Privacy policy
Last updated: October 14, 2026
This policy explains what the Magey Health app for Android and iPhone, and this website, do with your information. Magey Health is operated by Magey Health (“we”, “us”). If anything here is unclear, write to test@test.com.
The short version
- The health data the app reads from Health Connect (Android) or Apple Health (iPhone) stays on your phone. Our server never receives it.
- Our server keeps your account, your profile, your settings, your goals and the activities you log with Start and Stop, including a small summary of each one.
- We do not sell your data, we do not show ads, and we never use your health data for advertising or marketing or share it with anyone.
- You can export your data and delete your account at any time, in the app or on this website.
1. Health data we read
Magey Health gets your health data from the health store on your phone: Health Connect on Android, Apple Health on iPhone. That is where your watch, tracker and health apps share their data. You decide which of the types below the app may read, on the system’s own permission screen, and you can change that at any time. The app works with any subset; parts of the app without access stay empty.
On Android: Health Connect
| Data type | Access | What we use it for |
|---|---|---|
| Heart rate | Read | The heart-rate lane on the day map, the value under the cursor, heart-rate zones for workouts, your lowest heart rate during sleep, and the live workout screen. |
| Resting heart rate | Read | The resting heart rate tile and its day, week and month views. |
| Steps | Read | The steps lane, step totals and goals, and cadence during a workout. |
| Distance | Read | Distance totals and the distance goal. |
| Total calories burned | Read | The calories lane, calorie totals and the calorie goal. |
| Active calories burned | Read | Calories when your watch or tracker does not share total calories. |
| Floors climbed | Read | The floors lane, floor totals and the floors goal. |
| Sleep sessions (with stages) | Read | The sleep page (stages, time asleep, bed and wake times) and the sleep lane on the day map. |
| Exercise sessions | Read and write | Reading: the workouts lane and your list of recent activities. Writing: when you log an activity with Start and Stop, the app saves it to Health Connect so your other health apps can see it. |
| Weight | Read | To fill in your profile when you have not entered a weight, and, with height, age and sex, to estimate resting calories on your phone. |
| Height | Read | To fill in your profile when you have not entered a height. |
Where your phone’s version of Health Connect offers them, the app may also ask, separately and optionally, to read data older than 30 days (so your charts can go further back) and to read in the background (so data is up to date when you open the app). The app works without them. You can change access at any time in Health Connect’s settings.
On iPhone: Apple Health (HealthKit)
| Data type | Access | What we use it for |
|---|---|---|
| Heart rate | Read | The heart-rate lane on the day map, the value under the cursor, heart-rate zones for workouts, your lowest heart rate during sleep, and the live workout screen. |
| Resting heart rate | Read | The resting heart rate tile and its day, week and month views. |
| Steps | Read | The steps lane, step totals and goals, and cadence during a workout. |
| Walking and running distance | Read | Distance totals and the distance goal. |
| Cycling distance, swimming distance | Read | The distance of cycling and swimming workouts. |
| Active energy, resting energy | Read | Added together: the calories lane, calorie totals and the calorie goal. |
| Flights climbed | Read | The floors lane, floor totals and the floors goal. |
| Sleep analysis (with stages) | Read | The sleep page (stages, time asleep, bed and wake times) and the sleep lane on the day map. |
| Workouts | Read and write | Reading: the workouts lane and your list of recent activities. Writing: when you log an activity with Start and Stop, the app saves it to Apple Health as a workout so your other health apps can see it. Workouts are the only data the app writes to Apple Health. |
| Weight | Read | To fill in your profile when you have not entered a weight. |
| Height | Read | To fill in your profile when you have not entered a height. |
| Date of birth, biological sex | Read | To suggest your year of birth and sex during setup. Only the year of birth is used, and you can change both before you continue. |
Apple does not tell apps which types you allowed them to read: if you turn a type off, the app simply sees no data for it. You can change access at any time in the Health app (tap your profile picture, then Apps, then Magey Health). When Apple Health has new heart rate, steps, sleep or workout data, iOS may wake the app in the background (about once an hour) so your data is up to date when you open it and the app can tell you when you reach a goal. Section 7 describes the extra rules we follow for Apple Health data.
Where this data lives
The app reads Health Connect or Apple Health on your phone and keeps a private copy in its own storage on your phone, so screens open quickly and work offline. On iPhone this copy sits in a storage area that is not included in iCloud or computer backups. Raw health records (heart-rate samples, steps, sleep stages, workouts from other apps, daily totals) are never sent to our server, and they are never written to our logs or crash reports. The copy on your phone is removed when you sign out or uninstall the app.
Two things derived from your health data do leave your phone, both described in section 3:
- the summary of an activity you log yourself with Start and Stop (average and maximum heart rate, steps, distance, calories, cadence and time in each heart-rate zone during that activity);
- your height and weight (and, on iPhone, your year of birth and sex), if the app fills them into your profile from Health Connect or Apple Health. You can change or clear them in Settings → Profile.
2. Where your data came from (data sources)
With each record, Health Connect and Apple Health tell the app which app wrote it and, when available, which device recorded it (for example Strava, or the model of your watch) and whether it was entered by hand. The app uses this to label your data (“Run · Strava”), to show which apps and devices share data with it, and to let you choose a preferred source for each kind of data. This information stays on your phone like the rest of your health data, with these exceptions:
- Your preferred source for heart rate, steps, calories, floors, sleep and workouts is saved with your preferences on our server, as that app’s identifier (for example “android:com.strava”), so it follows you to a new phone.
- If you choose to show another app’s recording of the same workout together with an activity you logged, the activity log on our server keeps that app’s identifier and the id of its record, not its data.
- When the app meets an app it cannot name, it may send us that app’s identifier and platform (for example “android” and “com.example.fitapp”) so we can add the name for everyone. These reports contain nothing else: no health values, no times, no device names. We store them without any link to your account: only the identifier, the platform, how many times it was reported, and when it was first and last reported. To prevent abuse, we count how many reports each account sends per day; that count is deleted after two days.
Personal device names (such as “Sam’s Apple Watch”) are shown only in Settings → Data sources in the app. They are not included in exports or on screens meant for sharing.
3. What our server stores
| Information | Where it comes from | Why we keep it |
|---|---|---|
| Account: account id, email address, name, profile picture link | Your Apple, Google or email sign-in, through Clerk (see section 4) | To sign you in, on the app and on this website, with one account |
| Your phones: whether you use the app on Android, iPhone or both, the app version, and when it last connected | The app, when it connects | To support both platforms and to know which app versions are still in use |
| Time zone | Your phone | So that your days start and end at your local midnight |
| Profile: first name, year of birth, sex, height, weight, the activities you do, how often you work out, what matters most to you, and how far you got in the setup steps | You, during setup or in Settings (some values may come from Health Connect or Apple Health, see section 1) | To suggest goals, work out heart-rate zones and estimate calories on your phone, and to keep your profile when you reinstall or change phones |
| Preferences: units, theme, first day of the week, which layers the day map shows, whether it shows data sources, notification settings, and your preferred data source for each kind of data | You, in Settings | To keep the app the way you set it up |
| Goals: each goal’s target and whether it is on | You | To show your progress and keep your goals across devices |
| Activity log: for each activity you log with Start and Stop, its type and name, start and end time, paused time, time zone, markers and notes, the id of the matching Health Connect or Apple Health record, the identifiers of other apps’ recordings you chose to show with it, and the summary described in section 1 | You, and your phone when you press Stop | To keep your own log of workouts across reinstalls and devices |
| Plan: which plan you are on (everyone is on the free plan; we hold no payment details) | Us | To know which features your account has |
| Deletion requests: account id, email address, and when deletion was asked for and completed | You, when you delete your account | As proof that we deleted your data when you asked |
| Reports of apps the app could not name: the app identifier and platform, how often and when it was reported. Not linked to your account | The app (see section 2) | To show app names instead of identifiers |
Like any website, our hosting provider processes technical request data (IP address, device and browser type, time of the request) to deliver the service and protect it from abuse. Our own error logs record what failed, not what you sent.
4. Signing in with Apple, Google or email
You can sign in with Apple, with Google, or with a code we send to your email address. Sign-in is run for us by Clerk, and the same account works on Android, on iPhone and on this website.
- Sign in with Apple: Apple shares your name (only the first time you sign in, and only if you choose to) and an email address with us. If you choose Hide My Email, Apple gives us a private relay address (ending in @privaterelay.appleid.com) that forwards to your real inbox. We use it like any other email address and never see your real one. You can stop using Sign in with Apple for Magey Health in your Apple Account settings, under Sign in with Apple; that does not delete your Magey Health account (see section 9).
- Google: Google shares your name, email address and profile picture with us.
- Email code: we only use your email address to send you the code and to identify your account.
5. How we use your information
- To provide the app and website features you use, and to show your information back to you.
- To keep your settings, goals and activity log in sync when you reinstall or use another phone.
- To keep the service secure and working, for example to stop abuse.
- To answer you when you contact us.
We do not sell your information. We do not use it for advertising or marketing, or to build advertising profiles. We do not use health data, or anything derived from it, to decide on credit, insurance or employment, and we do not use it to train AI models.
6. Health Connect and the Limited Use requirements
Magey Health’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements, and to the Google Play User Data policy. In practice that means:
- We use Health Connect data only to show it to you and to provide the features you see in the app.
- We do not transfer it to anyone, except as needed to provide those features (for example the activity summary stored on our server), to comply with the law, or as part of a merger or sale of the service, in which case we will tell you first.
- We do not use or transfer it for advertising, and we do not sell it.
- No person reads it unless you ask us to (for example in a support request), it is needed for security or to comply with the law, or it has been made anonymous and combined with other data.
7. Apple Health (HealthKit)
For data the app reads from Apple Health on your iPhone:
- We use it only to provide the health and fitness features you see in the app.
- We never use it, or anything derived from it, for advertising, marketing or similar data mining, and we never sell it.
- We never share it with third parties, including advertising platforms, data brokers and information resellers. The only things derived from it that reach our server are the activity summary and the profile values described in section 1; the service providers in section 8 store them for us and do nothing else with them.
- We never store it in iCloud. The app’s copy on your iPhone is kept in a storage area that is not backed up to iCloud or to a computer, and iOS may clear it when storage runs low; the app then reads the data from Apple Health again.
- It is never written to our logs or crash reports.
8. Who helps us run the service
These companies process data for us, only to run Magey Health and only on our instructions:
- Clerk: sign-in and account management (email address, name, profile picture, sign-in records).
- MongoDB Atlas: hosts the database that holds the server data listed in section 3.
- Vercel: hosts this website and the API the app talks to.
Health Connect is part of Android and is run by Google; Apple Health is part of iOS and is run by Apple. Data you keep there is covered by their terms and privacy policies. If you sign in with Google or Apple, that company also processes the sign-in (and, for Hide My Email, forwards emails to you). These providers may process data in countries other than yours, including the United States, under safeguards such as standard contractual clauses. We share information with no one else, unless the law requires us to.
9. Your choices and rights
- Health data access: turn any data type on or off at any time, in Health Connect’s settings on Android, or in the Health app on iPhone (profile picture → Apps → Magey Health).
- Data sources: choose or reset your preferred source for each kind of data in Settings → Data sources.
- Edit: change your profile, goals and preferences in the app, and your name and email in Settings → Account.
- Export: Settings → Export my data gives you a file with your profile, preferences, goals and activity log from our server (including activities you deleted, marked as deleted), plus the daily totals kept on your phone.
- Delete a single activity: delete it in the app. We mark it as deleted so it disappears on all your devices; the record itself is removed when you delete your account.
- Delete your account: in the app under Settings → Delete account, or on this website at https://magey.nafiu.dev/account/delete. This permanently deletes your account, profile, preferences, goals and activity log from our server and deletes your sign-in account at Clerk. It does not delete anything in Health Connect or Apple Health: that data stays on your phone, where you can manage it in the Health Connect app or the Health app.
Depending on where you live (for example in the EU, the UK or California), you have the right to access, correct, delete or receive a copy of your information, and to object to or restrict how we use it. The app gives you most of these directly; for anything else, email test@test.com. You can also complain to your local data protection authority. Where the GDPR applies, we process your information to provide the service you signed up for, with your explicit consent for health data (given through Health Connect or Apple Health permissions and by logging activities, and withdrawable at any time), and in our legitimate interest in keeping the service secure.
10. How long we keep it
- Server data is kept while your account exists.
- When you delete your account, it is removed from our database straight away. Encrypted backups kept by our database provider expire within 30 days.
- The record of a deletion request is kept as proof that the deletion happened, and so that the deleted account isn't created again by changes the app sends late.
- Data on your phone stays until you sign out or uninstall the app (on iPhone, iOS may clear the app’s copy earlier when storage runs low). Health Connect and Apple Health data stays where it is.
- Reports of apps the app could not name are kept while they help us maintain the list of app names; they are not linked to anyone. Daily report counts per account are deleted after two days.
- Technical request logs are kept by our hosting provider for a short period for security.
11. Security
All traffic between the app, this website and our server is encrypted (HTTPS). Only our server can reach the database. Your sign-in token is kept in your phone’s secure storage. Health samples are never written to logs or crash reports. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.
12. Children
Magey Health is not for children under 13 (or the minimum age for this kind of service in your country, if higher). The app does not accept a year of birth for anyone younger than 13. If you think a child has an account, contact us and we will delete it.
13. Not a medical service
Magey Health shows observations about your data. It does not diagnose or treat anything and is not a medical device. See the terms of use.
14. Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use your information in a meaningful way, we will tell you in the app before it applies.
15. Contact
Magey Health
Postal address to be added
test@test.com