Privacy policy

Last updated: 19 October 2026

This policy explains what HealthClan collects when you use our website, the web app, or the iPhone and Android apps, why we collect it, who helps us process it, how long we keep it, and the rights you have over it.

Who we are

HealthClan is run by Emmet Donnelly, a sole trader in Ireland, trading as HealthClan. For data protection law we are the controller of your personal data.

• Email: support@healthclan.com

We’re not required to appoint a data protection officer. Email us about anything on this page.

What we collect and why

• Your account: email address, a profile name, country, time zone and language, your membership tier and how you sign in (password, Apple or Google). We need these to run your account. Passwords are stored only as a one-way hash.
• Your profile: display name, optional first and last name, and your avatar or animal totem. Other members of your clans see your profile.
• Your date of birth: to work out your age and apply the rules for child accounts, including what a parent can see until a child is 16.
• What you put into HealthClan: habits, protocols, schedules, when you complete or miss a habit, your streaks and statistics, the clans you found or join, invitations you send (including the invitee’s email address) and join requests with their messages. Each habit’s privacy setting decides whether your clans see it.
• Your devices: a key that keeps each device signed in, and the device name, model, operating system and app version, so you can see and sign out your devices.
• Payments: if you subscribe, Stripe takes your card details. We never see or store your card number. We keep your subscription status, plan, renewal date and recent payment amounts.
• Emails we send you: a record of each email (type, address, subject, delivery status), so we know it was delivered.
• The waiting list: if you join it on our website, your email address, first name, country, the consent you gave and when, and which campaign link brought you.
• Security and operations: server logs with your IP address, the request, and your account number when you’re signed in, to keep the service running and to stop abuse. Email addresses are masked in logs. We also keep an audit record of important account actions (who did what, and when) without their content.
• Crash reports (iPhone app): when the app crashes, a report with the stack trace and device state, and an installation ID, so we can fix the problem. It isn’t linked to your account.
• Usage analytics (iPhone and Android apps, only if you turn it on): see Analytics below.

We don’t collect health or fitness readings, your contacts, your precise location, photos, audio, or an advertising ID. HealthClan has no ads and we don’t sell or share your data for advertising.

The camera is used only to scan the code on a parent’s phone when setting up a child’s device. The image stays on the device.

Our legal bases

• Contract: to provide your account, your habits and clans, your membership and the emails the service needs (GDPR Art. 6(1)(b)).
• Consent: for usage analytics and for the waiting list. You can withdraw it at any time (Art. 6(1)(a)).
• Legitimate interests: to keep the service secure, prevent abuse, and fix crashes (Art. 6(1)(f)).
• Legal obligation: to keep payment and tax records (Art. 6(1)(c)).

Who processes your data for us

These companies process data only on our instructions, under data processing terms. Each one receives only what it needs.

• Microsoft Azure (Ireland and the Netherlands): hosting, logs and monitoring.
• MongoDB Atlas (hosted on Azure in Ireland): our database and its backups.
• MailerSend: sending our emails.
• Stripe: payments and invoices.
• Google Firebase: crash reports from the iPhone app, and usage analytics in the apps if you turn it on.
• Have I Been Pwned: when you choose a password, we send only the first five characters of its hash to check it hasn’t appeared in a known breach. Your password never leaves our service.

If you sign in with Apple or Google, you share your sign-in with that company under its own privacy policy, and it tells us who you are.

Our database and servers are in the EU. Some processors may handle data outside the European Economic Area. Where they do, they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Other members see what you share with them in a clan, according to each habit’s privacy setting. We don’t give your data to anyone else unless the law requires it.

Analytics

The iPhone and Android apps can send anonymous usage analytics (which screens and features are used, and an approximate region worked out from a shortened IP address) to Google Firebase Analytics. It’s off until you turn it on in Settings, then Privacy. It never includes your habits, notes or family details, isn’t linked to your account, and isn’t used for advertising. Turn it off at any time and the app resets its analytics ID.

Analytics is never collected from a child account. The website and the web app send no analytics.

Cookies and storage

The web app at app.healthclan.com uses only cookies that are strictly necessary: they keep you signed in, protect the Apple and Google sign-in steps, and remember whether the navigation rail is expanded. Your browser’s local storage remembers your light or dark theme and whether you dismissed a time-zone prompt. The website uses local storage for the theme only. Neither sets advertising or analytics cookies, so we don’t ask for cookie consent. Stripe’s checkout page sets its own cookies to process payments and prevent fraud.

How long we keep it

• While you have an account, we keep what you put into HealthClan so the service works.
• When you delete your account, you’re signed out everywhere and hidden from other members straight away. We wait 30 days in case you change your mind, then permanently erase your personal data. The details are on Delete your account.
• What stays after erasure doesn’t identify you: your share of clan statistics shown as “Former member”, your birth year and joining dates without your name, audit records with an anonymous account number, and email records with your address and the subject removed.
• Backups age out within 30 days.
• Payment records: Stripe keeps invoices for six years, as Irish tax law requires.
• Crash reports are kept for 90 days.
• The waiting list: until you leave it (every email has a link) or you join and delete your account.

Your rights

Under the GDPR you can:

• Access and take your data: in the app, go to Settings, then Account, and choose Download my data for a copy of what we hold about you in a machine-readable file (Articles 15 and 20).
• Correct it: email us and we’ll fix it.
• Erase it: delete your account in Settings, then Account, or see Delete your account if you can’t sign in (Article 17).
• Object to or restrict how we use it, and withdraw consent at any time, for example by turning analytics off or leaving the waiting list.

For anything else, email support@healthclan.com. We may ask you to confirm it’s you, and we reply within one month.

You can also complain to the Irish Data Protection Commission at dataprotection.ie, or to the data protection authority where you live. We’d appreciate the chance to put things right first.

Children

Your own HealthClan account is meant for adults (18 and over). If you’re under 18, please don’t sign up yourself: ask a parent or guardian to create a child account for you, which they control from their own account. Creating it is the parent’s consent to the child’s use of HealthClan. If we learn that someone under 18 has signed up for their own account, we’ll contact them and close it, or move them to a child account with a parent.

• A child account has no email address, password or payment. We store the child’s display name, optional first and last name, date of birth, habits and completions, clan membership and device sessions.
• Until a child is 16, their parent can see and record their habits.
• We never collect analytics from a child account. On iPhone, crash reports are still sent, without any account details.
• Download my data on the parent’s account includes each child’s name and date of birth, but not the child’s habits, completions, clans or devices. To get a copy of those, or to delete a child account, the parent emails us. Deleting the parent’s account deletes their children’s accounts too.
• Child accounts see no ads and no purchase options.

Security

All traffic to HealthClan is encrypted. Passwords are hashed with Argon2id, each phone signs in with its own device key, and access to data is limited to what each part of the service needs.

Changes to this policy

If we change this policy in a way that matters, we’ll tell you in the app or by email before the change takes effect. The date at the top shows the latest version.

Terms of membership · Help and support · About HealthClan