Medical disclaimer. HeartPilot is a self-management support tool for people living with heart failure. It is not a medical device, does not diagnose any condition, and does not replace advice, diagnosis, or treatment from a qualified healthcare professional. In a medical emergency, call your local emergency number (in the UAE: 998 for ambulance, 999 for police) immediately — do not rely on this app.
HeartPilot is developed and operated in the United Arab Emirates. This Privacy Policy explains what information HeartPilot ("we," "our," "the app") collects when you use our mobile application, why we collect it, how it is used and protected, and the choices you have.
By creating an account or using HeartPilot, you agree to the collection and use of information as described in this Privacy Policy.
To provide the app's core function, we collect health information you enter directly, including:
If you choose to enable it, HeartPilot can read certain data from Apple Health (iOS) or Health Connect (Android), specifically: body weight, blood pressure, heart rate, and step count. This is entirely optional and controlled by permissions you grant through your device's operating system, which you can revoke at any time in your device settings.
HeartPilot only reads this data. It does not write, modify, or delete any data in Apple Health or Health Connect. Data read from Apple Health or Health Connect is used solely to pre-fill your daily check-in and is stored within HeartPilot in the same way as data you enter manually.
In accordance with Apple's Developer Program guidelines, health data obtained through HealthKit is not used for advertising or other use-based data mining purposes, and is not shared with third-party advertising networks, data brokers, or information resellers.
We use the information described above to:
We do not use your health information for advertising. HeartPilot does not sell personal or health information, and does not use it to serve targeted advertisements.
HeartPilot allows you to invite a family member or other person as a "caregiver" using a one-time invite code that you generate and share yourself. Before you send an invite, the app shows you exactly what information a caregiver will be able to see.
Depending on the permissions you grant, a caregiver may be able to see: whether you have completed your daily check-in, your current status (stable, needs attention, or emergency) from your most recent check-in, your weight trend, and your medication adherence.
For wellbeing (mood) checks specifically: a caregiver is only ever notified that a check-in has occurred and that you may benefit from a conversation. A caregiver never sees your specific wellbeing answers or score.
You may revoke a caregiver's access at any time from within the app. Revocation takes effect immediately, and the caregiver will no longer be able to view any of your information from that point onward.
We use the following service providers to operate HeartPilot. We do not sell your information to any third party.
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase (Google Cloud) | Account authentication, database storage, push notification delivery, automated background functions | Account information, all health and check-in data, device push token |
| Apple Inc. (HealthKit / APNs) | Optional health data import; push notification delivery on iOS | Weight, BP, heart rate, step count (if enabled); device push token |
| Google (Health Connect) | Optional health data import on Android | Weight, BP, heart rate, step count (if enabled) |
These providers process data on our behalf under their own security and privacy commitments, and are not permitted to use your data for their own independent purposes.
We retain your account and health information for as long as your account remains active, so that your check-in history remains useful for you and your care team. If you delete your account, we will delete your personal data within a reasonable period, except where retention is required by applicable law or necessary to resolve disputes or enforce our agreements.
We apply technical safeguards to protect your information, including encryption of data in transit (HTTPS/TLS) and access-control rules that restrict your health data so that only you, and any caregiver you have explicitly authorized, can read it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on your location, you may have rights to access, correct, export, or delete your personal information. You can:
HeartPilot is intended for adults managing their own heart failure care, or for use by an adult caregiver. It is not directed at, and should not be used by, children under 16. We do not knowingly collect personal information from children.
HeartPilot is operated from the United Arab Emirates. Our service providers may process and store data in other countries, including the United States. Where data is transferred internationally, we rely on the safeguards provided by our service providers' own compliance frameworks.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you within the app or by other reasonable means before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.
If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us at:
Email: privacy@heartpilot.org