Privacy Policy

Last updated: November 11, 2026

Health Data Fetch is a personal utility operated by its owner on a home NUC. It reads health records from the owner's Oura and Google Health accounts using read-only OAuth access and writes exports to the owner's NUC Dropbox-synchronized health data folder.

Data accessed and use

Depending on the source, records may include personal and daily metrics, heart rate, sleep, workouts, tags and sessions, blood oxygen, ring configuration, stress and heart-health metrics; Google activity and fitness, body measurements, ECG, irregular-rhythm notifications, nutrition, sleep, and exercise route location. Route location is used only to export workout routes. The data is used only to create and update the owner's personal exports and baselines.

The Google Health API can return records from multiple platforms. The NUC checks each record's source platform and discards records tagged HEALTH_KIT (Apple Health) before staging or export. Those records are not written to Dropbox or included in health baselines.

The service does not sell or share health records for advertising, analytics, profiling, or model training. It does not send health records to ChatGPT or OpenAI. Google and Oura receive the OAuth and API requests needed to authorize and retrieve data. Dropbox receives exported files through the owner's configured Dropbox sync client and stores them in the owner's Dropbox account, subject to Dropbox's own terms and privacy policy.

Storage and retention

Exports are stored on the NUC in the Dropbox-synchronized folder and in the owner's Dropbox account. OAuth credentials are kept on the NUC in files restricted to the service owner. This website does not collect or store health records and does not use analytics or tracking scripts. Cloudflare may process ordinary request metadata, such as IP address, to host and protect these static pages.

Exports remain until the owner deletes them from Dropbox and the NUC. Revoking access at Google or Oura stops future synchronization but does not delete existing exports. The owner can revoke the app's access from the corresponding account security settings and remove the local OAuth files.

Security and contact

The service uses read-only OAuth scopes and runs on the owner's NUC. Access to the NUC and Dropbox account is controlled by the owner. No method of storage or transmission is guaranteed to be completely secure.

For privacy or deletion questions, contact the owner using the support email shown on the Google OAuth consent screen.

Health Data Fetch