Privacy Policy

1. Introduction

HealthArt ("we," "our," or "us") is a product of Frienteer Software Private Limited. We operate a personal health analytics platform that helps you store, organize, and track your health reports over time.

This Privacy Policy explains how we collect, use, store, and protect personal and health information when you use our application and services. By using HealthArt, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information

When you create and use a HealthArt account, we collect the following information:

• Email address: Collected when you sign in using Google Authentication. This is your primary identifier for account management and email-based report uploads.
• Name: Collected from your Google account to personalize your experience.
• Phone number (optional): You may provide your WhatsApp number if you choose to upload health reports via WhatsApp.

If you arrive through a referral link, we remember its code in your browser for up to 30 days and save it privately with a new account at signup. This helps us identify clinic referrals and campaign links. Referral codes do not give anyone access to your health reports.

2.2 Health Data

We collect health data from the reports you upload or import (through the app, WhatsApp, email upload, or Gmail Auto-Import). This information may include, but is not limited to:

• Laboratory results and vital measurements
• Patient demographic information from reports (age, gender)
• Laboratory and diagnostic center information
• Report metadata (report date, report ID, sample collection information)

2.3 Technical and Usage Information

We may automatically collect technical information such as browser type, device information, IP address, and general usage patterns to maintain security, troubleshoot issues, and improve our services.

3. How We Use Your Information

We use the information we collect to provide and improve the HealthArt service, including to:

• Process, analyze, and display your health reports and metrics in your dashboard
• Generate health trends, insights, and visualizations over time
• Extract structured health data from reports using automated processing systems
• Create and manage your account, authenticate access, and provide customer support
• Maintain security, prevent abuse, and protect against unauthorized access

We do not use your personal or health information for advertising or marketing, and we do not sell your data.

4. Data Storage, Security, and Access Controls

4.1 Cloud Storage

Your profile information, uploaded reports, and extracted health data are stored on secure cloud servers with appropriate access controls.

4.2 Encryption

We use industry-standard encryption for data in transit (SSL/TLS) and protect data stored in our cloud infrastructure using industry's best security practices.

4.3 Access Controls

Access to your data is limited to the minimum necessary for operating and securing the service. Your health information is processed automatically to extract report data, and we restrict human access to exceptional cases such as security, legal compliance, or when you request support.

4.4 Security Practices

• Secure authentication using Google Sign-In with OAuth 2.0
• Regular security updates and monitoring
• Secure API communications for uploads and data processing
• Layered access controls for internal systems

5. Email Upload and Gmail Auto-Import (Optional)

HealthArt offers optional ways to import health reports by email.

5.1 Email Upload Service

If you choose to upload reports via email, we access and download attachments from emails sent to our designated address (reports@healthart.in) to process these reports.

5.2 Gmail Auto-Import

Gmail Auto-Import is an optional feature designed to help you import health reports. If enabled by you, HealthArt receives and processes only emails that match a keyword-based Gmail filter.

5.2.1 How Gmail Auto-Import Works

• You set up a keyword-based Gmail filter in your Gmail account to forward matching emails to HealthArt's designated email address (reports@healthart.in).
• HealthArt receives and processes only emails forwarded through that filter configuration.
• We process report files/attachments from those filtered emails to import reports into your dashboard and retain limited technical metadata required for processing and deduplication.

5.2.2 Google API Limited Use and Privacy Commitments

HealthArt's use of data received from Gmail APIs complies with the Google API Services User Data Policy, including Limited Use requirements. For details, see Google's policy.

• We use Gmail-derived data only to provide Gmail Auto-Import and related report processing features.
• Gmail-derived data and imported health reports are not used for advertising, marketing, or training large language models.
• We process Gmail-derived data securely with encryption in transit and at rest, and restrict human access to limited security, legal, or user-authorized support scenarios.

5.2.3 Disabling Gmail Auto-Import

You can disable Gmail Auto-Import at any time:

• From Gmail settings, disable the auto-import setup by turning off forwarding and deleting the filter used for auto-import.
• Once forwarding is disabled, HealthArt will no longer receive new health report emails from Gmail through auto-import. Previously imported reports remain in your HealthArt account unless you delete them or delete your account.

6. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal information or health data. We use the following third-party services to provide specific features:

For a referral linked to a registered doctor account, you can choose to share an individual uploaded report and its original file with that doctor. We show the doctor's name and HealthArt ID before you decide. Other reports and future uploads are not included. You can revoke this access in Profile; copies already downloaded by the doctor cannot be recalled.

6.1 Google Authentication

We use Google Sign-In for secure authentication. When you sign in with Google, we receive your email address and name to create and manage your account.

6.2 WhatsApp Upload Service

If you choose to use the optional WhatsApp upload functionality, your health report files are temporarily stored on WhatsApp/Meta's servers during the upload and transmission process. Our system downloads these files, and they are deleted from Meta's servers after download. We then process the files and store them securely on our cloud servers.

6.3 Automated Report Processing

We use cloud infrastructure and AI services, including Google Gemini, to process uploaded reports and extract structured results. This requires sending report content to the processing service. Automated extraction can make mistakes; check important results against the original report. Human access is restricted as described in Section 4.3.

6.4 Third-Party Policies

• Google Privacy Policy
• WhatsApp Privacy Policy

We are not responsible for the privacy practices of third-party services.

7. Data Retention

We retain your personal information and health data for as long as your account is active or as needed to provide our services. You can delete your account at any time through your profile settings, which will permanently delete your data as described in Section 8.2.

8. Your Rights and Choices

8.1 Access and Update

You can access and update your profile information (display name, WhatsApp number) at any time through your account settings. You can view all uploaded and imported reports in your dashboard.

8.2 Account Deletion

You can permanently delete your HealthArt account at any time. When you delete your account:

• Your personal information (name, email, phone number) is permanently deleted.
• Your health data and uploaded or imported reports are permanently deleted.
• Your health analytics, trends, and visualizations are permanently deleted.
• This action is irreversible.

To delete your account, go to your Profile page and select "Delete My Account" in the Account Deletion section.

9. Children's Privacy

HealthArt is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International Data Transfers

Your information may be transferred to and stored on servers located outside of your country of residence. By using HealthArt, you consent to the transfer of your information to countries that may have different data protection laws than your country.

11. Cookies, Tracking, and Session Management

HealthArt does not use advertising cookies, tracking pixels, or cross-site tracking in the app. We use limited functional storage and session tools needed to keep you signed in and run core features.

We also measure limited visits to public pages. See our public-page analytics notice for details. No report content is sent through that public-page counter. You can sign out in the app, revoke access from your Google Account Permissions page, or clear your browser storage to remove session data.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy. If we make material changes, we will notify you by email or through a prominent notice on our website.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry as soon as possible, typically within 7 business days.

14. Consent

By using HealthArt, you consent to the collection, use, and storage of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.