Privacy Policy
Last Updated: June 23, 2026
Welcome to Propsy Health. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform, specifically regarding data obtained from Google APIs.
1. Information We Collect
When you connect your Google Health account to Propsy Health, you explicitly grant us permission to access specific health and fitness data. We only request the data necessary to provide our core synchronization and visualization services. This includes:
- Profile Information: Basic Google account profile data to identify your account.
- Activity and Fitness Data: Step counts, calories burned, and wear time.
- Health Metrics: Heart rate data (average, max, resting, and raw intervals).
- Sleep Data: Sleep duration, sleep stages (deep, light, REM), and sleep efficiency.
2. How We Use Your Information
We use the data collected from Google Health solely to:
- Provide the core functionality of the Propsy Health dashboard.
- Analyze aggregated health metrics for research purposes. (Note: Individual raw data is not displayed in the application interface).
- Synchronize your health records securely to your Propsy platform account.
Propsy Health's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Data Storage and Security
Your security is our top priority. All health data retrieved from Google is stored securely in our encrypted databases.
- Encryption at Rest: Highly sensitive raw biometric data and OAuth tokens are encrypted using industry-standard AES-256 (Fernet) encryption before being written to the database.
- Encryption in Transit: All data transmitted between your browser, our servers, and Google's APIs is encrypted using TLS/SSL (HTTPS).
- Access Controls: Only authorized backend services have access to the decryption keys required to process your health data.
4. Data Sharing and Third Parties
We do not sell, rent, or trade your Google Health data to third parties. We do not use your health data for advertising, marketing, or any purpose other than providing the Propsy Health service to you. Your data is never transferred to other applications or third-party services without your explicit, separate consent.
5. Your Rights: Accessing Data, Withdrawing, and Deleting Data
You have full control over your data. To access your collected data, withdraw from the study, or delete your data, you must contact our research personnel directly via email.
- Data Access and Study Withdrawal via Email: To request a copy of your health data, withdraw from the research study, or request full data deletion, please send an email to propsy@u-bordeaux.fr with your Legacy ID. Our team will process your request, provide your data export, and permanently delete your records and revoke Google API access within 30 days.
- Google Account Settings: You can revoke Propsy Health's access at any time by visiting your Google Account Permissions page and removing Propsy Health from your authorized apps.
6. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Propsy Health Support
email: privacy@your-domain.com