D HealthThis Privacy Policy explains how D Health ("we", "us", "our") collects, uses, stores and protects your personal and health information when you use the D Health application and related services (the "Service"). We are committed to protecting your privacy and handling your data transparently and in compliance with the EU General Data Protection Regulation (GDPR) and applicable laws of North Macedonia.
1. Who we are
D Health is a digital health application operated by JH Group, based at St. Franklin Ruzvelt No 21/8, Skopje, North Macedonia. For any privacy-related questions, contact us at contact@dhealth.app.
2. Information we collect
- Account information: when you sign up (including via Google Sign-In) we receive your name, email address and profile image.
- Health and medical data: information you choose to add, such as vitals (e.g. heart rate, blood pressure), ECG readings, diagnoses, therapies, medications, appointments and notes.
- Wearable & device data: if you connect a wearable or a health platform (e.g. Health Connect, Apple Health), we process the metrics you authorize, such as steps, heart rate and activity.
- Technical data: basic information needed to operate the Service securely, such as device type and app diagnostics.
3. How we use your information
- To provide the core features of the Service — storing and displaying your health records, therapies, reminders and insights.
- To generate AI-driven summaries and insights based on the data you provide.
- To authenticate you and keep your account secure.
- To send reminders and notifications you have enabled (e.g. therapy alarms, appointments).
- To communicate with you about support requests and important service updates.
4. Google user data
When you sign in with Google, we access only your basic profile (name, email, profile picture) to create and secure your account. We use this data solely for authentication and account identification. D Health's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide the Service, comply with law, or with your consent.
5. How your data is stored and protected
Your data is stored on secure, industry-standard cloud infrastructure (Supabase). We apply strict access controls — including row-level security so each user can only access their own records — and data is encrypted in transit (HTTPS/TLS) and at rest. Access to production data is restricted to authorized personnel only.
6. Data sharing
We only share your data with:
- Service providers that help us run the Service (e.g. cloud hosting, AI processing), bound by confidentiality and data-protection obligations.
- Healthcare professionals only when you explicitly choose to share a report.
- Authorities where required by law.
7. Your rights (GDPR)
You have the right to access, correct, export or delete your personal data, to restrict or object to processing, and to withdraw consent at any time. You can edit or delete records directly in the app, or contact us at contact@dhealth.app to exercise any of these rights. You may also delete your account, which removes your associated data.
8. Data retention
We keep your data for as long as your account is active. When you delete your account, we delete or anonymize your personal and health data, except where we are legally required to retain certain records.
9. Children
D Health is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email. The "Last updated" date above reflects the latest version.
11. Contact us
JH Group — D Health
St. Franklin Ruzvelt No 21/8, Skopje, North Macedonia
Email: contact@dhealth.app