Privacy Policy

1. Summary

• We collect nothing. Lunium (the developer) does not receive, see, or store any information about you, your device, or your health data.
• Nothing leaves your phone unless you share it. Exported files only travel somewhere if you tap the iOS share sheet and choose a destination (AirDrop, Files, Messages, Mail, a third-party app, etc.).
• No accounts. The app has no sign-up, no sign-in, and no identifier tied to you.
• No third-party SDKs. No analytics, no crash-reporting service, no ad network, no attribution library.
• No tracking.The App Store privacy label for this app is "Data Not Collected."

2. What the app reads from HealthKit

When you grant Health access, iOS presents you with the list of categories the app wants to read. You may grant or deny each one. Today the app can read (read-only) the following, subject to your explicit HealthKit permission:

• Sleep: sleep analysis samples, heart rate, heart rate variability (SDNN), respiratory rate, blood oxygen saturation, Apple Watch sleeping wrist temperature.
• Activity: steps, active and basal energy burned, Apple Exercise Time, walking/running distance, cycling distance, swimming distance, flights climbed, and workouts.
• Workouts: workout metadata (activity type, duration, energy, distance), heart rate, running power, cadence, stride length, vertical oscillation, ground contact time, workout events, and workout routes (GPS coordinates stored by Apple Watch, when present).

The app never requests write access to HealthKit. You can review and change what the app can read at any time in iOS Settings → Privacy & Security → Health → Health Export Kit.

3. How the data is processed

After you choose a date range, a set of metrics, and an output format (Markdown or JSON), the app fetches the matching records from the HealthKit database on your iPhone, formats them into a file, and writes that file to the app's own sandboxed storage under Documents/Exports/. All of this happens on your device. There is no network round-trip of any kind during an export.

The exported file is only visible to you. iOS isolates it to this app's sandbox. It is not uploaded, synced, or mirrored by the app to any cloud service.

4. What the app stores locally

• Exported files in Documents/Exports/. These persist until you delete them from the Files app or uninstall Health Export Kit. They may contain any Health data you selected for the export, including precise GPS coordinates from workout routes.
• Export history metadata in the app's UserDefaults: the date range, selected categories, output format, filename, file size, and timestamp of each past export. This is used to populate the in-app History screen.
• App preferences in the app's UserDefaults: dark-mode toggle, anonymize-exports toggle, include-source-device toggle, and a version number that records whether you've completed first-run HealthKit authorization.

You can clear export history at any time from the in-app Settings screen ("Clear export history"). You can delete individual exported files from the Files app under On My iPhone → Health Export Kit → Exports. Uninstalling the app removes everything it has ever stored.

5. Sharing an export

When you tap Save on the success screen or Re-share on a history item, Health Export Kit presents the standard iOS share sheet with the exported file as the sole attachment. Whatever happens next is controlled by you and the destination you pick:

• If you AirDrop the file to another device, it goes directly to that device.
• If you save it to iCloud Drive, it is stored in youriCloud account under Apple's privacy terms — not ours.
• If you hand it to a third-party app (email client, messaging app, notes app, LLM client, etc.), the contents and handling are governed by that app's privacy policy. Health Export Kit has no visibility into what happens to the file after you share it.

Precise location note: workout route records include latitude, longitude, altitude, and timestamps down to the individual GPS fix. If your export includes workouts and you share it, you are sharing that location history with the recipient. The Anonymize exports toggle in Settings strips source/device identifiers from the file; it does not remove route coordinates, because those are the data.

6. Data we receive — none

Lunium does not operate any server that Health Export Kit connects to. The app makes no outbound network requests. It has no API key, no telemetry pipeline, and no remote config.

Because nothing is transmitted, there is nothing for Lunium to receive, log, sell, lose, subpoena, or accidentally expose. The app ships as a self-contained iOS binary and stops being dependent on us the moment it is installed.

7. Third parties

Health Export Kit uses only Apple-provided frameworks (SwiftUI, HealthKit, CoreLocation — for reading coordinates from Apple Watch workout routes — and the iOS share sheet). It embeds no third-party SDKs. It does not integrate with any analytics service, advertising network, error-reporting tool, or attribution provider.

Your interactions with the App Store, TestFlight, and iOS itself are governed by Apple's privacy policies, not ours.

8. Your rights & controls

• Revoke Health access:Settings → Privacy & Security → Health → Health Export Kit. You can disable any individual data type or all of them.
• Delete everything the app has stored:long- press the app icon and choose "Remove App → Delete App."
• Export & portability: the whole app is a data portability tool — everything you read is handed to you in an open format you can archive or move anywhere.
• Clear history: Settings → Access → Clear export history inside the app.

Because we do not collect, receive, or retain personal data on any server, we do not have a data-subject access, correction, or deletion process to operate — there is no dataset on our side. This is by design.

9. Children

Health Export Kit is not directed to children under 13. It does not knowingly collect information from anyone; however, because HealthKit data can be sensitive, we recommend that minors only use the app with the involvement of a parent or guardian.

10. Changes to this policy

If the app changes in a way that would affect this policy — for example, if a future version adds an optional cloud backup feature — we will update this page, change the "Last updated" date at the top, and mention the change in the app release notes. The live version of this policy is always the one at healthexportkit.lunium.io/privacy.

11. Contact

Questions about this policy or the app's handling of HealthKit data: [email protected].