Effective May 4, 2026
SavvyTrack is a health tracking app for people with chronic conditions. This policy explains what data the app handles, where it lives, and what we do (and don't do) with it. Plain language; we'll say up front what most policies bury at the bottom.
The short version:
Your data lives on your device. Optional iCloud sync uses your own iCloud account — we have no server. We don't sell your data, we don't share it with advertisers, we don't track you, and we don't have analytics. You stay in control.
SavvyTrack stores only the data you choose to log. That can include:
We do not collect: account credentials (the app has no login), your contacts, your location, your device identifiers, advertising IDs, or any data not directly entered into the app.
On your device. All entries, attachments, profiles, and preferences are stored locally in the app's database. The data never leaves your device unless one of the optional features below is on.
When iCloud sync is enabled, the app syncs your data to your own private iCloud database — accessible only to you, on devices signed into your Apple ID. We have no server and no access to your iCloud data. You can turn iCloud sync off at any time in Settings → Global → iCloud sync.
The app makes periodic snapshot backups in its own storage on your device. You can also choose an external folder (Files app, iCloud Drive, Dropbox, OneDrive, etc.) where the same backup snapshots are mirrored. That mirror happens via the standard iOS document picker — we never see those files.
Your data is used to render the app — show entries in your timeline, generate reports you choose to create, run adherence calculations, and so on. We do not use it to:
We have no analytics, no behavioral tracking, no telemetry. The app does not "phone home" except for the specific integrations described in this policy.
If you enable the Apple Health integration, the app requests read-only access to specific health types you authorize: sleep, heart rate, resting heart rate, blood pressure, blood glucose, oxygen saturation, body temperature, body mass, menstrual flow, workouts, step count, HRV, ECG, respiratory rate.
This data is read from Apple Health into your local SavvyTrack database. It stays on your device and (if iCloud sync is on) in your private iCloud database. The data is never sent anywhere else. You control which types are read in Settings → Profile → Apple Health, and you can revoke access at any time in iOS Settings → Privacy & Security → Health → SavvyTrack.
When SavvyTrack crashes or hits an unexpected error, we may receive a crash report containing technical metadata: stack trace, iOS version, device model, app version, the line of code where the crash occurred. Crash reports do not include your health data, entries, notes, attachments, or transcriptions.
We use this information solely to find and fix bugs. It is processed by a third-party crash reporting service (Sentry) under their privacy terms; we do not retain crash data longer than necessary to investigate the issue.
Crash reporting is enabled by default. If a future version adds an opt-out toggle, we'll surface it in Settings.
A future paid tier will offer AI-generated insights about patterns in your data — for example, suggested correlations between meals, sleep, and symptoms. The architecture is split between two paths:
This feature is opt-in only and individual generations are user-initiated — your data is not sent automatically or in the background. Until you opt in, no health data leaves the app for AI processing. When the AI tier ships we will update this policy with full details, and the in-app flow will require explicit consent before any data is sent.
You can generate reports (PDF) summarizing your data — for example, to share with a healthcare provider. The report is created on your device, saved locally, and shared only when you explicitly use the iOS share sheet to send it (email, AirDrop, Files, etc.). We never see or store the reports.
SavvyTrack is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has used the app, contact us and we'll provide guidance on removing any such data — though as the data lives only on the device, deleting the app or relevant entries removes it.
Parents and caregivers may use multi-profile to track health information for minor children in their care. The data still lives only on the parent's device under their control.
Because your data lives on your device, you have direct control. You can at any time:
California residents have the right to know what personal information is collected, request deletion, and not be discriminated against for exercising these rights. Because SavvyTrack does not collect personal information beyond what you enter and does not sell or share data with third parties, most CCPA mechanics are answered by your direct in-app control. For specific requests, contact privacy@savvytrack.app.
Washington residents have additional rights regarding consumer health data, including the right to confirm collection, delete data, and withdraw consent. SavvyTrack does not sell consumer health data. To exercise rights specific to MHMDA, contact privacy@savvytrack.app.
If you have data privacy rights under your local law (GDPR, PIPEDA, etc.) and want to exercise them, contact us at the email above. We'll respond within 30 days.
Your data is retained as long as you keep the app installed (and, if iCloud sync is on, in your iCloud database under your control). Deleting the app or signing out of iCloud removes the data from those locations. We do not retain backups of your data on our infrastructure — we have no such infrastructure.
The app's data is protected by standard iOS file-system protections and, when iCloud is involved, by Apple's iCloud security model. We do not run any servers that store your health data. The app makes no network requests except to: Apple's iCloud (when sync is on), Apple HealthKit (on-device, not over the network), and the crash reporting service described in § 5.
If we make material changes to this policy — for example, when the AI tier launches — we will update this page and note the new effective date at the top. We may also surface a notice in the app for significant changes. The latest version is always available at savvytrack.app/privacy.html.
For privacy questions, data requests, or anything else covered in this policy, email privacy@savvytrack.app. For general support and bug reports, email support@savvytrack.app.