Health Sense: Track & Record

"We collect your device and network connection information... SDK/API/JS code version, IP address, platform, timestamp, application identifier, application version, application distribution channel, independent deice identifier, the terminal manufacturer, the terminal device operating system version, the location of the language, the time zone and the network state (Wi-Fi and so on), the CPU, and the battery use, Screen resolution, Memory usage, Storage usage, sim operator, sim card country... Phone height and width, sim operator name, os version. We store the information collected through the Android ID tied to the device you are using."

The app collects an extraordinarily broad set of device data — including SIM operator, battery usage, CPU info, memory/storage usage, and Android ID — far beyond what a health app needs for core functionality.

"Third-party SDKs intergrated in our app may access your information, including: Google Advertising ID, Demographic data, Data to fight against fraud, Data associated with your device, Data to do advertising, marketing and analysis. The third-parties include monetization partners, such as Google Admob, Facebook Audience Network, Applovin, Mintegral etc., and also analytical tools partners, such as Firebase, Google Analytics, Facebook Analytics and AppsFlyer."

Multiple advertising and analytics SDKs (AdMob, Facebook, AppLovin, Mintegral, AppsFlyer, Pangle) are embedded in the app and collect data directly from the user's device, with the company disclaiming control over these third parties.

"We store the information collected through the Android ID tied to the device you are using. In this way, we can retain your advertising behavior while you are using the app. We will treat this information as personal information."

The app ties collected data to the persistent Android ID to track advertising behavior, and collects Google Advertising ID via third-party SDKs, enabling cross-service tracking and profiling.

"LOCATION PERMISSION - We will request precise location permissions for GPS-based functions. For fitness-related app, we may ask to collect your personal information such as: location... We may also use various third party advertising and marketing partners to assist us on our behalf and may share information collected from you with such third parties for this purpose."

The app requests precise GPS location and collects IP-based geolocation. Combined with the broad data sharing with advertising partners, location data may be shared with third parties for ad targeting.

"We may, however, modify the Policy from time to time. If such change has been made, we will provide you additional forms of notice of modifications or updates as appropriate under the circumstances. Your continued use of our app or services following the change of the Policy will mean you accept those changes."

The company can modify the privacy policy at any time with vague notice obligations, and treats continued use as acceptance of new terms — users must actively stop using the app to reject changes.

"We DO NOT require you to create an account on our App, and therefore, We DO NOT collect any personal data from you when you download and/or use our app. Regarding the automatic information we collect, we only collect it for operating purposes, and we do not retain it. All the data only stored on your Device, your data will be permanently erased by deleting system data or uninstalling Our App."

The policy contradicts itself — earlier sections describe extensive data collection and sharing with third parties, but section 3.2 claims no personal data is collected or retained. There is no clear deletion timeline for data already shared with advertising partners.

"To exercise your rights described above, please submit a verifiable consumer request to us by support@healthapplines.com. Only you or your authorized agent may make a verifiable consumer request related to your personal information. A verifiable consumer request must: Provide sufficient information that allows us to reasonably verify you identity... We cannot respond to your request accurately if we cannot verify your identity."

There is no self-service data deletion option. Users must email support and go through an identity verification process, with a 45-90 day response window — creating friction around exercising deletion rights.