# Privacy Policy for Health AI Report

**Effective Date:** September 20, 2026

Thank you for choosing Health AI Report (also known as AI健康报告 / AIヘルスレポート / etc.). We are committed to protecting your personal information and your right to privacy. 

This Privacy Policy explains what information our application collects, how it is used, and how it is shared. **Please read this policy carefully.**

## 1. Apple Health Integration (HealthKit)
Health AI Report utilizes Apple's HealthKit framework to read your health and activity data (such as Steps, Sleep analysis, and Heart Rate) to provide you with AI-driven health insights. 
* **Data Processing:** Your health data is read locally on your device. We (the Developers) do not collect, store, intercept, or transmit your health data to our own servers. 
* **Your Control:** You have full control over what data Health AI Report can access, and you can manage or revoke these permissions at any time via your device's Apple Health settings.

## 2. Our "Bring Your Own Key" (BYOK) Model
Health AI Report operates strictly as a local client application. We utilize a "Bring Your Own Key" (BYOK) architecture. This means the app does not rely on our own backend AI servers. Instead, it requires you to input your personal OpenAI API Key to function. 

**Because of this architecture, we (the Developers) DO NOT collect, store, intercept, or have any access to your personal data, API keys, or health information.**

## 3. What Data Is Sent and To Whom?
To provide you with health summaries and smart insights, the app must process your selected health metrics.

* **What data is sent:** Your daily activity metrics (e.g., step count, sleep duration, heart rate summaries) read from Apple Health.
* **Who the data is sent to:** The data is transmitted **directly** from your device to **OpenAI, L.L.C.** via their official API. 
* **API Key Storage:** Your personal OpenAI API Key is stored securely and locally on your device's Keychain. It is never transmitted to the developer or any third party other than OpenAI directly.

## 4. Third-Party Data Protection (OpenAI)
When you use Health AI Report, your health metrics data sent to OpenAI are subject to OpenAI’s privacy and data usage policies. 

We confirm that our integration relies entirely on OpenAI's enterprise-grade API services. According to OpenAI's official API data usage policies, data sent via their API is **not** used to train their generative AI models by default. 

OpenAI provides data protection standards that are equal to or stricter than those outlined in this policy. For more detailed information on how OpenAI handles your data, please review the [OpenAI Privacy Policy](https://openai.com/policies/privacy-policy).

## 5. User Consent
We require your explicit permission before sending any of your personal data to OpenAI. 
Upon entering your API Key in the app for the first time, you will be presented with a clear disclosure statement. You must actively consent to the transmission of your health data to OpenAI before you can use the AI summary features. Additionally, you must explicitly grant Apple Health permissions before the app can read any health data.

## 6. Data Retention
Because we do not collect or store your data on any external servers managed by us, we do not have a data retention policy for user data. All your health reports and API keys remain strictly on your local device. If you delete the app, this local data will be removed from your device.

## 7. Contact Us
If you have any questions or concerns about this Privacy Policy or our practices regarding your personal information, please contact us at:

* **Email:** [puyue2023@gmail.com]