Privacy Policy

At Infinity Global Solutions LLC ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal health information. This Privacy Policy explains how HealthSync AI ("the App") collects, uses, stores, and protects your data.

1. Information We Collect

We collect information to provide you with a personalized and intelligent health tracking experience. This includes:

• Personal Information: Name, date of birth, email address, phone number, and physical address.
• Health Information: Biometrics (height, weight, blood type), medical history, chronic conditions, medications, allergies, and lab results.
• Activity Data: Step count, exercise logs, nutrition inputs, and sleep patterns.
• Device & Usage Data: IP address, device type, operating system, and interaction metrics within the App.

2. How We Use Your Data

Your data is strictly used to improve your health journey and provide the services you requested. We use your information to:

• Generate your personalized HealthSync AI ID and health scores.
• Provide AI-driven insights, recommendations, and health coaching.
• Send medication reminders, appointment alerts, and hydration notifications.
• Enable telehealth connections and location-based nearby care searches.

3. Data Storage & Security

Security is our highest priority. Your data is stored in a managed, access-controlled production database and transmitted over encrypted connections. Access to health records is restricted to the systems and personnel that need it to operate the App, and every sensitive-record access is logged for security purposes. We do not publish specific cryptographic algorithm or compliance-certification claims here because we cannot verify or guarantee a specific named standard or independent audit outcome; instead, we describe our actual practices honestly and update this section if they change.

For Apple Health and Health Connect specifically: HealthSync AI only ever readsthe categories you explicitly grant (activity, vitals, body measurements, sleep, and workouts) — it never writes to, edits, or deletes data in Apple Health or Health Connect. That access is optional, and you can revoke it at any time from your device's health-permission settings or from DeviceSync inside the App, which also disconnects future syncing immediately. Because true background execution while the App is fully closed is not available in the current mobile build, newly recorded data is only pulled in when you open the App, bring it to the foreground, or tap "Sync Health Data" — it is not synced continuously in the background. Many vitals require compatible hardware (a wearable, sensor, or connected device); manual entry is always available as a fallback and is treated identically to synced data once saved.

4. Data Retention

HealthSync AI stores and retains user data to provide our services. We are not a no-retention service. Because the app's purpose is to act as a longitudinal personal health record, personal, health, activity, and device data is retained for as long as your account remains active. Historical entries are kept so that trends, scores, and AI insights work over time.

• Account Deletion: When you delete your account from your Profile settings, your profile and all associated records (health logs, vitals, medications, nutrition, activity and route data, appointments, notifications, promo redemptions, sessions, etc.) are permanently erased from our production database immediately, and your login sessions are revoked. The account record itself is anonymized into a tombstone (identifiers removed) rather than the row being dropped, precisely because the legally-required security-log and billing entries must stay unlinkable to a person. Deletion is irreversible.
• Deactivation vs Deletion: You may instead deactivate your account, which ends all active sessions and hides the account from use, while preserving the data so it can be restored if you return.
• Encrypted Backups: Residual copies of your data may persist in encrypted operational backups for a limited period (up to 30 days) after deletion, after which they are overwritten.
• Security, Access, and Audit Logs: Authentication events, consent records, and sensitive-record access logs are retained separately for security, abuse-prevention, and compliance purposes for up to 6 years, even after account deletion, and are not used for marketing or profiling.
• Billing and Transaction Records: Payment and subscription records are retained as required by tax and accounting law (generally 7 years) and are held by our payment processor as well.
• Synced Data: HealthSync AI keeps only the readings it has synced into your HealthSync record from Apple Health or Android Health Connect. Revoking permission in iOS/Android settings, or disconnecting from DeviceSync, stops future syncing immediately. You can also separately delete just your previously imported synced data (keeping manually-entered records) from DeviceSync, or delete your entire account, at any time. The originals always remain under your own control in Apple Health or Health Connect — HealthSync AI never writes to, edits, or deletes them.
• Strict Per-User Isolation: Synced and manually-entered health data is strictly scoped to your own account. It is never merged with, or visible to, any other user's records, and it is fully cleared from the app's local device storage when you sign out or switch accounts on a shared device.
• Export: You can export a copy of your synced and manually-entered health records (vitals, activity, sleep, and steps, along with your current consent status) as a JSON file at any time from DeviceSync.
• Anonymous/Aggregated Analytics: Data that has been de-identified and aggregated so it can no longer be linked to an individual may be retained indefinitely for product improvement.
• Enterprise/Employer Accounts: For members provisioned through an employer, school, or care organization, the organization's own contract or retention schedule may require records to be kept for a defined period; those records are governed by that agreement, and the organization is notified before bulk deletion.
• Shared Content: Content created in shared spaces (for example, group challenges the user started) may be retained in de-identified form so other participants' records stay intact.

If you wish to request deletion or have questions about our retention policies, please contact us at info@infinityslns.com.

5. Third-Party Sharing

We never sell your personal or health data to advertisers or data brokers, and health data is never used to target, personalize, or measure advertisements. Any advertising shown in the App is served independently of your health, activity, vitals, sleep, or workout data. We only share health information with third parties when absolutely necessary, such as:

• Healthcare providers, only when explicitly authorized by you.
• Secure cloud infrastructure providers hosting the App's database.
• Legal authorities if required by a valid subpoena or court order.

We also do not include actual health readings, vitals values, or other sensitive health content in application logs, crash reports, analytics events, or push notification text — those systems only ever see non-sensitive metadata (such as record counts, category names, or sync status), never the underlying health values.

6. Cookies and Tracking Technologies

We use essential cookies to maintain your logged-in session securely. We may also use anonymous analytics tracking to understand app performance and resolve crashes. You can manage your cookie preferences in your device settings.

7. Your User Rights

You have full control over your health data. You possess the right to:

• Access: Request a copy of all data we hold about you.
• Export: Download your records and HealthSync ID anytime.
• Deletion: Permanently delete your account and all associated health data.

8. HIPAA Awareness

While HealthSync AI acts as a personal health record (PHR) and may not be fully subject to the Health Insurance Portability and Accountability Act (HIPAA) as a covered entity in all use cases, we voluntarily adhere to HIPAA-aware security protocols and best practices to ensure your data remains confidential and secure.

9. Children's Privacy

HealthSync AI is not intended for use by individuals under the age of 18 without parental consent. We do not knowingly collect personal information from children.

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect new features or legal requirements. We will notify you of any material changes via email or an in-app alert.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact our privacy team:

Email: info@infinityslns.com
Infinity Global Solutions LLC