Privacy Policy

Last updated August 2, 2026

Health Command is a personal, single-user iOS application. It is built and operated by an individual developer for the developer's own use, and this policy describes how the app handles data for that use.

What data the app reads

With the user's permission, Health Command reads the following from Apple Health (HealthKit) on the user's device:

• Body weight, body fat percentage
• Steps, active and resting energy, heart rate, resting heart rate, VO2 max
• Sleep analysis
• Mindful minutes and, where available, State of Mind (mood) entries
• Dietary energy, protein, carbohydrates, fat, and water intake
• Workout history

With the user's permission, the app also reads calendar availability (via EventKit) to identify realistic training windows, and — where the user has connected them — workout data from Strava and Garmin Connect via each service's official API.

How data is used

All of the data above is used only to generate that individual user's own coaching recommendations inside their own copy of the app: a daily execution score, training and recovery guidance, nutrition guidance, and AI Coach responses to the user's questions. Health Command does not use this data for advertising, does not sell it, and does not share it with any third party except as described below.

Where data is processed and stored

• Apple Health, calendar, and workout data is read directly from Apple's HealthKit and EventKit frameworks on the user's own device and is not uploaded to or stored on any server, except transiently as described below.
• When the user asks the AI Coach a question, a summary of the user's current health context (for example: score, recovery, sleep, training, nutrition, and — where set — mood, mindfulness, weight-goal pacing, and schedule availability) is sent to Health Command's backend and forwarded to Anthropic's Claude API to generate a response. This context is used only to generate that single response and is not retained by Health Command's backend beyond the request.
• OAuth access used to read Strava and Garmin Connect data is stored server-side only as required to maintain that connection on the user's behalf.

Third parties

Health Command's backend uses Anthropic's Claude API to generate AI Coach responses, and integrates with the Strava API and Garmin Connect API to read workout data the user has authorized. Each of these providers processes data under its own privacy policy and terms.

Data deletion

Because Health Command is a personal single-user app, data can be removed at any time by disconnecting a data source (Strava, Garmin Connect, or Calendar) in the app's Settings, or by revoking HealthKit permissions in the iOS Health app's Sharing settings.

Contact

Questions about this policy can be sent to privacy@gethealthcommand.com.