Privacy Statement
Effective August 25, 2026
What we collect
We collect account details, authentication identifiers, imported health records, import metadata, sharing activity, and basic operational logs.
How we use it
We use data only to authenticate you, import and display health trends, provide sharing you request, secure and operate HRV Link, and meet legal obligations. We do not sell personal or health data.
Who receives it
Data may be processed by infrastructure and authentication providers, disclosed to viewers you authorize, or disclosed when legally required. OAuth providers do not receive your imported health records from HRV Link.
Security
Health records are transmitted over encrypted connections and encrypted at rest by our database infrastructure. We use access controls and profile-level isolation, but no system can guarantee absolute security.
Retention and control
We retain data while your account or a legitimate operational or legal need exists. You may revoke sharing access and request access, correction, export, or deletion by contacting us.
HIPAA and consumer health data
HIPAA may not protect data you place in a consumer health app. HRV Link does not act for a covered entity without a written Business Associate Agreement. Other privacy and health-breach laws may still apply.
Children and changes
HRV Link is not intended for anyone under 18. We may update this statement and will post the effective date here.
Contact
Privacy requests: privacy@hrvlink.com.