Last updated: August 2026
When you create an account (email/password, Google Sign-In, or Apple Sign-In), we collect your email address and display name. We also collect your device platform (iOS or Android), app version, device model, and operating system version for diagnostics and support, and your chosen app language so that notifications arrive in that language. If you sign in with Apple, we additionally store a token that Apple issues to us, used solely to disconnect the app from your Apple ID if you later delete your account.
When you link a sauna, we store the device identifier and your ownership. We record the sauna's operational state (heating status, target temperature, timer, light, chromatherapy settings, current temperature, and connectivity status). This data is updated in real time while the sauna is connected.
During one-time setup, the app uses Bluetooth to hand your Wi-Fi network name and password directly to the sauna. These credentials travel from your phone to the sauna only — they are never transmitted to or stored on our servers, and are not part of your account. Bluetooth is used solely to find and configure the sauna; it is not used for location or tracking.
We log sauna usage sessions including start time, end time, duration, target temperature, and peak temperature reached. Usage history is visible to the device owner and household members in the app.
You can invite others by email to control your sauna. When you send an invitation, we store the recipient's email address and the invitation status. Household members can see the sauna's real-time state and usage history. The device owner can remove members or cancel invitations at any time.
We store your device's push notification token to send sauna status alerts — for example, when the target temperature is reached, if a device error occurs, or if the sauna goes offline while heating. You can disable notifications in your device settings at any time. Push tokens are removed when you sign out.
Your appearance preferences (theme, temperature display style) and linked device list are stored locally on your device and are not transmitted to our servers. Two settings live elsewhere by design: the temperature unit (°F/°C) is stored on the sauna itself as part of the device state described above, and your app language is stored in your account so notifications match it.
Your data is used solely to operate the Health Mate app: authenticating your account, controlling your sauna, delivering push notifications, and displaying usage history. We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.
We use the following services to operate the app: Google Firebase (account authentication, cloud database, push notification delivery, and crash reporting) and Amazon Web Services (secure communication with your sauna). Our servers run on managed cloud hosting infrastructure. These providers process data on our behalf in accordance with their own privacy policies. To protect the service from abuse, the app uses device integrity attestation (Apple App Attest on iOS, Google Play Integrity on Android, via Firebase App Check) solely to verify that requests come from a genuine copy of the app. All communication between the app and our servers is encrypted in transit (HTTPS/TLS).
Your account data, device data, and usage history are retained for as long as your account is active. Server application logs are retained for approximately 30 days. Administrative audit logs (account management actions) are retained indefinitely for security purposes.
You can permanently delete all your personal data at any time from the app menu: Sign Out > Delete My Data. This removes your account, push notification tokens, household memberships, pending invitations, and your usage history. For a sauna where you are the only user, the sauna's record and all of its data (usage logs, memberships, invitations) are deleted with it. For a sauna you share, ownership passes to a household member so their access continues — your membership and your usage sessions are still deleted, while the device and the other members' data remain. If you signed in with Apple, we also ask Apple to revoke the app's access to your Apple ID. This action cannot be undone.
We do not use any advertising or tracking frameworks. We do not collect location data, browsing history, or app usage patterns beyond the sauna operational data described above. The apps use Firebase Crashlytics to collect crash reports (stack traces, device model, OS version) solely to diagnose and fix app defects; crash data is never used for advertising or tracking and is processed by Google Firebase under its data-processing terms.
The Health Mate app is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.
We may update this privacy policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.
For privacy questions or data requests, contact us at app@healthmatesauna.com.