1. Who we are
Healing365 is a patient-centred digital health project based in Hong Kong. "Healing365" is the project's public name; it is not an incorporated company. The app is currently published through the individual Apple Developer account of Tsz Kwan Fong, who is responsible for how Healing365 handles personal data. For approval: operator wording
2. What the app records
Only what you type in or choose: your details (name, which you can leave blank, diagnosis, age, sex, height, weight, drug allergies, emergency contact, other specialists); daily logs (physical and emotional ratings, symptoms, foods you noticed, side effects, notes); medicines (names, doses, schedules, doses taken); appointments (dates, doctors, questions to discuss, after-visit notes); and settings (language, reminder times). This can include health information.
3. Where it is stored
All records are stored only on your device: once in the app's internal storage, and once as a backup copy in the app's private folder so records can be restored if iOS clears storage. An unsaved draft of the day's log is also kept on the device. Healing365 does not add its own encryption to these records. They are protected by your device passcode, Face ID or Touch ID and the data protection built into iOS.
4. Device backups
If you use iCloud Backup or back up your device to a computer, the app's data may be included in those backups. Those backups are handled by Apple or your computer; we cannot access or delete them.
5. What leaves your device
Only the visit summary PDFs or backup files you choose to share, print or save. The app creates a temporary file for them and deletes it when the share sheet closes. Once shared, a file is handled by the person or service you sent it to. Reminder notifications are scheduled on your device by iOS, and their text does not include your health information.
6. Third-party components
The app uses Apple's iOS features and the open-source Capacitor framework (with its file and share plug-ins), which run on your device. The app contains no analytics, advertising or crash-reporting tools, and its code makes no network connections to us or anyone else.
7. TestFlight testing
If you join the TestFlight beta, Apple shares some information with us under its TestFlight privacy notice. For testers invited by email, we can see your name and email address. For testers who join through a public link, we see only session and crash counts, the install date and the version installed. Feedback you send through TestFlight (which can include screenshots) and crash reports may be shared with us together with your name and email. We use this only to improve Healing365.
8. This website and Cloudflare
This website is hosted on Cloudflare Pages. We do not use cookies, analytics or forms. To deliver pages and protect against attacks, Cloudflare processes technical data such as IP addresses, browser type and the pages requested, and may do so outside Hong Kong. See the Cloudflare Privacy Policy.
9. Email
If you email [email protected], we receive your email address and whatever you write. The mailbox is provided by Google (Gmail), so Google stores and processes these emails under its own privacy policy, possibly outside Hong Kong. We use your email only to reply and to fix problems you report, we do not add you to any list, and we delete support emails once the matter is closed. Please do not email us health records or screenshots that show personal details.
10. Deletion and retention
Me → Settings → Delete all data clears the records on your device, including the backup copy and any draft. Deleting the app also removes its data from the device. Files you exported and earlier iCloud or computer backups are not deleted by this.
11. Your rights under the PDPO
You can ask to see or correct personal data we hold about you, such as TestFlight feedback or emails. Email [email protected] and we will reply within 40 days. We do not use personal data for direct marketing. You can also contact the Office of the Privacy Commissioner for Personal Data with questions or complaints.
12. Age
The Healing365 public beta is intended only for adults aged 18 and over. It is not designed for children or teenagers, and we do not knowingly collect information from anyone under 18.
13. Use outside Hong Kong
Hong Kong is Healing365's intended market. Because the website and TestFlight link can be opened anywhere, local laws may also apply to people using them elsewhere.
14. Changes and contact
If this policy changes, we will update this page and its date. If the way data leaves your device ever changes, we will explain it in the app first. For any privacy question, email [email protected].