Health information stays owner-controlled.

Scope

HealthTrack is a private two-person service for Christian and Kerri. It is not an Australian healthcare provider, My Health Record portal or emergency-monitoring service.

Information processed

The service can process Google account identity, owner-entered health background, symptoms, wearable and workout summaries, nutrition summaries, care-plan activity, uploaded health documents, verified lab values, notification subscriptions and questions submitted to its AI explanation feature.

Access and sharing

Sign-in is restricted to two explicitly allow-listed Google email addresses. Each owner sees their own detailed record. Partner summaries remain off until the record owner explicitly enables them.

Fitbit and Google Health

Fitbit summaries are retrieved through Google Health only after each owner separately grants read access to activity, health-metric and sleep data. HealthTrack verifies that the consenting Google account matches the signed-in owner, encrypts the resulting tokens and stores daily summaries rather than granular intraday readings. Disconnecting removes local tokens and requests Google OAuth revocation.

The use of information received from Google Health API will adhere to the Google Health API Developer and User Data Policy, including its Limited Use requirements.

Documents and AI

Document extraction and health questions require explicit consent. Selected content is sent to the configured OpenAI project with response storage disabled. Uploaded source files are not retained unless the owner separately chooses encrypted retention. Extracted values are not used by the dashboard or AI until the owner verifies them against the original.

My Health Record

HealthTrack does not currently connect to the Australian My Health Record system. Owners may choose to import documents they have lawfully downloaded from their own record. Direct access will remain disabled unless the service completes the Australian Digital Health Agency registration, consent, security and conformance process.

Security and retention

Production traffic uses HTTPS. Database records and integration tokens are access-controlled; integration secrets and any retained originals are encrypted. Owners can export their data and request deletion from the account controls. Operational backups expire according to the hosting provider's retention controls.

Questions

Because this is a private household instance, either owner can raise a privacy question directly with the other owner before adding or sharing health information.