Privacy Policy

100 Years (活到百岁) · Version 2026.09.30 · Last updated: September 30, 2026

Summary: Your health data stays on your device and in Apple Health unless you explicitly enable cloud AI processing and start an analysis. 100 Years does not operate a hosted cloud service in the current release. A permitted provider request is sent directly from your device to the endpoint you configure, using your API key when one is required.

1. Information We Collect

We do not operate analytics, crash-reporting, advertising, or tracking collection. Health metrics, profile data, imported reports, journals, analysis results, and preferences are stored in the app's local data container or read from Apple HealthKit after authorization. They do not leave your device except for an explicit export/share action or a permitted cloud AI request described below.

The current app does not upload:

Crash reports or performance telemetry
Advertising identifiers or tracking data
Health records to servers operated by 100 Years

2. Health Data & Apple HealthKit

100 Years integrates with Apple HealthKit to read health metrics you authorize, including but not limited to:

Heart rate, blood pressure, blood oxygen
Step count, walking distance, workout data
Sleep analysis data
Body measurements (height, weight, body fat)
Nutrition data

In compliance with Apple's HealthKit guidelines:

Health data is never sold to advertising platforms, data brokers, or any third party.
Health data is never used for advertising or marketing purposes.
Health data is never stored on our servers or in cloud storage under our control.
You control which health data categories the app can access through iOS Settings → Health → 100 Years.

3. AI Analysis

On-device AI does not send the analysis input off-device. When you explicitly enable cloud AI processing consent, configure a provider, and start an analysis that uses it, the app sends the disclosed data categories directly from your device to that endpoint. Remote providers require your own API key; a local HTTP server can be used without a key. The app shows route metadata for completed AI work.

We do not proxy, intercept, or store any data sent to AI providers.
Your API key is stored securely in the iOS Keychain on your device.
Please review the privacy policy of your chosen AI provider to understand how they handle data.

4. Camera & Photo Library

The app uses your camera to scan health/medical reports via OCR (Optical Character Recognition). Scanned images are processed on-device and are not uploaded to any server. Photo library access is used to import reports and save generated share images.

5. Notifications

With your permission, the app sends local notifications for exercise reminders, analysis completion, and health insights. No notification data is sent to external servers.

6. Purchases

100Years offers one non-consumable lifetime in-app purchase processed by Apple StoreKit. Apple handles purchases, App Store offer-code redemptions, verification, restoration, and refunds. We do not have access to your payment information, and we do not receive or independently validate activation codes.

7. Data Storage & Security

User profile data and analysis results are stored locally using SwiftData; preferences use the app's local defaults container.
API keys are stored in the iOS Keychain with the kSecAttrAccessibleWhenUnlockedThisDeviceOnly protection level.
Remote provider requests use HTTPS/TLS. A user-configured local HTTP endpoint is unencrypted: analysis data and any API key entered for it travel over the local network after your consent and an analysis you start. iOS may ask for Local Network permission. Remote HTTP endpoints are rejected.

8. Apple Watch

The companion Apple Watch app does not read Apple Health directly. It displays a bounded health snapshot sent by the iPhone through Apple's WatchConnectivity framework. The snapshot stays within your paired devices.

9. Children's Privacy

100 Years and its health estimates are intended for adults ages 18–120. Profiles outside that range cannot generate new estimates. Previously saved local data is not automatically deleted; you can correct the birth date, export your data, or delete it in the app.

10. Third-Party Services

The app may integrate with the following third-party services:

Apple HealthKit, WatchConnectivity, and StoreKit — authorized health access, paired-device sync, lifetime purchases, offer-code redemption, restoration, and refund status. Apple Privacy Policy
AI Service Providers (only a provider the user configures and invokes) — cloud analysis. Users should review their selected provider's policy before granting cloud consent.
Google LiteRT-LM — a vendored on-device inference runtime; its local use does not transmit analysis data.

11. Your Rights

You can:

Revoke HealthKit access at any time in iOS Settings.
Delete account data from the app's account settings, or remove the app and its local container.
Remove your API keys from the app's settings at any time.
Request information about any data we may have collected by contacting us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are versioned and shown in the app. Existing users may dismiss an update and continue using local features; current consent is required before future cloud data egress or a new purchase.

13. Contact Us

The individual developer and operator of 100 Years is Jianwu Gao. If you have questions or concerns about this Privacy Policy, please contact:

Email: dreamtale.jg@gmail.com