Privacy
Last updated September 17, 2026.
Who we are
HealthSync is published by Antoine Chalifour, sole proprietor (entrepreneur individuel),2 rue du Mont de Piété, 84000 Avignon, France, SIRET 980 818 850 00011, the data controller for everything described here. Write to hello@gethealthsync.ai for any question about your data.
What the app reads
HealthSync asks Apple Health for your workouts, and reads them from the last three months onwards: running, walking, cycling, swimming, hiking, rowing, elliptical, yoga, hiit, strength training, multisport, leg by leg. For each workout it reads its start, end, time zone, events such as laps and pauses, the device and app that recorded it, and its GPS route with altitude, speed and heading. Along with each workout, it reads these measurements:
- Heart: heart rate, heart rate variability, one-minute heart rate recovery.
- Breathing and blood oxygen: respiratory rate, blood oxygen saturation.
- Movement and distance: running speed, stride length, vertical oscillation, ground contact time, cycling speed, walking speed, step length, walking and running distance, cycling distance, steps, flights climbed.
- Power and cadence: running power, cycling cadence, cycling power.
- Energy and effort: active energy, resting energy, physical effort.
- Swimming and diving: swimming distance, swimming strokes, underwater depth, water temperature.
It never asks for your sleep, your weight, your nutrition, your cycle tracking or your medical records, and it never writes anything to Apple Health.
Your account
Your account is created with Sign in with Apple. HealthSync keeps the identifier Apple gives it, your email address if you chose to share it (it may be an Apple relay address), the date your account was created, and the date you agreed to send your health data. There is no password.
Your subscription
Every account starts with a free trial, and the server keeps the date it ends. If you subscribe to HealthSync Pro, the App Store handles the payment: HealthSync never sees your card, your billing address or your Apple account. What the server keeps is what Apple signs and sends it — the transaction identifier your subscription is known by across renewals, the product you bought, whether it came from the App Store, its sandbox or Xcode, and the dates it expires or was revoked. It is used for one thing: knowing whether your assistants may read your heart rate and your full history.
Why, and on what basis
Your data is used for one thing: storing your workouts so that you, and the AI assistants you connect, can read and analyse them. Heart rate and the other measurements are health data, so HealthSync relies on your explicit consent (Article 9(2)(a) of the GDPR). The app asks for it before anything leaves your iPhone. Withdrawing it means deleting your account, which you can do at any time from the app.
What we never do
HealthSync never sells your data, never uses it for advertising or marketing, never profiles you, never uses it to train AI models, never stores it in iCloud, and never shares it with anyone you did not connect yourself.
Your AI assistants
An assistant such as Claude or ChatGPT can read your workouts only after you approve it in the app. Each one receives its own access, which you can remove from the app's settings; it stops working at once. Once an assistant has read your workouts, what it does with them is governed by its own privacy policy:Anthropic's for Claude,OpenAI's for ChatGPT. HealthSync cannot delete what an assistant has already read.
Where your data lives
Your workouts and your account are stored by Google Cloud, in its Paris region (europe-west9), in France. Requests to the HealthSync API and this website pass through Cloudflare, which terminates the encrypted connection. Google and Cloudflare act as processors under their data processing agreements. Both are American companies: transfers outside the European Union are covered by the European Commission's standard contractual clauses. The assistants you connect may process what they read outside the European Union too.
Security
Your data is encrypted in transit and at rest. The tokens that give your iPhone and your assistants access are never stored as such: the server keeps only their SHA-256 hash, which is enough to recognise a token and useless to anyone who reads the database.
How long we keep it
Your workouts and account are kept for as long as your account exists. When you delete your account, they are deleted immediately; database backups, which are kept for seven days, are gone within seven days after that.
Your rights
You can delete your account and all your data from the app: Settings, Delete account. You can also ask to access, correct or export your data, or object to its processing, by writing tohello@gethealthsync.ai. If you believe your data is mishandled, you can complain to the CNIL, the French data protection authority:cnil.fr.
Not a medical device
HealthSync is not a medical device. Neither HealthSync nor the assistants reading your workouts diagnose, treat or prevent any condition. Ask a doctor about anything that worries you.
The waitlist
If you join the waitlist, the server keeps your email address and the date you joined. It is used to tell you the app is ready, and for nothing else. It is kept until the app ships, or until you ask for it to be removed.
Audience measurement
This site uses Cloudflare Web Analytics, which counts page views without a cookie and without following you anywhere. That is why there is no consent banner to dismiss.