Family Health · Updated 23 Sep 2026
The three things that matter most
1. Your health data lives on your device. The app works fully without an account and without a network.
2. If you share with family, data is end-to-end encrypted: our server holds ciphertext and has no key to open it.
3. No ads, no analytics SDKs, and we never sell or share your data. The AI assistant runs on a model we operate ourselves — no third-party AI service — and receives data only after you agree.
Every reading you enter or sync from Apple Health is stored in a database on your device. That database is included in your device backup (encrypted by Apple) so you keep your history when you change phones. We do not store your health data in iCloud.
None of these has any path off the device, even while you are in a family group. A question you are sending to the AI assistant is handled as described below.
The AI assistant answers general health questions. Answers are generated by an AI model that Family Health operates itself on our own servers. We do not send your data to any third-party AI service (such as OpenAI, Google, Anthropic or similar).
Only after you agree. Before your first question, the app shows a screen explaining everything below and asks for your permission. Tap “Not now” and nothing is sent.
Sent each time you ask (about the profile you are asking about — yours or a family member’s you manage):
Never sent: your name, email, chat history, pregnancy records, or self-assessment results.
Handling: used only to generate the answer; not stored after the reply; never used to train AI; not linked to your identity (the assistant has no account).
Turning it off: Settings › Your data › AI assistant › Stop sharing. After that, the app asks again before your next question.
Request protection: each request is signed with Apple App Attest. At launch, the app registers an anonymous device key with our server to prove requests come from the genuine app; this key contains no health data and is not linked to your identity.
Dictation: if you speak your question, speech is recognised by Apple’s speech recognition (on the device when supported, otherwise on Apple’s servers), under Apple’s privacy policy.
Family groups are opt-in. When you opt in, readings for the profiles and metrics you choose are encrypted on your device and relayed through our server to the devices of people you authorise. Decryption keys stay on members' devices.
| What the server has | What the server does NOT have |
|---|---|
| Your Apple-issued account identifier (Sign in with Apple), the display name you choose inside the group, device public keys, push tokens, and metadata for each change: which profile, which metric type, which source, and when. | The value of any reading. Notes. Medication names. Your email address. Location. Anything in the “on-device only” list above. |
We disclose the metadata rather than stay quiet about it because it is real: to sync only what you authorised, the server must know which profile and metric a change belongs to — but it neither needs nor can read the number itself.
The app reads only the data types you enable individually, and writes back only readings you entered in the app. Data from Apple Health is never used for advertising, never sold, and never shared with third parties, for any purpose.
The app uses Google's Firebase Remote Config to receive a few configuration flags (which contain none of your data). To do this, Firebase uses a random installation identifier. We do not use Firebase Analytics, Crashlytics, or any advertising SDK.
Our family-sync server and AI assistant server run on Fly.io infrastructure (United States), a hosting provider that processes data on our behalf and does not use it for its own purposes.
Payments are handled by Apple. We never receive or store card or payment details; we only know whether an account currently has Premium access.
Contact: support@familyhealth.app
The app is not intended for children to use on their own. Profiles for other people — including children — are created and managed by the account holder.
Family Health is not a medical device and does not provide diagnosis or treatment advice. Camera-based heart rate is for personal reference only. Blood pressure, blood glucose, and blood oxygen are values you enter manually or sync from Apple Health — the app does not measure them with the phone's sensors.