Privacy Policy

Last updated: 16 July 2026

OneRoof Health is a personal health companion: a private place to keep medical records, medicines, reminders and health measurements for you and family members you manage, with an optional AI assistant. This policy explains what we collect and how it is used.

What we collect

• Account data: your email address and sign-in identifiers (email/password or Google sign-in).
• Health data you add: records and report files, medicines and schedules, reminders, appointments, allergies, conditions, measurements (e.g. blood pressure, weight), doctors, and medical-record numbers — for your profile and any family profiles you create.
• Assistant conversations: your chats with the AI assistant, stored so you can continue them.
• Device data for notifications: if you allow notifications, a push token with basic device info (platform, model, app version, language and timezone) so reminders and service messages can reach your device. Removed when you sign out or delete your account.
• Technical data: crash reports (scrubbed of health content and identifiers other than an internal ID) and basic usage metadata needed to run and secure the service.

How your data is used

• To provide the service: storing and showing your records, sending your reminders, generating your summaries and charts.
• To answer your assistant questions: relevant parts of your data (e.g. your medicines, recent readings, an attached report) are processed by trusted cloud AI infrastructure to generate the answer you asked for.
• We do not sell your data, and we do not use it for advertising.

Sharing

Your data is shared only when you choose to share it: inviting a family member, granting access to a profile, creating a time-limited “show to doctor” link, exporting a file, or connecting an integration such as WhatsApp or Health Connect. We use service providers (secure cloud hosting, cloud AI processing, crash reporting, push-notification delivery) strictly to operate the app.

Health Connect (Android)

OneRoof Health can optionally connect to Android Health Connect so you can bring vital-sign readings you already have on your device into your OneRoof Health record, keeping everything in one place. This connection is entirely optional and only happens after you tap “Connect Health Connect” and grant permission in the Health Connect screen.

• What we read: only these vital signs — weight, blood pressure, heart rate, oxygen saturation (SpO₂), blood glucose, and body temperature. We request no other Health Connect data.
• Access type: read-only. We never write to or modify data in Health Connect.
• How it is used: the readings are saved as measurements in your own OneRoof Health record so you can see them alongside your other health data. They are used only for this feature.
• How it is handled: data read from Health Connect is stored with your other health data (encrypted in transit, access-controlled) and is never sold, never used for advertising, and never shared with third parties for their own purposes.
• Turning it off: you can disconnect any time in the app, or revoke access in Android’s Health Connect settings. Deleting your account removes any imported readings along with the rest of your data.

Our use of information received from Health Connect adheres to the Google Play User Data policy, including the Limited Use requirements.

Storage and security

Data is stored on secured cloud infrastructure, encrypted in transit, with row-level access controls so each account can only reach the profiles it has been granted. Doctor-share links use unguessable tokens and expire automatically (15–30 minutes).

Your rights and controls

• Export: download all your data as a file from Settings → Privacy & data.
• Delete: permanently erase your account and all its data from the same screen — effective immediately.
• AI opt-out: turn the AI assistant off any time in Settings → Privacy & data.
• Notifications: disable them in your device settings at any time; signing out removes your device from our push registry.
• Access control: change or revoke family-member access whenever you like.

Not medical advice

OneRoof Health is an informational organiser, not a medical device. The assistant provides general information only and never a diagnosis or prescription. Always consult a healthcare professional about medical decisions, and seek emergency care for urgent symptoms.

Children

Accounts are for adults. Family profiles for minors are created and controlled by the responsible adult account holder.

Changes & contact

We will update this page when the policy changes. Questions or requests: support@oneroofhealth.com.