HEALTHFOLD / PRIVACY

Your data.
Clear principles.

HealthFold processes laboratory results locally. This policy explains what stays in the app, what export means and how this website works.

Updated: 24 October 2026 · App version: 1.0 release candidate

1. Who is responsible

HealthFold is developed by Adam Stolarski under the sourceqd brand. Adam Stolarski is responsible for this website and support correspondence. Support contact details will be available on the app’s App Store page when it is released. Website: healthfold.sourceqd.dev.

2. Data stored in the app

Depending on what you add, the app stores locally: a profile name, test names, values, units, collection dates, optional reference ranges and LOINC codes, the original document, extracted text, its checksum and your verification date. Separate profiles help keep each person’s documents apart.

We do not operate user accounts, a laboratory-results server or medical-data synchronization. The app contains no advertising, advertising analytics or our own telemetry. HealthFold does not give us access to the data on your device.

3. Import, photos and camera

The app reads the file you select in the system document picker. The system photo picker shares the image you choose. Camera scanning requires camera permission. Text recognition runs locally using iOS system features. Documents are not uploaded to an OCR service. Language availability and recognition quality depend on the system.

HTML is treated as text: we do not execute its scripts or fetch its resources. HealthFold contains no web browser view.

4. Protection and backups

The database and documents use iOS file protection. You can additionally enable an app lock using Face ID, Touch ID or your device passcode. HealthFold hides its content when the app becomes inactive. This does not promise to prevent a user from taking a screenshot.

Important: no automatic database backup.

The app database is excluded from system backups. Losing your device or deleting the app may mean losing local data. Keep original documents and explicitly export needed data to a safe place.

5. Export and system services

You initiate CSV or FHIR export yourself. The system file exporter sends the file to the destination you choose, which may be a cloud provider. That provider’s terms then apply. HealthFold does not control or delete external copies. Do not share exports with untrusted recipients.

The current version does not write laboratory documents to Apple Health or request HealthKit access. FHIR export contains user-transcribed and user-verified information, not a signed laboratory report or SMART Health Card.

6. Retention and deletion

Data stays in the app until you remove it. Delete a result from its detail view. The original is removed when its last linked result is deleted. Deleting a profile removes that profile’s results and originals after confirmation. The last profile remains, but its results can be deleted individually. Deleting the app removes its local container. Logical deletion does not guarantee that every storage sector is overwritten.

7. Website and email support

This website does not accept lab results, require an account or provide a document-upload form. We do not install our own advertising or analytics tools. Infrastructure providers — Sites and Cloudflare — may process connection details such as IP address, request time and browser information needed to deliver and secure the website.

Provider information: Cloudflare and OpenAI. Their infrastructure may be outside your country. Our app policy is not a guarantee that infrastructure creates no technical logs.

If you email support, we process your email address and message to respond and resolve the issue. Website technical data and correspondence are used in our legitimate interest in operation, security and support (GDPR Article 6(1)(f)). Correspondence is kept as needed to handle the issue and, where applicable, protect legal claims; infrastructure data follows the providers’ policies.

Do not send health information to support.

Do not attach results, document photos, identifiers or other people’s information. Describe technical issues using a synthetic example.

8. Your rights

You control the data in HealthFold: view, correct, export and delete it. We cannot remotely access or recover your local database. For personal data we receive through correspondence or website operation, use the support contact on the app’s App Store page to request access, correction, deletion, restriction or to object, as provided by applicable law. You may complain to the relevant data-protection authority; in Poland this is the President of UODO.

9. Other people’s data and clinical meaning

Only add someone else’s documents when you have the right to do so. Always check the profile before saving. HealthFold does not diagnose or replace medical advice. OCR and manual entries can contain errors; verify every value against the original.

10. Changes to this policy

The current policy and its update date are available here. If we add network services, new data recipients or consent-based integrations, we will update this information and the relevant app settings.