Privacy Policy
Last updated: October 1, 2026
Overview
HealthIndex ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website.
Information We Collect
- Usage Data: We collect anonymous usage statistics to improve our service.
- Browser storage: Google sign-in uses browser storage if you choose to save a watchlist. Our traffic measurement is cookieless.
- Newsletter: If you sign up for the newsletter, we collect your email address solely for notification purposes.
How We Use Your Information
- To provide and maintain our price comparison service
- To send newsletter updates if you opt in
- To analyze usage patterns and improve our website
- To detect and prevent technical issues
Third-Party Services
We use the following third-party services:
- Vercel: For website hosting
- Fly.io: For backend services
- Cloudflare Web Analytics: For cookieless traffic measurement
- Upstash Redis: For daily retailer-click counts and link details collected by our analytics dashboard, which is hosted on Vercel
Affiliate Disclosure
HealthIndex participates in affiliate marketing programs. This means we may earn commissions on purchases made through our links to retailer sites. This does not affect the price you pay.
Every Type of Data We Collect
The full list. If it is not on this table, we do not collect it.
| Data | Why | Who else sees it | Kept |
|---|---|---|---|
| Email address | Only if you subscribe to the newsletter | Our email provider, to deliver the message | While subscribed. An inactive subscription record is deleted 30 days after unsubscribe. |
| Google account name and email, and the products you save | Only if you sign in, so your watchlist follows you between devices | Google, which handles the sign-in itself | Until you ask us to delete it |
| Pages viewed, referring site, approximate region, device and browser type | Aggregate traffic measurement | Cloudflare Web Analytics, which is cookieless | Aggregate only, never tied to you |
| Date, retailer, product or link label, link placement, source page, and destination host and path for retailer clicks | To see which comparisons are useful and to attribute commission | Our analytics dashboard, hosted on Vercel with daily records in Upstash Redis; the retailer you visit handles your visit under its own policy | Daily counts and link details expire after 400 days. Older summaries from before August 2026 are removed by a daily job after 30 days. Click records are not linked to your account. |
| Server logs, including IP address | To run and secure the site | Our hosting provider | Short-term, per the host's retention |
When you follow a supported retailer link, our click analytics dashboard receives a click signal. It stores the link details above as daily counts and does not retain destination URL query strings, including query-based affiliate tags. Click records are not attached to your email or Google account.
No passwords, because Google handles sign-in and never shares one with us, and no payment details, because HealthIndex sells nothing directly. We do not sell, rent, or trade any of it.
Deleting Your Data
Stopping the emails. The unsubscribe link in any email stops the newsletter right away. When no other email preference is active, we delete the inactive subscription record after 30 days.
Deleting the record. Email privacy@healthindex.app from the address you signed up with and we will erase it, including any account and saved list. Requests are handled by hand, so allow up to 30 days, and we will confirm once it is done.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Opt out of newsletter updates at any time
- Clear or limit browser storage through your browser settings
Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@healthindex.app