HealthTracker

Data processing overview

What information supports the service, why it is used, and where responsibility changes when you export or share it.

Last updated: August 2026

An operational overview, not a contract

This page describes the standard consumer service. It is not a negotiated Data Processing Agreement, Business Associate Agreement, certification, or promise that HealthTracker meets every organization's regulatory requirements.

Information processed

Account and authentication details.
Patient profiles and health records you enter.
Documents, images, and other files you upload.
Care-team names, email addresses, and mobile numbers you save.
Subscription, device, usage, performance, and crash information.

Why it is processed

Provide and synchronize the features you request.
Authenticate accounts and scope access to records.
Manage subscriptions and patient limits.
Create reminders, reports, exports, and sharing actions.
Maintain security, reliability, support, and legal obligations.

Service providers

These providers process limited information to operate HealthTracker or the public website. Their own terms, infrastructure, and legal obligations also apply.

Google Firebase and Google Cloud

Account authentication, database and file storage, analytics, crash reporting, and infrastructure.

RevenueCat

Subscription status, purchase management, and feature entitlements.

Apple and Google

Account sign-in when you choose one of those providers.

Apple system services

Mail, Messages, sharing, calendar, notifications, Siri, and Shortcuts actions that you initiate.

Vercel

Hosting and basic performance analytics for the public website.

Security, retention, and deletion

Firebase and Google Cloud protections encrypt supported records in transit and at rest. Automated encrypted database backups are created daily and retained for up to seven days. Deletions from the live service may remain in recovery backups until that period expires.

Location and privacy requests

Information may be processed where our providers operate. Depending on applicable law, you may request access, correction, export, restriction, objection, or deletion. We assess each request under the laws relevant to the user and our operations.

Exports and organizational use

When you export, email, message, or save a report, you select the destination and decide whether to send. The recipient and destination service control the resulting copy after it leaves HealthTracker.

Organizations with procurement, audit, residency, retention, healthcare, or contractual requirements should contact us and complete their own assessment before adopting HealthTracker for an organizational workflow.

Questions or privacy requests

Contact healthtrackersupport@ntc.com.au. Do not include passwords or unnecessary health information in your message.