Privacy Policy
Doc — a private, single-user health data reader. Effective October 1, 2026.
This policy explains what data Doc ("the application") accesses, how that data is used, where it is stored, and how it can be deleted. Doc is a personal-use application built and operated by Aaron Fried for his own account. It is not a public service, and no other person can create an account or authorize access to it.
1. Who controls this application
Doc is operated solely by its owner and developer, Aaron Fried. The same person is the only user of the application and the only person whose Google account can be connected to it. Contact: aaron@truewoods.com.
2. What data the application accesses
With the owner's explicit authorization through Google's OAuth consent flow, Doc requests read-only access to the owner's own Google Health data — the fitness, activity, heart-rate, sleep, and related measurements generated by the owner's wearable device and stored in their Google Health account.
Doc does not request access to Gmail, Drive, Contacts, Calendar, or any other Google service. It cannot read any other person's data. It does not write, modify, or delete anything in the Google Health account.
3. How the data is used
- To generate summaries and trends that help the owner understand their own health measurements.
- To produce a report the owner voluntarily shares with their physician for documentation and clinical discussion.
That is the only purpose. The data is not used for advertising, profiling, marketing, credit, insurance, employment, or any automated decision-making about any person.
4. Storage and security
Retrieved data is stored on the owner's own private server and accessed only by the owner. Access credentials are stored on that same private infrastructure and are never published or shared.
5. Sharing and disclosure
Doc does not sell, rent, trade, or otherwise disclose health data to third parties. It does not share data with advertisers or data brokers. Data leaves the owner's infrastructure only when the owner themselves chooses to share a generated report with their physician.
Automated processing: generating a written summary may require sending the retrieved measurements to a language-model service for processing. When that happens, the data is transmitted solely to produce the owner's summary, and the owner is responsible for the terms of that service. It is not used to train any model or to build advertising profiles.
6. Retention and deletion
- Data is retained for as long as the owner keeps the connection to the application active.
- The owner can revoke Doc's access to their Google account at any time at myaccount.google.com/permissions. Once access is revoked, the application can no longer retrieve any data.
- Stored data can be deleted at any time by the owner, and the owner may request deletion by emailing the address in section 1.
7. Google API Services User Data Policy
Doc's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The application's use of the data is limited to providing and improving the single-user feature described in section 3. Data is not transferred to others except as necessary to provide that feature, as required by law, or as part of a merger or acquisition.
8. Children
Doc is not directed at children and is not available to anyone other than its owner.
9. Changes to this policy
If this policy changes, the revised version will be posted at this URL with an updated effective date.