Privacy
Short version: your health data never leaves your device. There is no account, no server that receives files, no analytics and no cookies.
What happens when you choose a file
- Your browser opens the zip and reads
export.xmlon your device, in a background thread of this page. The file is not uploaded anywhere. - The result is a compact summary: one value per measure per day, the occasional reading (such as VO₂ max or weight), and your workouts. It does not keep the individual samples, your date of birth or other profile details beyond what the charts use.
- That summary is stored in this browser's own storage (IndexedDB) so the dashboard is there next time. It is only readable by this site, in this browser, on this device.
- Your settings (units and targets) are stored the same way.
What the site can and cannot do
- The site is a set of static files served from Vercel. There is no backend code, database or API.
- Every page is sent with a Content-Security-Policy that includes
connect-src 'none'. That tells your browser to block every network request the page's scripts might try to make (fetch, XMLHttpRequest, WebSocket, beacons), so the page cannot send your data even by mistake. Scripts, styles and the font may only come from this site itself. - No third-party scripts, fonts, trackers or analytics are loaded. The font is served from this site.
- Like any website, the host sees ordinary request logs when you load the pages (such as IP address and the file requested). Those requests never contain your health data.
Check it yourself
- Airplane Mode. Load this site, switch on Airplane Mode (or disconnect from the internet), then choose your export. It reads and shows everything without a connection.
- Network panel. On a computer, open your browser's developer tools, go to the Network tab, then choose your file. No request carries your data.
- Source. The code is short and readable, with no build step: what you download is what runs.
Deleting your data
- In the app, open Settings (the menu at the top right) and choose Forget my data. This deletes the stored summary and settings from this browser.
- Clearing this site's data in your browser settings does the same.
- Browsers can also clear stored data on their own, for example Safari after a period without visits. Keep your export, or use Save a copy (.json), if you want to reopen the dashboard later.
Not medical advice
Health Atlas shows what your devices recorded. Device readings can be wrong or incomplete, and the short explanations summarise general guidance only. They are not a diagnosis or a recommendation. Talk to a qualified clinician about your health.
Not affiliated with Apple
Health Atlas is an independent project. It is not affiliated with, sponsored or endorsed by Apple Inc. Apple, Apple Watch, iPhone and Apple Health are trademarks of Apple Inc.