Privacy policy
OAK Healthy is a supplement and routine tracker, not a medical device.
On this device
Profiles, supplements, doses, schedules, cycles, inventory, intake history and biomarker results are stored in your browser. By default nothing is sent to any server. Label and barcode photos are read on your device and never uploaded. A barcode lookup sends only the barcode number, from your browser, to the open product database Open Food Facts.
Account (optional)
If you create an account we store your email address, a random salt, a hash of a value derived from your password, and your sync key encrypted with a key only your password can produce. If you sign in with Google or GitHub we also store that account id and your verified email. We never receive your password or your unencrypted data.
Encrypted sync, shares and circles (optional)
Synced data, shared stacks and circle views are encrypted on your device. The server stores only ciphertext and technical identifiers; we cannot read the content. Anyone with a full share or circle link can view it until it expires or you revoke it.
Reminders (optional)
If you turn on reminders we store your browser's push endpoint and the times to notify you. Notifications carry no health data.
Password-reset emails are sent through our email provider (Resend) to the address you enter.
What we do not do
No analytics, no advertising identifiers, no selling or sharing of data. Cloudflare processes standard request metadata (IP address, user agent) to run and protect the service; IPs are used briefly for rate limiting.
Deletion
Settings → Delete everything (also on the Account page) deletes the circles you own, reminders, your encrypted vault, your account and all data on this device, in that order. A deleted vault keeps only hashed ids and the deletion time, so other devices stop syncing. A circle made on a device that never synced must be deleted on that device. Share links can't be deleted; they expire after 365 days.
Contact: kim.phong619@gmail.com
Your password never leaves this device. It unlocks your encrypted vault; we can't read your data.