Health MCP — Privacy Policy

Last Updated: April 10, 2026

Developer: Stanislav Pittner / GoSpace Labs

1. Overview

Health MCP is an iOS application that reads your Apple Health data and makes it available to AI assistants (such as Claude and ChatGPT) via the Model Context Protocol (MCP). Your privacy is our top priority.

2. HealthKit Data

2.1 What We Read

Health MCP can read the following HealthKit categories (only those you explicitly enable):

Activity: Steps, Workouts, Active Energy, Basal Energy, Distance, Flights Climbed, Exercise Time, Stand Time
Vitals: Heart Rate, Resting HR, HRV, Blood Oxygen, Blood Pressure, Body Temperature, Respiratory Rate, Blood Glucose
Body: Weight, Height, BMI, Body Fat %, Lean Mass
Sleep: Sleep Analysis, Mindful Minutes
Nutrition: Calories, Macros, Water, Caffeine

2.2 How Data Is Processed

All data processing happens entirely on your device. Health MCP runs a local HTTP server (localhost only) that responds to MCP protocol requests. No health data is ever sent to our servers or any third-party server.

2.3 MCP Server Security

Access to the MCP server is protected by a token-based authentication system. The token is generated on your device and stored securely in the iOS Keychain. Only AI clients you explicitly configure with this token can access your health data.

3. Data We Do NOT Collect

No health data leaves your device to our servers
No analytics or tracking SDKs
No advertising frameworks
No data sharing with third parties
No data brokering or selling

4. HealthKit Compliance

In accordance with Apple's HealthKit guidelines:

Health data is never used for advertising purposes
Health data is never sold to data brokers
Health data is never shared without explicit user consent
Users have full control over which health categories are accessible
All HealthKit data access requires explicit iOS permission prompts

5. Data Retention & Deletion

Health MCP does not store health data persistently. Data is read from HealthKit on demand and returned to the requesting AI client. Deleting the app removes all local configuration, tokens, and preferences. No health data remains after uninstallation.

6. Children's Privacy

Health MCP is not intended for children under 13 and does not knowingly collect data from minors.

7. Contact

For privacy inquiries: privacy@bemooore.com

Stanislav Pittner, Bratislava, Slovakia