Before you use the app, you review and accept a HIPAA-style privacy notice, a medical-use disclaimer, and our Terms. Your acceptance is stored with a timestamp and the notice version. You can withdraw consent by deleting your account from Settings → Privacy.

All traffic between your device and HealthNaviq uses TLS 1.2+. Your health records, uploaded documents, notes, and connected-service data are stored in our managed database with disk-level encryption (AES-256) and row-level security scoping every read to your account.

OAuth access and refresh tokens for connected services (e.g. Google Health, Dexcom) are stored encrypted server-side, never exposed to the browser, and used only from server code to sync data you have explicitly connected. Disconnecting an integration deletes the stored tokens.

Reads, exports, sharing, and administrative actions on protected health information are recorded in an append-only audit log. You can review your own access log from Settings → Privacy. Administrative actions are recorded separately in an admin audit log.

Every table enforces row-level security so users can only see their own data by default. Family/care access is granted via explicit, revocable invites at one of four levels (Emergency, View, Manage, Full). Admin capabilities require a role stored server-side in a separate roles table and cannot be self-assigned.

We request the smallest set of permissions and scopes needed to power a feature you turned on. Read-only wherever possible. Connected-service data is limited to what appears on your dashboards and reports.

You can export or delete your data from within the app. Disconnecting an integration removes the tokens immediately and its imported data within 30 days. Deleting your account removes personal data on the same schedule, subject to legal retention obligations.

HealthNaviq helps you organize your health information. It does not diagnose, treat, cure, or prevent any disease and is not a replacement for advice from a licensed clinician. In an emergency, call your local emergency number.