Take a copy whenever you like. It downloads while you wait — there is no queue,
no email, and nothing to come back for.
Where
On the web, Settings > Privacy & Security. On the phone, Profile > Privacy > Download my data.Both surfaces offer the same two shapes — the full export and the per-topic
CSVs — and the same range choice described below. On the phone the file goes to
the share sheet, so you pick where it lands: Files, Drive, a mail draft, or
anywhere else that accepts a file.
The full export
One button, Download My Data, and a JSON file lands in your downloads.
JSON because it is the format that can hold the whole shape without flattening
it — a lab panel keeps its results and its interpretation nested underneath it,
rather than becoming three unrelated tables. Any text editor opens it, and any
tool that reads JSON can take it apart.
It contains everything stored under your account:
The rule behind that list is worth stating plainly: anything account deletion
can erase, the export can hand you first. The two are checked against each
other in the codebase, so a new kind of data cannot appear in one without
appearing in the other.
What is left out, and why
Five things are erased on deletion but never exported: your sessions, your
OAuth provider links, your two-factor backup codes, your password-reset tokens,
and your device push tokens.
Every one of them is live credential material. An unused password-reset token
sitting in a file in your downloads folder is a standing way into your account;
a refresh token is a signed-in session someone else can pick up. Handing you
those is not portability, it is a second copy of your keys.
Your password is not in there either — we do not have it, only a hash.
Per-topic CSV
Below the full export are five buttons, one per topic, each downloading a
spreadsheet-ready CSV:
Use these when you want one thing in a spreadsheet rather than everything in a
structured file. They open directly in Excel, Numbers or Google Sheets.
How far back
The phone app lets you bound the export: everything, the last twelve months, or
the last three. The bound trims the day-to-day logs only — food, hydration,
weight, tracking entries and nutrient summaries. Your profile, health record,
lab results, saved foods and reminders always come in full, because they are
not dated the way a log is, and a partial copy of them would not be a copy.
It exists for repeat exports: once you have the whole record, a three-month
file is the increment rather than the whole thing again.
For a clinician: the report
Neither file above is what you want to hand a doctor. The Clinician Report
is: your conditions, medications, allergies, current medication interactions
and recent labs, laid out on one page, printed from your browser with the print
button on the report itself. Print it to paper or save it as a PDF from the
print dialog.
What there is not
choice above is the only thing you can vary, and it moves the logs only.
moment it lands; keep it somewhere you will find it.
After you have it
Store it somewhere private. It is your complete health record in plain text,
and it is exactly as sensitive as that sounds — a synced cloud folder shared
with other people is the wrong home for it.
If you are leaving, export first. Deleting your account erases the record
itself, and we cannot produce it again afterwards. See
Data Retention.Related Articles: