Privacy Policy
Last updated 23 August 2026 · Healthyer is operated by MaeTara LLC.
The short version. Your health report is encrypted on your phone and is never uploaded. Before anything is sent for analysis, identifying details are removed on your device — and the app shows you what it removed. We hold your sign-in and nothing else about your health.
What we hold
Two things, and they are kept apart on purpose.
- Your account. When you sign in we store an email address and an account identifier through Firebase Authentication (Google LLC). If you sign in with Google, we receive the email address on that Google account. That is the entire account record.
- Nothing about your health. We operate no database of health information. Your report, the analysis of it, and your food preferences are stored only on your device.
What stays on your device
- The report file you add, encrypted with a key held in your device's secure hardware store (Keychain on iOS, the Android Keystore).
- The analysis produced from it, and any allergens or preferences you set.
None of this is transmitted to us or backed up to our systems. If you uninstall the app, it is gone.
What leaves your device, and when
One thing, and only when you add a report: the text of that report with identifying details removed. Removal happens on your phone before any network request. The app tells you what it removed, and lets you see the exact text that will be sent.
That text is sent to our own server function, which passes it to Anthropic PBC to produce the dietary summary, and returns the result to your phone. The text is not stored by us after the response is returned. Anthropic processes it as our service provider under their commercial terms and does not use it to train models.
Redaction is automated pattern-matching. It reliably removes structured details — names where the document labels them, addresses, dates of birth, phone numbers, email addresses, record numbers and postcodes — but it cannot guarantee that every name in every document layout is caught. This is why the app shows you the text before it is sent.
What we log
Our server function records the length of a request and the number of tokens processed, for cost and reliability. It does not log the content of your report or the analysis.
What we do not do
- No advertising, no ad networks, no data brokers.
- No analytics or tracking SDKs.
- No selling or sharing of personal information, and no "sharing" for cross-context behavioural advertising as defined under California law.
Service providers
- Google LLC (Firebase) — authentication, app-integrity checking, and hosting of this website.
- Anthropic PBC — produces the dietary summary from the redacted text described above.
Your choices
- Delete your report at any time from within the app; removing it deletes the encrypted file and the analysis from your device.
- Delete your account from the app's settings. This removes your authentication record. Because we hold no health data, there is nothing further for us to erase.
- Uninstalling removes everything stored on the device.
Children
Healthyer is not directed to children under 13, and we do not knowingly collect information from them.
Not medical advice
Healthyer helps you apply your own clinician's findings to food choices. It does not diagnose, treat, or replace professional medical advice. Talk to your clinician before changing how you eat because of anything the app says.
Changes and contact
If this policy changes materially we will say so in the app before the change takes effect. Questions: privacy@healthyer.app.