Your records stay with you.

Effective October 12, 2026. This policy covers the Health Drey app for iPhone and iPad and the website at healthdrey.com, both published by Cloud Formation Software, LLC.

In one breath: Health Drey keeps your health records on your device. It has no servers and no accounts, so we never receive, store or see your records, and there is nothing for us to sell, share or lose. Nothing leaves your device unless you choose to share it.

What we collect

Nothing. Health Drey does not create accounts, does not contact any server run by us, and contains no analytics, crash-reporting, advertising or other third-party code. We do not know who uses the app, how often, or what is in anyone’s notebook.

Where your records live

Everything you add to Health Drey — visits, problems, lab results, reports, medications, allergies, immunizations, procedures, vitals, insurance, and the PDFs and notes attached to them — is stored in a database on your device.
That database and every file the app writes are protected with iOS Data Protection (class Complete), so they are encrypted whenever your device is locked.
The app does not sync your notebook to iCloud, CloudKit or any other cloud service. If you back up your device, your backup is made and protected by Apple on your terms; Health Drey has no part in it.
Deleting the app deletes the notebook with it. There is no copy anywhere else.

The Apple Health app

Health Drey works with the Apple Health app. If you allow it, the app reads the clinical records your healthcare providers have delivered to the Health app (lab results, clinical notes, conditions, medications, allergies, immunizations, procedures, vitals and insurance) and copies them into your notebook on this device.

Access is read-only. Health Drey never writes to the Health app.
You choose what to allow when the app asks, and you can change or revoke access at any time in Settings › Health › Data Access & Devices.
Records read from the Health app are used only to show them to you inside Health Drey. They are never transmitted off the device, never used for advertising or marketing, never sold, and never shared with anyone, including us.

Summaries and Ask

Summaries and the Ask feature are written by Apple Intelligence running on your device. Health Drey uses only the on-device model: it never sends your records to Private Cloud Compute, to any third-party AI service, or to us. If your device does not support Apple Intelligence, these features are simply unavailable; the rest of the app works as normal.

These features summarize your own records. They are not medical advice and do not diagnose, screen or recommend treatment. Ask your doctor about anything you read.

Face ID and the app lock

If you turn on the app lock, Health Drey asks iOS to confirm it’s you with Face ID, Touch ID or your passcode before showing your notebook. Apple handles that check; the app only learns whether it succeeded. Health Drey never sees or stores biometric data.

Sharing and exporting

Anything that leaves your device does so because you chose to send it — for example by sharing a record or report through the iOS share sheet. It goes only to the app or person you pick, under their terms, and Health Drey is not involved after that.

Children

Health Drey is a tool for managing your own records and is not directed at children under 13. Because the app collects no information, we do not knowingly collect information from anyone, of any age.

Your rights

Privacy laws give you rights to access, correct, export and delete personal information that a company holds about you. Health Drey holds none, so there is nothing for us to provide or erase: your notebook is entirely in your hands on your device, and deleting the app deletes it. If you have questions about how the app works, write to us and we will answer.

This website

healthdrey.com is a static site with no cookies, no accounts and no analytics. It is delivered through Cloudflare, which, like any hosting provider, may process your IP address and request details briefly for security and to serve the pages; that handling is described in Cloudflare’s own privacy policy. Fonts are loaded from Google Fonts, which receives the request needed to deliver them. We do not receive any of this information.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. Because the app never contacts us, it cannot notify you; please check this page when you update the app.

Contact

Cloud Formation Software, LLC
support@healthdrey.com