Privacy Policy
Effective: January 2025
Overview
WeaveHub builds local-first integrations. HealthSync HA uses Apple HealthKit on your device and sends data directly to your Home Assistant instance via a webhook you control. We do not operate a cloud service for your health data.
Data We Handle
- On-device: The iOS app reads selected HealthKit metrics with your consent.
- Sent to Home Assistant: Metrics you enable (e.g., heart rate, HRV, energy, hydration) are posted to your HA webhook endpoint.
- Not collected by WeaveHub: We do not receive or store your health data on WeaveHub servers.
- Account/Login (optional): If you create an account to save data (e.g., preferences, saved comparisons), we store only what is necessary to provide that feature (such as your login identifier and saved items). We do not store or sync HealthKit data.
Connectivity
- The iOS app posts JSON payloads to your configured Home Assistant webhook URL.
- No third-party analytics are embedded in the iOS app.
- App Store / TestFlight may collect standard crash/usage analytics per Apple policies.
Permissions
- HealthKit read access is requested only for metrics you select.
- Background delivery is used to push new samples promptly.
- Authentication is used only for saving and retrieving your own data (e.g., saved comparisons); no social login data is harvested.
Security
- Webhook communication uses HTTPS if your Home Assistant URL is HTTPS.
- Webhook IDs are generated per integration instance; protect them like a secret.
Retention & Control
- Health data remains in HealthKit and your Home Assistant storage; manage retention there.
- You can stop sync anytime by removing the integration or clearing the app’s settings.
Contact
Questions? Contact the maintainer via the project repository or your usual support channel.