Privacy Policy

lil health · Effective October 23, 2026

lil health brings your Apple Health data to the Mac. The iPhone app reads the Health data you allow it to and uploads it to my servers. lil health for Mac, which is in development, will download it so you can see it there. This policy explains what that involves.

lil health is made and run by Alexandru Ţurcanu (“I”, “me”), who is the data controller for it. You can reach me at hello@851.sh.

What I collect

• Your account. When you sign in with Apple or Google, I receive an identifier for your account with that provider, your email address (with Apple, possibly a private relay address), and your name if the provider shares it.
• Your devices. For each iPhone or Mac you sign in on: which app it is, its platform, its name if the app sends one (on a Mac, the computer's name, which often includes your name), when it signed in and when it was last used, and whether the iPhone is paired with an Apple Watch.
• Your Health data. What you allow lil health to read in Apple Health. Today that's: samples such as activity, body measurements, heart, sleep, hearing, cycle tracking, nutrition, respiratory and symptoms; workouts, with their activities, events and statistics, and their routes, which contain the precise locations where you exercised; State of Mind logs and anxiety and depression assessments (GAD-7, PHQ-9); audiograms; ECG recordings, with their voltage measurements, classification and average heart rate; heartbeat series (the beat-to-beat timings behind heart rate variability); the glasses and contact lens prescriptions you choose to share, with each eye's values and when they expire; the medications you choose to share, with their names, any nickname you gave them, their form, whether they're scheduled or archived, and their codes in medical coding systems, and the doses you logged, skipped or missed for them, with when and how much; the clinical documents (CDA) you choose to share, such as a visit summary from a provider, which contain what the provider recorded, such as your name, address, diagnoses, medications and test results; Activity ring summaries; and characteristics such as your date of birth, sex and blood type. It also includes where each record came from, such as the app or device that recorded it, and the metadata Health keeps with it.
• Your cards. The charts on lil health's Summary, which you, or an AI agent you allow, create and change: their names, icons, colors and what they show, and their order. They're stored with your account like your Health data and synced to your devices.
• Technical information. Your IP address and the country it's in are used when you make a request, to limit abuse and to decide whether new accounts can be created from your region. They aren't stored with your account. My hosting provider keeps short-lived request logs.

lil health has no advertising, analytics or tracking. It doesn't read anything you haven't allowed it to in Apple Health.

How I use it

Only to provide lil health: to sync your Health data to your other devices, answer the AI agents you connect to your account, keep your account working, and keep the service secure and within its limits.

I never sell your data, never use it for advertising or marketing, and never share it with data brokers. I don't use it to train machine learning models. I don't look at your Health data, except when you ask me to for support.

Where it's stored

Your data is stored and processed by Cloudflare, Inc., my hosting provider, which acts as my processor under its Data Processing Addendum. Cloudflare runs data centers around the world, including in the United States, so your data may be processed outside your country. Transfers from the European Economic Area, the United Kingdom and Switzerland are covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the Standard Contractual Clauses in its Data Processing Addendum.

lil health doesn't store your Health data in iCloud. Sign in with Apple and Sign in with Google are provided by Apple and Google, under their own privacy policies.

Command-line tools and AI agents on your Mac

lil health for Mac keeps a copy of your Health data on your Mac. Its setting “Allow access on this Mac” is off unless you turn it on. While it's on, the lil-health command and its MCP server let programs on your Mac read all of that copy, including AI agents. AI agents usually send what they read to their provider's servers, which handle it under their own terms and privacy policies, not this one. I don't receive what they read.

While it's on, lil health keeps a log on your Mac of each request: the command or tool, when, and which program asked. The log stays on your Mac. Turning the setting off stops access straight away, and signing out turns it off and clears the log.

The same setting lets Shortcuts, Siri, Spotlight and the lil-health command use lil health's actions on your Mac: open a page, sync now, or export your account's data to a folder. They do nothing while the setting is off, and each use is logged with the other requests. An export goes where you, or your shortcut, put it. If a shortcut sends it on, for example to an AI model or another app, whoever receives it handles it under their own terms.

While the setting is on, programs on your Mac, including AI agents, can also create, change and delete your cards. Their changes sync to your other devices, and each one is logged with the other requests.

AI agents connected to your account

You can also connect an AI agent, such as Claude, Claude Code or ChatGPT, to your lil health account, so it can read your Health data from my servers, wherever it runs. This is optional, and nothing can connect unless you allow it. Each time you connect an agent, lil health's page (or lil's, below) asks you to sign in, shows which agent is asking, and asks for your permission. Nothing is remembered between connections. How to connect one is explained at lil.tech/agents.

An agent you connect can read all of your lil health data on my servers, and there's no way to share only some kinds of data. It can't change or delete your Health data. If you allow it, it can also create, change and delete your cards, the charts on lil health's Summary: their names, icons, colors and what they show. Changes sync to your devices. Agents get summaries first, such as daily totals and averages, and individual records only when they ask for them, a page at a time.

Agents send what they read to their provider's servers (for example Anthropic's or OpenAI's), which may be in another country, whenever the agent asks. The provider handles it under its own terms and privacy policy, not this one. I don't receive your conversations with the agent or what it does with your data.

What I keep about connected agents:

• The connection, for as long as the agent stays connected: its name, the website it identifies itself with (if any), where your browser returned to after you allowed it, and when it connected and last read your data. A connection the agent hasn't used for 90 days ends.
• A log of what each agent read and changed, for 90 days: which tool it used, the kinds of data and dates it asked for, which card it created, changed or deleted, and its name, whether it worked, how many items went back, and when. Never the answers, your Health data's values, or what it searched for. You can see the log in lil health on your Mac and iPhone.
• Your consent, each time you allow an agent or turn agent access off, as proof, until you delete your account.

To stop an agent, revoke it in lil health's settings on your Mac (Settings › Agents) or iPhone (Settings › Connected Agents), or use Turn Off Agent Access to disconnect them all. The agent is cut off at its next request. You can also remove it in the agent itself. Revoking doesn't delete what the agent already sent to its provider: ask the provider for that.

You can also connect an agent to all of your lil apps at once, at mcp.lil.tech. Its page lists every app it will read, and allowing it records your consent for each of them. Turning off agent access in one app stops every agent reading that app, including these. Revoking an agent connected this way disconnects it from all of them.

Security

Your data is encrypted in transit and at rest. It isn't end-to-end encrypted: my servers can read it, which is what lets them sync it between your devices and answer the agents you connect. Access to it is limited to running the service.

How long I keep it

For as long as you have an account. You can delete your account from the iPhone app (Delete Account), which deletes your Health data, your cards, your account, your devices and your connected agents from my servers straight away. Backups that allow recovery from mistakes keep it for up to 30 more days, and then it's gone. Deleting your account doesn't change anything in Apple Health on your iPhone.

Signing out of a device removes that device from your account, along with the step-count and other daily totals it computed for you. The Health records it uploaded stay with your account, since they're the same records your other devices show. Devices that stopped being used without signing out are removed the same way.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it's processed, and receive it in a portable format. In lil health for Mac, Settings › Account › Export Data saves a copy of everything in your account as an archive: your account details and connected agents, the log of what agents read, your synced Health records and cards as compressed JSON files, and larger data such as ECG voltages and workout routes. If you don't use lil health for Mac, or an export fails, email me and I'll send you your data. You can delete everything yourself at any time by deleting your account.

If you're in the European Economic Area, the United Kingdom or Switzerland, the legal bases are:

• Health data: your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you give on lil health's consent screen before anything is uploaded. You can withdraw it at any time in the app, or by turning off lil health's access in Settings › Privacy & Security › Health and deleting your account. Withdrawing doesn't affect what was processed before.
• Sharing Health data with AI agents you connect: your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you give on lil health's page (or lil's, at mcp.lil.tech) each time you connect one. You can withdraw it at any time with Turn Off Agent Access in the app. Withdrawing doesn't affect what was shared before.
• Your account and devices: providing the service you asked for (Article 6(1)(b)).
• Security and abuse prevention: my legitimate interest in keeping the service safe and affordable to run (Article 6(1)(f)).

You also have the right to complain to your data protection authority. I'd appreciate the chance to sort things out first, at hello@851.sh.

Availability

lil health isn't meant for children under 16. New accounts can't be created from mainland China.

Changes

If this policy changes, I'll update it here and change the date at the top. If a change affects how your Health data is used, lil health will ask for your consent again before it applies.

Contact

Alexandru Ţurcanu · hello@851.sh