Health

Health keeps your health data: activity, body measurements, sleep, heart, nutrition and the rest of Apple Health's categories. Open it at health.cactive.com.au, from the app switcher, or in the Health app on iPhone, which syncs with Apple Health.

Private by default

• It's yours, not an organization's. No organization, its owners or admins, or its keys can open it, and nothing goes to an organization's audit log.
• Nothing is stored until you agree to Health's terms. Sensitive categories (Cycle Tracking, Medications, Mental Wellbeing, Symptoms and Sexual Activity) each ask again before anything in them is stored.
• Nothing is shared until you choose. Everything starts as Only Me.
• Encrypted with your own key: each sample's value, notes and details (Sexual Activity's protection and partners included) are encrypted with a key made for you alone, so a copy of the database reads nothing.
• Everything is in your activity log (Privacy → Activity): consents, every sharing change, leaderboard opt-ins, Caity's reads, exports, and who viewed what you share (once a day each). Only you can read it.
• Export everything or delete everything at any time (Privacy). Deleting removes your key first, so nothing left can be read, then everything else.

Health data is sensitive information under the Australian Privacy Act. You can withdraw your consent at any time: nothing new is stored and every share stops at once; your data stays until you delete it.

Summary and Browse

• Summary: your pinned metrics, each with today's value, the last seven days and the trend against the week before, plus highlights (trends and streaks). Choose what's pinned.
• Browse: every category, and the metrics in each. Sexual Activity shows only when your account is known to be 18 or over, from the date of birth on your Cactive ID account (accounts made before sign-up asked for one add it there once).
• A metric: its chart by day (hours), week, month, six months and year, with the average, range, total and best day; all its samples; add data; its sources; the unit you see it in; and who can see it.

Where the Watch and the phone both count the same steps, Health counts them once: in each overlap the first source in your Sources order wins, as Apple Health does.

Apple Health

The Health app on iPhone reads from and writes to Apple Health. It asks for permission per data type, and Sync Settings chooses which types go each way: read from Apple Health, write to it, both, or neither. Sensitive categories start off. New data arrives in the background where Apple Health allows it. A sample changed or deleted in Apple Health is changed or deleted here; entries you make in Health are written to Apple Health and never come back as duplicates.

Android's Health Connect isn't supported yet.

Sharing

For each metric, or a whole category, choose who can see it:

A metric's own setting wins over its category's. What's shared is aggregates (daily values, streaks and personal bests), never individual samples, unless you choose samples for that metric. Sensitive categories share aggregates only. Shared metrics show in a Health section on your Mirage profile; Preview shows it as each audience sees it. Someone you've blocked on Mirage, or who blocked you, never sees anything, and nothing is shared while your Mirage profile isn't active.

Sexual Activity

For people 18 and over. Each entry has its date and whether protection was used (as Apple Health records), and optionally a partner: a name, or a Mirage person. Entries are encrypted with your key like everything else in Health. Partners are never shown to anyone else or included in anything shared. Your private summary shows entries per period, how often protection was used, and the number of different partners.

Sharing Sexual Activity is separate from everything else and off until you turn it on: you choose the audience and which of the counts per period, the protection-used rate and the partner count (as a number) are shared, and confirm. Names and the dates of entries are never shared, and viewers must be 18 or over too.

Leaderboards

A Mirage server can turn on Health leaderboards (Manage Server → Health) and choose metrics such as steps, active energy, workouts and sleep. You rank on a server only for the metrics you opt in there, by week, month and all time, and opting out removes your scores.

Sexual Activity has a leaderboard of its own, for people 18 and over only:

• The server turns it on with its own switch in Manage Server → Health, separate from its other leaderboards. Only managers who are 18 or over see the switch.
• You opt in with its own switch; ranking other metrics doesn't include it.
• Counts only: the number of entries this week. Never partners, notes, times or anything else.
• Gone at once when you opt out, or when the server turns it off (turning it back on doesn't add anyone back).

Caity

Caity can read your Health summaries (daily values, averages and trends, never samples, notes or partners) only when you allow it in Privacy. Sensitive categories need naming one by one; Sexual Activity is never included.

Access

The Health, phone and Mirage apps act as you. Personal API keys and connected apps with these scopes act for you only when you allow it in Privacy, and never change privacy settings. See the Health API.