Privacy & data controls
Effective October 19, 2026. Health Assessment Hub is an educational wellness app maintained by the owner of the Eguono22/my-WebApp project. It does not provide medical diagnosis or emergency care.
Assessment and chat requests
When you submit an assessment, your measurements are sent to this app's server to calculate a rules-based score and recommendations. Chat messages, recent conversation context, and your current assessment can also be sent to this server to generate rules-based replies. These requests do not use an external generative AI service, and the application does not intentionally persist their contents unless you choose cloud sync or optional analytics. Hosting providers may retain operational request metadata and error logs.
Data saved on your device
The app uses browser storage for assessment history, unfinished drafts, your score goal, your saved private sync key, and analytics preference. Chat conversation is held in page memory. Other people with access to your browser may be able to read this data. Use “Delete all data on this device” in the app to clear its saved data. This does not delete cloud history or copies you have shared or downloaded.
Optional cloud sync
Cloud sync stores your measurements, dates, scores, recommendations status, and goal in a managed database. Sync is optional and requires a private key generated by the server. The database stores a hash of the secret portion of that key. Anyone with the full key can read, replace, or delete that cloud profile. We cannot recover lost keys. Do not share them or use sync on a shared browser.
Cloud history is retained until you delete the profile using “Delete cloud profile”. Deletion removes the live database record and revokes the key. The app keeps daily snapshots in a separate schema in the same database for seven days. These snapshots protect against accidental changes, not loss of the entire database. Copies in provider backups or admin exports can remain until those copies expire or are removed. A later restoration of an older backup may reintroduce previously deleted records; the operator must account for deletions when restoring backups. Legacy profiles without a private key are inaccessible through public sync endpoints.
Optional analytics
Analytics is off by default. If you opt in, the app records an approximate browser session identifier, event names, timestamps, and event properties such as assessment score, category, and counts of synced entries. It does not send your full measurements or chat messages as analytics events. Turn analytics off in the app to stop future events. Previously collected events remain in the operator's database and backups; switching analytics off does not erase them. The app respects the browser's Do Not Track signal.
Service providers and external resources
The deployed service uses Vercel for hosting and a configured PostgreSQL provider for cloud data and analytics. Their processing locations and retention depend on the operator's account settings. Fonts, icons, and charts load from Google Fonts, Cloudflare cdnjs, and jsDelivr, which receive network request information such as your IP address. Clinician listings are requested by this server from an external directory; following external provider links or WhatsApp links opens another service with its own policies. Listings are not endorsements and may be outdated.
Access and control
Use your private sync key to access cloud history, and use the app's deletion controls to remove live cloud or device data. The operator can access cloud records through protected administrative backup tools. Only submit information you are comfortable sharing with the service operator; this is not a clinical records system. Changes to this notice will be published here.