see the Delete my data page for how that works.
Sharing and disclosure
We do not sell or rent your data. We disclose data only where required to operate the service (e.g. hosting infrastructure) or where required by law. Sharing or exporting your health information to a third party (such as a caregiver or clinician) always requires your explicit consent.
Children's privacy
HealthWizard is not directed at children and is not intended for use by children without the involvement of a parent, guardian, or caregiver account. We do not knowingly collect data from children without such involvement.
Changes to this policy
If this policy changes materially, we will update the effective date above and, where appropriate, notify you in the app.
Contact us
Questions about this policy or your data can be sent to support@warky.dev.