Privacy Policy

Purpose and data

Personal Health MCP is a private tool used only by its owner. It accesses Google Health activity, fitness, sleep, profile, settings and health-metric data solely to synchronize approved records, produce owner-requested summaries and maintain a private backup.

The tool may process steps, heart rate, sleep sessions and stages, exercise sessions without route coordinates, distance, active energy, resting heart rate, heart-rate variability, source provenance, timestamps, units and synchronization status.

It does not request medical records, reproductive or sexual health data, clinical notes, contacts, messages, photos or precise location. Data is not used for advertising, eligibility decisions, diagnosis, medication changes, emergency monitoring or sale.

Storage and sharing

The live query database is stored locally on the owner's Mac with restrictive permissions. Monthly compressed archives are stored in the owner's private Google Drive. OAuth credentials are stored in macOS Keychain. Google user data is not shared with third parties.

Google Health access is read-only. Google Drive uses per-file permission, so the tool can manage only backup files it creates or the owner explicitly opens with it.

Retention, deletion and security

Primary records and monthly archives are retained until the owner deletes them. Temporary local archives are deleted only after upload checksum and privacy read-back succeeds. Operational metadata contains status only and excludes measurements and credentials.

The owner can revoke Google access, disable synchronization, export retained records and delete the local database and Drive archives. Ordinary logs, source control, tests and screenshots exclude raw health measurements and credentials.

Contact

Questions about this personal tool can be sent to the support email displayed on its Google OAuth consent screen.