Our Principle
Your health data belongs to you. We use your data to provide Trackspan, to help you understand your own information, and to operate the service. We do not sell your health data.
Information We Collect
We collect account information such as your name, email address, and authentication identifiers. We also collect health information that you enter, upload, import, or authorize Trackspan to access.
- Measurements, notes, lab values, biomarkers, and health history you add.
- Uploaded files such as lab reports and health documents.
- OCR output, extracted text, extracted measurements, and review state from uploads.
- Connected-source data from Apple Health, Oura, and similar services when you explicitly authorize access.
- Wearable provenance such as provider, source app, device, sync timestamps, sync status, and import metadata.
- Usage and diagnostic information needed to keep the product reliable and secure.
Connected Sources
Trackspan imports connected-source data only after you grant permission. Apple Health import is read-only. Trackspan does not write data back to Apple Health. Oura import uses the permissions you authorize through Oura.
For the current Oura integration, Trackspan may request access to profile or personal data, daily summaries, heart rate, workouts, SpO2, and related sleep or recovery signals when available from approved scopes. We store source labels and sync details so you can understand where a data point came from.
How We Use Information
- To provide health timelines, dashboards, visualizations, and search.
- To import, normalize, and display health data with source provenance.
- To power AI-assisted summaries, chat, and data-entry workflows.
- To process OCR uploads and help review extracted health data.
- To support practitioner sharing only when you explicitly authorize it.
- To debug, secure, and improve Trackspan.
What We Do Not Do
- We do not sell your health data.
- We do not share your health data with advertisers.
- We do not use your health data to train AI models without explicit opt-in.
- We do not use Oura data to train, fine-tune, evaluate, or improve AI models.
- We do not use Oura data for advertising, marketing, benchmarking, or competitive analysis.
- We do not connect to Apple Health, Oura, or similar services without your permission.
AI Assistance
Trackspan may use AI providers to help summarize, organize, or explain information you choose to process in the app. AI-generated output is informational and may be incomplete or incorrect. Trackspan is not a medical provider and does not provide diagnosis, treatment, or emergency services.
Oura data imported through the Oura API is used to provide Trackspan's connected-source features and is not used to train, fine-tune, evaluate, or improve AI models.
Service Providers And Integrations
We use service providers for authentication, hosting, backend data storage, file storage, AI processing, diagnostics, and connected-source integrations. These providers may process information only as needed to provide their services to Trackspan. Connected-source providers such as Apple and Oura also apply their own terms and privacy policies.
Security And Access Controls
We use encryption in transit, authentication, authorization controls, least-privilege access, and audit-oriented operational practices to protect health data. Engineering access to user health data is limited to operating, debugging, securing, or supporting the service.
Your Controls
- You can disconnect connected sources.
- You can request export of your data.
- You can delete data and request account deletion.
- You can revoke practitioner access where practitioner sharing is enabled.
If you revoke consent for a connected source, Trackspan will stop new collection and processing for that source. If you request deletion of Oura data imported into Trackspan, we will delete that Oura data from active Trackspan systems within 72 hours, unless a longer period is required by law.
Retention
We retain account and health data while your account is active or as needed to provide the service. If you disconnect a source, future syncs stop, but previously imported data may remain until you delete it or request deletion. Backups and logs may persist for a limited period for security, reliability, and disaster recovery.
Legal Requests
If we receive a legal request for your information, we will disclose only what we believe is legally required and will attempt to notify you unless we are prohibited from doing so.
Changes To This Policy
We may update this policy as Trackspan evolves. If changes are material, we will provide reasonable notice through the product, email, or this website.
Contact
Questions about this policy or your data can be sent to privacy@trackspan.ai.