LifeLine Privacy Policy

Effective August 13, 2026

LifeLine is a personal wellness app designed to work locally on iPhone and Apple Watch without an account, server, or network connection. It is not a medical device, diagnosis, treatment, or emergency monitor.

Apple Health and Apple Watch

If you grant Health access, LifeLine reads the HealthKit categories described in its permission screen to show local wellness trends, freshness, recovery, activity context, sleep, heart and breathing metrics, oxygen, body measurements, and physiological strain. HealthKit access is read-only. Missing or partial history is shown as unavailable or sparse rather than treated as zero.

Raw HealthKit samples stay within the LifeLine app family. LifeLine does not use health or fitness data for advertising, marketing, tracking, or unrelated analytics, and does not store personal health information in iCloud.

The Apple Watch app writes a small versioned display snapshot to the shared LifeLine App Group so its complication can show bounded cached evidence. Notification previews use generic wording and do not expose exact measurements on the Lock Screen.

Optional external sync

External sync is Off by default. Saving or importing a configuration does not enable it. If you explicitly configure an HTTPS server and enable sync, LifeLine sends a bounded summary containing activity and workouts, heart and breathing metrics, sleep, oxygen, blood pressure, glucose, body measurements, temperature, daylight, recovery, and strain. Raw HealthKit samples are not sent.

The destination server is the HTTPS origin you configure. Its retention and deletion practices are controlled by that server’s operator. When the configured destination is David Freiholtz’s personal LifeLine receiver, request support at the address below to request deletion of retained LifeLine summaries. Disabling sync stops future transmissions; deleting the credential removes it from LifeLine’s Keychain storage.

Local storage and credentials

LifeLine stores preferences, marker history, and bounded derived snapshots locally on your devices. External-sync credentials stay in the device Keychain and are not displayed or logged. Deleting LifeLine removes its local app data, subject to normal Apple platform backup and app-deletion behavior.

Your choices

You can deny or revoke Health and notification access in Apple Settings. You can keep external sync Off, disable it at any time, and delete its credential from LifeLine Settings. Core local presentation remains available with limited or missing evidence.

Contact and deletion requests

For support, privacy questions, or deletion requests concerning David Freiholtz’s personal LifeLine receiver, email david@davidfreiholtz.com. Do not email health measurements or other sensitive medical details.