1. Who operates Henia
HeniaHealth Ltd. operates Henia, a nutrition, activity and personal progress service. Our contact location is Israel. Contact salhuv26@gmail.com about privacy, access, corrections or deletion. This policy describes the service, including optional features when available. You choose which optional information and connections to provide.
2. Information we process
Account data includes your sign-in identifier, name, email and profile picture when supplied. Your entries may include age, height, weight, goals, food preferences, meals, drinks, recipes, activities, training plans, treatment routines, feedback and messages. Some of this is sensitive health information. We also process photos, voice recordings, transcripts and AI results when you use those features; optional social posts, comments, relationships and sharing choices; and technical records needed for sign-in, security, reliability and usage/cost reporting.
3. Why we use information
We use account and submitted information to provide your diary, calculations, recognition, requested suggestions, synchronization and selected social features; support your requests; maintain security and investigate errors. Basic account data is needed to provide an account. Health connections and social sharing are voluntary; refusing an optional feature does not authorize another use of your data. We do not sell personal information. We do not use health or photo-contribution data for advertising.
4. Food-photo storage and recognition improvement
During the current phase, from 17 September 2026, new images uploaded to the food-recognition tool are saved automatically without separate approval, including when recognition fails. We keep a compressed copy up to 150 KB, the original prediction and model version when available, linked food corrections and reviewer labels. These are used only to improve food recognition, not for sale, advertising or unrelated model training. Earlier photos that were not retained cannot be restored. Profile photos, coach-chat images and training-schedule screenshots are outside this dataset. Images remain personal data after location/EXIF metadata is removed.
5. Photo access, retention and deletion
Access to contributed images and labels is restricted to authorized operators/reviewers for the food-recognition improvement purpose. The review page is private and does not publish examples to friends or the public. Location/EXIF metadata is removed when images are re-encoded, although visible image content can still identify a person or place. Examples expire after 365 days: they become unavailable at expiry and stored rows are removed on startup and hourly while the service runs. There is no Settings approval step during the current phase. Request photo deletion through the data-request contact process below. Account deletion also deletes associated retained photos. Operational backups can retain earlier copies until they expire; contact us for the applicable backup schedule. This version collects and labels examples; it does not run training jobs or export training datasets. Before training or new external processing begins, we will explain any additional retention, provider access and limits of withdrawal from completed models.
6. Health and wearable connections
When you connect Garmin, Apple Health or Health Connect, we process only the categories made available through your choices and platform permissions, such as weight, activity, energy expenditure, steps, sleep or other selected measurements. Nutrition export is a separate optional action. These readings can be incomplete or estimated. Imported native health reports are excluded from AI coaching and from the photo-learning dataset. We do not use Apple Health or Health Connect data for advertising or general-purpose AI training. You can manage permissions in the app and device settings. Disconnecting does not delete the provider account or its original records.
Restaurant and dish contributions
When you explicitly save a restaurant, dish or proposed correction, its text, photos and declared estimation method are shared with Henia users. Your name and profile are not displayed beside the contribution; its content may still identify you. We retain a separate account link and the permission version for management and moderation. Private diary entries are never imported automatically. Community photos are not added to the food-recognition dataset by this action.
Use Report a problem on a dish to request correction or removal or raise a rights/privacy concern. Reports and optional reply email are private to authorized operators. Reply email expires after 90 days or 30 days after a decision, whichever comes first, through periodic cleanup. Report details and decision history are retained to handle disputes and prevent repeated abuse; you can request deletion through our contact process. A hidden contribution is removed from reader access while a private review record may remain. External sources and user estimates do not establish restaurant approval or independent verification.
8. Other retention, cookies and security
Account and diary records remain while needed to provide the account or until handled under a deletion request, subject to applicable legal/security requirements. Sign-in sessions last up to 30 days. Food-conversation drafts expire after 30 days. From 23 September 2026, the text you type or dictate when logging food, Henia's replies, the amounts it estimated and what you saved, corrected or reported are also kept with your account for up to 12 months to review and improve food logging, and are deleted with your account. Personal coaching can temporarily retain up to four recent photos for follow-up context; photos expire from that context after 24 hours and cached bytes are removed during cleanup. Clearing the conversation or disabling personal coaching removes its cached photos. This is separate from food-photo storage described above. Resulting text, saved records and provider logs may remain under their applicable retention rules. Essential cookies/session tokens and local device storage support sign-in, preferences and drafts. Clearing local storage may sign you out and does not itself delete server data. We use HTTPS and access controls; no service can guarantee absolute security.
9. Your choices and data requests
You can edit available account/diary information and manage optional connections. To request access, correction, a copy or deletion of your account and related information, email salhuv26@gmail.com from your sign-in address, with the subject “Henia data request”. We verify account ownership and explain the action taken and any required retention. Do not send passwords or identity documents in the initial request. Account deletion includes associated photo-learning examples. Deleting Henia data does not delete external provider accounts, recipients’ copies or your device copies. Depending on applicable law, you may also have rights to object, restrict processing, withdraw consent or complain to a privacy authority. Contact us to exercise those rights. The service is intended for adults; do not contribute images of children or other people’s private information.
10. Updates and contact
We will update the version date when this policy changes and give additional notice or request new consent where needed for a material change. An unrelated new purpose is not covered by photo-improvement consent. Contact: HeniaHealth Ltd., Israel, salhuv26@gmail.com.