Privacy Policy

© 2026 EDMC (Emergency Disaster Management Corporation). All rights reserved. No part of the Health-MindTrack application, website, source code, data processes, or visual design may be reproduced, distributed, or transmitted in any form without prior written permission.

We collect information to provide better services to all our users. When you use Health-MindTrack, we may collect the following types of data:

• Personal information: information you provide during registration, such as your name, email address, and contact details.
• Usage data: information on how you interact with the Platform, including log data, IP addresses, browser types, and usage patterns.
• Wellness measurements you choose to save: derived metrics from face scans, heart-sound recordings, optional voice analysis, and optional breath recordings — not raw camera video in normal use.
• Optional wearable data you allow us to read from Apple Health (iPhone) or Health Connect (Android), such as heart rate, HRV, steps, sleep, blood oxygen, and similar types you grant.
• Optional research uploads, only if you opt in (for example de-identified features or raw heart-sound audio).
• Technical data needed to run the service: session tokens, device tokens for notifications you enable, and support messages you send (including a photo you attach to feedback).

The app asks for device permissions only for the purposes below. You can refuse optional permissions; the rest of the product still works where those features are not required.

• Camera: a short face scan to estimate pulse and related wellness signals on your phone.
• Microphone: chest heart-sound recordings, an optional spoken phrase, and optional breath research recordings. Processed on the device unless you opt in to upload.
• Photo library: only if you attach a photo when sending feedback. We do not scan your library in the background.
• Apple Health (iPhone) / Health Connect (Android): optional. We read types you allow so watch data can sit next to your phone scans. We do not write health data to Apple Health.
• Bluetooth: optional connection to a Polar H10 strap during field validation, to compare with an on-device scan.
• Notifications: optional reminders and replies to feedback you sent.
• On older Android versions, Bluetooth scanning may require a location permission. We do not use that permission to track where you go.

Camera frames for a face scan are processed on your phone. Raw video does not leave the device for normal use — only derived metrics and quality scores sync to your account when you choose to save a reading.

Heart-sound recordings use the microphone. Raw audio is uploaded only if you opt in, and you can revoke that consent without losing the rest of the product.

The data collected by Health-MindTrack is utilized exclusively to operate, maintain, and improve the Platform. This includes troubleshooting technical issues, analyzing usage trends to refine our data science models, and communicating important updates to our users. We do not sell your personal information to third parties.

We do not share your personal information with insurers, data brokers, or advertisers. We do not use your data for third-party advertising or cross-app tracking.

We implement commercially reasonable technical, administrative, and physical security measures designed to protect your information from unauthorized access, destruction, use, modification, or disclosure. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Account data, trends, and reports are encrypted at rest.

The Platform may contain links to third-party websites or services that are not owned or controlled by EDMC (Emergency Disaster Management Corporation). We hold no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We use processors to host the Platform: Supabase for account and sync storage, and Railway for the website and API. Optional wearable data is read from Apple Health or Health Connect, which Apple and Google operate. A Polar device, if you connect one, is operated by Polar. Those companies handle data under their own policies.

A current list is also on the Subprocessors page of the website.

Health-MindTrack is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has created an account, contact us and we will delete it.

You may access, export, update, or request deletion of your personal information. In the app, open More → Privacy center. On the website, open Privacy Centre after you sign in. You can also email shashigoel31@gmail.com.

Account deletion is in Privacy Centre. After you confirm, we delete or irreversibly anonymize personal data that we are not required to keep for security, legal, or accounting reasons.

If you are in Canada and we cannot resolve a privacy complaint, you may contact the Office of the Privacy Commissioner of Canada, or the Office of the Information and Privacy Commissioner of Alberta.

The website uses cookies and similar storage that are needed to keep you signed in and to run the site. The app stores data on your phone that is needed to keep you signed in and to save readings. We do not embed third-party advertising or analytics SDKs for selling your data.

We keep account and saved wellness data while your account is active. If you request deletion, we delete or irreversibly anonymize personal data that we are not required to keep for security, legal, or accounting reasons.

We reserve the right to modify this Privacy Policy at any time. We will notify users of any material changes by posting the updated documents on the Platform. Your continued use of the Platform after changes have been posted constitutes your acceptance of the revised terms.