Privacy Policy

Winsorlabs Health · last updated 26 September 2026

Winsorlabs Health is a private, personal health log. It is built and used by one person to track their own health. It is not a product, it is not offered to the public, and it has no users other than its author.

What it accesses from Google

With explicit permission granted through Google sign-in:

• Your email address — to confirm who is signing in. Only allow-listed addresses can use the app.
• Google Calendar, read-only — to recognise annual leave, sick leave, appointments away from home and visitors, so they don't have to be logged by hand. The app never creates, changes or deletes calendar events.

From calendar events it reads only the title, time, location and whether you declined. It does not read descriptions or attachments.

What it does with it

Turns calendar events into entries in the health log (for example "annual leave, half day" or "out / appointment") and shows them on your own calendar and charts. Data is not used for advertising, profiling or analytics.

AI processing

Some features use Claude, an AI model from Anthropic, through its API:

• reading your written daily log into proposed entries you then check;
• sorting calendar event titles that have no location and that simple rules can't place (title only), into "visitors", "out" or "skip";
• reading a medication label from a photo you take, to pre-fill a form.

Only what's needed for that one task is sent. Under Anthropic's commercial terms, data sent through the API is not used to train their models. Nothing is sent to Anthropic unless you use one of these features or the calendar sync you turned on.

Where it goes

• Stored on a private server the author controls. Backups are encrypted before they leave the server.
• Google access is stored encrypted at rest.
• Not shared with anyone apart from the AI processing described above. No analytics providers, no advertising networks.
• Not sold.

Limited use

Winsorlabs Health's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used to develop, improve or train AI models.

Removing access

Calendar access can be disconnected in the app (Settings → Calendar) and revoked at any time at myaccount.google.com/permissions. Stored access and any data derived from the calendar are deleted on request.

Contact

catjwin@gmail.com