This Privacy Policy explains what information Firebird Systems ("we," "us," or "our") collects when you use HealthViewer ("the App") or visit this website, how that information is used, and your rights with respect to it.
The short version: Firebird Systems does not collect, receive, or store your health data. Everything you enter into the App stays on your device, encrypted, under your control. Health data only leaves your device if you choose to connect a health system portal or turn on optional AI features, and then it goes directly to that service, never to us. The one exception is a redacted lab report sample, which reaches us only if you choose to email it to us. The only personal information we receive is what Lemon Squeezy shares with us to fulfill your purchase (your name and email address).
The App is designed to be entirely local-first. We do not collect, receive, or have access to:
When you purchase HealthViewer, your transaction is processed by Lemon Squeezy, our Merchant of Record. Lemon Squeezy shares with us the minimum information needed to fulfill your order and provide support: your name and email address.
We use this information solely to:
We do not use your email address for marketing without your explicit consent. Lemon Squeezy's handling of your payment details is governed by their own Privacy Policy.
When you activate a license key in the App, the key is validated against Lemon Squeezy's licensing API. This process transmits the license key and a device identifier to Lemon Squeezy's servers to confirm validity. No health data is transmitted during this process.
If a lab report won't import, the App offers to help you send us a sample so we can add support for that lab's layout. This is entirely optional, and nothing is sent automatically:
We use samples only to develop and test support for lab report layouts. We never sell or share them. We delete the sample and your email within 90 days of adding support for the layout, and in any case within 12 months of receiving it, or sooner if you ask. We may keep a short excerpt as a test file for the App, after further editing to remove anything identifying that remains.
This website does not use any analytics scripts. Unless you arrive through an affiliate link, as described below, it sets no cookies.
Some people who recommend HealthViewer are affiliate partners, who earn a commission if someone they refer buys a license. If you reach this website through a partner's link (one whose address contains ?aff=), we remember which partner referred you so the purchase can be credited to them:
hv_aff that holds only the partner's referral code. It expires after 14 days.ls_aff_ref that refers to that visit, for up to 14 days. If you go on to buy, the reference is passed to the checkout.The script is loaded from Lemon Squeezy's servers whenever those two pages are opened, but it sends nothing and sets no cookie unless you arrived through a partner's link. None of this involves the App or your health data, and we do not use it to follow you around this website or any other. You can delete both cookies in your browser's settings at any time; your purchase will then not be credited to a partner, and nothing else changes.
All health data you enter or import into the App is stored exclusively in an encrypted .hvdb file on your own device. The encryption key is derived from your password using PBKDF2 and is never transmitted anywhere. Firebird Systems has no ability to access your data.
If you choose to back up your .hvdb file to a cloud storage service (e.g. iCloud, Dropbox), that backup is governed by the privacy policy of the service you use. We recommend keeping backups of your database file in case of device loss.
The App may optionally connect to third-party health system portals (Epic MyChart, Oracle Health (Cerner), athenahealth, eClinicalWorks) via SMART on FHIR OAuth to import your lab results, where your practice supports it. These connections are initiated by you, on-demand. Firebird Systems does not store or receive the credentials or tokens used for these connections — they are held locally on your device.
AI features are optional and off by default. They only work after you enter your own API key for an AI provider you choose (e.g. Anthropic, OpenAI, Google, Groq). When you use an AI feature, the relevant data is sent directly from your device to that provider:
Firebird Systems never receives this data. Your chosen provider handles it under its own terms, so review that provider's privacy policy before enabling AI features.
Your health data exists only on your device. Deleting your .hvdb database file permanently removes all your health data — we have no copy of it.
To have a lab report sample you sent us deleted sooner, email support@healthviewer.net from the same address.
If you request deletion of your purchase record (name and email), contact us at support@healthviewer.net. Note that deleting your purchase record will deactivate your license.
HealthViewer is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the App after changes are posted constitutes acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy, contact us at support@healthviewer.net.