Health Gateway Terms of Service

Effective date: June 10, 2026

Service

Health Gateway lets a user sync selected Apple Health data from an iPhone to a backend account and query that synced data through authenticated MCP tools.

Account And Eligibility

• Users sign in with Apple.
• A user is responsible for keeping device, Apple account, and MCP client access secure.
• The service is for individual accounts in v1. Enterprise, family, and multi-user accounts are out of scope.

Subscription

• Paid access uses Apple's StoreKit subscriptions.
• Subscription purchase, cancellation, renewal, refund, and payment details are handled by Apple.
• A valid subscription is required for HealthKit authorization and backend consent capture, backend health-data ingest, health-data queries, account export, and MCP access.
• Deleting a Health Gateway account does not cancel the Apple subscription; users manage subscriptions through Apple.

Health Data

• The app reads only the HealthKit data types approved by the user in iOS.
• The service is not a medical device, clinical workflow, health research study, emergency service, or provider integration in v1.
• The service does not provide medical advice, diagnosis, treatment, or emergency monitoring.
• Users should not rely on MCP responses for urgent health decisions.

Acceptable Use

Users and MCP clients must not:

• Attempt to access another user's data.
• Send caller-supplied user ids to bypass account scoping.
• Abuse OAuth registration, authorization, refresh, or MCP tool calls.
• Reverse engineer, probe, or overload the service except through an approved security disclosure process.
• Use the service for regulated clinical, research, provider, employer, insurance, or emergency workflows without a separate written agreement.

Data Rights

• Users can export a bounded page of their synced account data from the app.
• Users can delete their account in the app.
• Account deletion removes backend health samples, consent records, subscription entitlement records, OAuth grants, access audit rows, and the backend user row, while retaining only a pseudonymous deletion marker and sanitized aggregate audit summary for security and operational integrity.
• Data handling is described in the Health Gateway Privacy Policy.

Third-Party Services

Health Gateway relies on Apple services for sign-in, HealthKit permissions, and subscriptions, and on cloud infrastructure to operate the service. We do not use advertising networks, data brokers, or unrelated analytics services.

Availability And Changes

Background HealthKit sync depends on iOS scheduling, Health permissions, network availability, Low Power Mode, force-quit behavior, and subscription state. You can use Sync Now in the app when you want to request an immediate update.

Termination

The service may suspend access for abuse, security risk, nonpayment, legal requirement, or attempts to access another user's data. Suspension does not cancel a StoreKit subscription.

Provider And Contact

The service is provided by Good Feels Inc. ("we", "us"), Massachusetts, United States. Contact: hello@getgoodfeels.com.

Eligibility

You must be at least 18 years old (or the age of majority where you live) and capable of entering a binding agreement to use the service.

Subscriptions And Apple Terms

Subscriptions are purchased, renewed, restored, and canceled through Apple. Apple's Media Services Terms and the standard Apple End User License Agreement (https://www.apple.com/legal/internet-services/itunes/dev/stdeula/) apply to the app; where those terms conflict with this document for App Store purchases, Apple's terms control.

No Medical Advice; Warranty Disclaimer

The service transfers and summarizes your own HealthKit data; it is not a medical device and provides no medical advice, diagnosis, or treatment. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

Limitation Of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, GOOD FEELS INC.'S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE IS LIMITED TO THE AMOUNT YOU PAID FOR THE SERVICE IN THE TWELVE MONTHS BEFORE THE CLAIM, AND WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. Some jurisdictions do not allow these limits; in those places the limits apply to the fullest extent permitted.

Governing Law And Disputes

These terms are governed by the laws of the Commonwealth of Massachusetts, United States, without regard to conflict-of-law rules. Disputes will be resolved in the state or federal courts located in Massachusetts, and both parties consent to their jurisdiction. Nothing in this section limits consumer rights that apply under the law of your place of residence.

Security Disclosure

Report suspected vulnerabilities to hello@getgoodfeels.com with "SECURITY" in the subject line. We ask for a reasonable disclosure window and will acknowledge reports promptly.

Consumer Health-Data Rights

Where consumer health-data laws apply to you (for example, state laws granting access, deletion, or consent-withdrawal rights for health data), you can exercise those rights directly in the app — export your data, revoke MCP clients, revoke Health permissions, or delete your account — or by contacting hello@getgoodfeels.com. The privacy policy describes what we collect, why, and how deletion works.