top of page
Privacy Policy
Last Updated: August 20, 2026
Health Harmony is committed to protecting your privacy and the personal information you choose to share with us. Because Health Harmony is designed to help you organize and understand health-related information, the information you store in the platform may be sensitive.
This Privacy Policy explains how Health Harmony collects, uses, stores, protects, retains, and deletes information, including health information and information received through third-party integrations such as Google Calendar.
By using Health Harmony, you acknowledge the practices described in this Privacy Policy.
Information You Choose to Store in Health Harmony
Health Harmony allows you to enter, upload, import, and organize information related to your health and healthcare. Depending on how you use the platform, this information may include:
-
Medications
-
Symptoms and symptom history
-
Diagnoses and health conditions
-
Healthcare appointments
-
Provider information
-
Notes and questions related to your care
-
Medical documents or records
-
Information imported through connected services
-
Other information you choose to add to your account
Some of this information may be considered sensitive health information or Protected Health Information (PHI), depending on the circumstances in which it is created, received, or maintained.
We use the information you provide to operate Health Harmony and provide the features you choose to use.
Protected Health Information (PHI)
Health Harmony is designed with the sensitivity of health information in mind.
Depending on how Health Harmony is used and the source of the information involved, information stored within the platform may constitute Protected Health Information (PHI).
We take reasonable administrative and technical measures designed to reduce the risk of unauthorized access, use, disclosure, alteration, or loss of sensitive information.
However, no internet-based service or method of electronic storage can guarantee absolute security. Users should consider the sensitivity of information before entering or importing it into any online service.
HIPAA
The Health Insurance Portability and Accountability Act (HIPAA) applies to certain healthcare providers, health plans, healthcare clearinghouses, and their business associates.
Health Harmony's obligations under HIPAA may depend on the circumstances in which the platform is used and the relationships between Health Harmony, its users, healthcare organizations, and service providers.
Where HIPAA applies to Health Harmony's handling of PHI, we intend to maintain appropriate safeguards and practices consistent with applicable requirements.
Nothing in this Privacy Policy should be interpreted as a representation that every piece of health-related information stored in Health Harmony is PHI under HIPAA or that HIPAA applies to every interaction between Health Harmony and its users.
How We Protect Your Information
Health Harmony uses security measures designed to protect the confidentiality and integrity of information stored within the platform.
Depending on the information and service involved, these safeguards may include:
-
Encryption of sensitive information in transit and at rest
-
Secure authentication and account controls
-
Access controls designed to limit unauthorized access
-
Secure hosting and infrastructure
-
Secure software development practices
-
Monitoring, maintenance, and security updates
-
Limiting access to information to what is necessary to provide and operate the service
While we work to protect information stored in Health Harmony, no security system is completely immune from risk.
You are also responsible for protecting access to your account, including maintaining the confidentiality of your login credentials and using appropriate security practices on devices you use to access Health Harmony.
Third-Party Integrations
Health Harmony may allow you to connect third-party services, including healthcare systems, electronic health record systems, wearable devices, calendar services, or other services.
Connecting a third-party service is optional unless otherwise indicated. Information exchanged through an integration may be subject to both Health Harmony's privacy practices and the privacy and security practices of the connected service.
We encourage you to review the permissions and privacy practices of any third-party service you choose to connect.
The following section provides additional information about Health Harmony's optional Google Calendar integration.
Google Calendar and Google User Data
Health Harmony offers an optional Google Calendar integration that allows you to import and view appointments from a selected Google Calendar within Health Harmony.
Connecting Google Calendar is voluntary. You can use Health Harmony without connecting a Google account, and you can disconnect Google Calendar at any time.
What Google Data We Access
When you connect Google Calendar, Health Harmony requests the following Google OAuth permissions:
-
calendar.events.readonly — Allows Health Harmony to access event details from the Google Calendar you select.
-
calendar.calendarlist.readonly — Allows Health Harmony to view your calendar list, including calendar IDs and names, so you can select which calendar to synchronize.
-
userinfo.email — Allows Health Harmony to identify the email address associated with the Google account you connect.
Health Harmony's Google Calendar integration is read-only.
We do not create, edit, or delete events on your Google Calendar.
Why We Access Google Calendar Data
We access Google Calendar data only to provide the Google Calendar functionality you choose to use within Health Harmony.
Specifically, this allows us to import, display, and keep appointments from your selected Google Calendar synchronized within your Health Harmony account.
Google Calendar information is not used to modify your Google Calendar.
What Google Data We Store
When you connect Google Calendar, Health Harmony stores information necessary to maintain the connection, synchronize your selected calendar, and display appointments within Health Harmony.
This information may include:
-
Google OAuth access and refresh tokens required to maintain the connection
-
The email address associated with the connected Google account
-
The ID and name or summary of the Google Calendar you select
-
Synchronization information, including sync tokens, sync status, the date and time of the last synchronization, and synchronization errors
-
Copies of synchronized calendar events used to display appointments within Health Harmony
Synchronized event information may include:
-
Event title
-
Start and end times
-
All-day status
-
Location
-
Description
-
Google Calendar link
-
Event status, such as confirmed, tentative, or cancelled
Google OAuth credentials stored by Health Harmony are encrypted at rest.
Calendar Synchronization
When you first connect a Google Calendar, Health Harmony generally synchronizes events from approximately the previous 30 days and up to approximately 12 months into the future.
Health Harmony then continues synchronizing updates from your selected calendar while the Google Calendar connection remains active.
Because the integration is read-only, changes made within Google Calendar may be reflected in Health Harmony, but Health Harmony does not make changes to the events stored in your Google Calendar.
How We Use Google User Data
We use Google Calendar data only to provide the calendar synchronization and appointment-display functionality requested by the user who connected the Google account.
Health Harmony does not:
-
Sell Google user data
-
Use Google user data for advertising
-
Use Google user data for purposes unrelated to providing the Google Calendar integration
-
Create, edit, or delete events on your Google Calendar
-
Transfer Google user data to third parties except as necessary to operate Health Harmony, such as secure hosting or infrastructure providers, and only in a manner consistent with this Privacy Policy and Google's applicable requirements
How Long We Retain Google Calendar Data
Health Harmony retains Google Calendar connection information, OAuth credentials, synchronization information, and synchronized calendar data while your Google Calendar remains connected and as needed to provide the calendar synchronization feature.
While the connection is active, events that have been cancelled in Google Calendar may remain in Health Harmony with a cancelled status so that your Health Harmony calendar accurately reflects changes made to the connected Google Calendar.
Health Harmony does not retain Google Calendar connection data indefinitely after you disconnect the integration.
When you disconnect Google Calendar, the Google Calendar connection and synchronized data are deleted as described below.
Disconnecting Google Calendar and Deleting Google Data
You can disconnect Google Calendar at any time through the Calendar settings within Health Harmony.
When you disconnect Google Calendar:
-
Health Harmony attempts to revoke its Google OAuth authorization with Google.
-
We delete the stored Google OAuth tokens and Google Calendar connection record associated with your account.
-
We delete synchronized Google Calendar appointment and event data associated with that connection from our systems, including events previously marked as cancelled.
-
We stop synchronizing information from your Google Calendar.
Once disconnected, Health Harmony will no longer retrieve new or updated information from that Google Calendar unless you choose to connect it again.
Revoking Access Through Google
You may also revoke Health Harmony's access through your Google Account permissions.
Revoking access through Google prevents Health Harmony from accessing new information from your Google Calendar.
However, revoking access through Google does not by itself initiate Health Harmony's in-app disconnection process. To ensure that previously synchronized Google Calendar information stored by Health Harmony is also deleted, you should also disconnect Google Calendar through Health Harmony or contact us to request deletion.
Account Deletion
If you delete your Health Harmony account, Google Calendar connection information and synchronized Google Calendar appointments associated with your Health Harmony account are also deleted.
This includes the Google Calendar connection record, stored OAuth credentials, synchronization information, and synchronized event data associated with the account.
Requesting Deletion of Google Calendar Data
If you cannot access the in-app Google Calendar disconnect feature, you may contact Health Harmony and request deletion of Google Calendar information associated with your account.
You may also contact us if you would like to request deletion of your Health Harmony account and associated account data.
Requests may be submitted through the Health Harmony Contact page or through the support contact information provided on our website.
We may use information you provide with your request as necessary to identify the appropriate account, process the request, and confirm deletion.
Google API Services User Data Policy
Health Harmony's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including applicable Limited Use requirements.
Google Calendar information is handled in accordance with this Privacy Policy and the permissions you grant when connecting your Google account.
Your Choices and Responsibilities
You control the information you choose to enter into Health Harmony and the optional third-party services you choose to connect.
You may choose not to connect Google Calendar or other optional integrations. You may also disconnect supported integrations through the application where that functionality is available.
You are responsible for maintaining the security of your Health Harmony account and the devices you use to access it.
If you believe your account has been accessed without authorization, please contact Health Harmony promptly.
Changes to This Privacy Policy
We may update this Privacy Policy as Health Harmony evolves, new features are introduced, or privacy and regulatory requirements change.
When we make material changes, we will update the "Last Updated" date at the top of this page and may provide additional notice when appropriate.
We encourage users to review this Privacy Policy periodically.
Questions, Privacy Requests, and Data Deletion
If you have questions about this Privacy Policy, Health Harmony's privacy or security practices, Google Calendar data, or deletion of information associated with your account, please contact us at admin@health-harmony.co.
When contacting us about a data-deletion request, please provide enough information for us to identify the Health Harmony account associated with your request.
bottom of page