Health Trailbook · CPW Studio Co
Privacy Policy
Effective September 15, 2026 · Version 2.2
Data covered
This policy covers the Health Trailbook Android app, installable web app, healthtrailbook.com, account synchronization, support, and optional voice transcription. Health Trailbook may contain account email, report-profile contact details, meals and photos, activities, medications, symptoms, bathroom and sleep events, weight, blood pressure, heart rate, oxygen saturation, Kardia information, notes, and uploaded PDF or image reports.
How information is used
- Provide the journal, reports, backup and restore, authentication, recovery, synchronization, and support.
- Import only the Android Health Connect categories the user authorizes.
- Protect the service, prevent abuse, diagnose failures, and meet legal obligations.
- Transcribe a voice recording only after the user gives the displayed consent.
We do not sell personal or health data, use it for targeted advertising, or share it with data brokers.
Device protection and synchronization
The local journal is encrypted using AES-256-GCM. When an account is connected, records and attachments travel over HTTPS to user-restricted cloud storage. The synchronized copy is not zero-knowledge encrypted: authorized CPW Studio Co administrators and infrastructure providers can technically access it when necessary for security, maintenance, deletion, or user-requested support. Private attachment links are short-lived.
Health Connect
On Android, the user may grant read-only access to weight, blood pressure, heart rate, oxygen saturation, and respiratory rate. Health Trailbook does not write to Health Connect. Imported data is used only to place readings in the user’s journal and reports. Permissions can be revoked in Android or Health Connect settings.
Voice transcription
Android speech recognition is handled by the device and its configured speech service. On supported website browsers, after an explicit consent, an audio clip may be sent through the authenticated Health Trailbook service to OpenAI for transcription. CPW Studio Co does not store the audio or transcript in the transcription function; returned text is shown for correction and is saved only if the user chooses to save the entry.
Service providers and disclosures
| Provider | Purpose and data |
|---|---|
| Supabase | Authentication, encrypted transport, account database, private attachment storage, server functions, subscription entitlements, and related service logs. |
| OpenAI | Optional, consented browser voice transcription; receives the selected audio clip and transcription instructions. |
| Stripe | Web Only subscription checkout, renewal, receipts, cancellation, and refund administration. Stripe may receive account email, account identifier, billing status, transaction records, and payment details. CPW Studio Co does not receive full card or bank details. |
| GoDaddy and hosting/network providers | Website delivery, TLS, security, and ordinary server access logs such as IP address, time, requested URL, and browser information. Third-party marketing analytics are blocked by the site Content Security Policy. |
| Google and Android services | Google Play distribution, subscription billing, purchase verification, receipts, cancellation, and refund administration; Android Health Connect and speech/biometric platform functions. Google may receive the app package, a one-way account identifier, purchase token, and transaction status. Health Connect access remains controlled by the user’s Android permissions. |
| Email delivery providers | Account verification, password recovery, security notices, billing-related service notices, and user-requested support. |
Information may also be disclosed when legally required, to protect users and the service, or during a business transfer subject to equivalent protections. We do not disclose journal content to healthcare providers unless the user exports or shares it.
Retention and deletion
- Active account data and attachments are kept while the account exists.
- Successful account deletion removes the active authentication account, synchronized journal, report profile, and private attachments promptly.
- Residual encrypted disaster-recovery backups may remain for up to 30 days and are not used for ordinary operation.
- Security and service logs are retained for up to 90 days unless a longer period is required to investigate abuse or comply with law.
- Support correspondence may be retained for up to 24 months.
- Voice audio handled by our transcription function is discarded after the response and is not intentionally retained by CPW Studio Co.
- User-created ZIP or JSON backups are controlled by the user and are not deleted from the user’s device or storage provider when the account is deleted.
Export and user choices
The app can export a complete ZIP containing journal data and available food, Kardia, and oximeter attachments. Legacy JSON export files may not contain attachments. Exports are readable and should be stored privately. Users may disable Health Connect, stop voice use, sign out, erase journal records while keeping the account, or permanently delete the account.
Children
Health Trailbook is intended for adults age 18 and older. We do not knowingly create accounts for children. Contact us to request removal if information about a child was submitted without appropriate authority.
Security and breach contact
Security protections include encryption, private storage, access rules, minimized Android permissions, rate limits, and restricted administrative access. No system is risk-free. Suspected unauthorized access, disclosure, or a security incident should be reported immediately to admin@healthtrailbook.com. We investigate, contain, document, and provide legally required notices.
Contact and changes
Privacy, access, correction, export, deletion, or complaint requests may be sent to admin@healthtrailbook.com. Customer-support questions may be sent to support@healthtrailbook.com. Material changes will be posted here with a new effective date.