Pre-alpha · nothing to install yet
Take your health data somewhere you own.
Hozz is a free, open-source app for iPhone and iPad that copies what Apple Health knows about you into a file you keep, or onto a server you run. No subscription, no account, and nothing of yours passing through anything of mine.
iPhone and iPad · GPL-3.0 · free forever
Real HealthKit identifiers. Hozz reads what you allow, and writes it where you point it.
The promise
Six things Hozz will never do.
Most health apps ask you to trust a company. Hozz is built so there is nothing to trust in the first place.
No subscription
No paywall, no Pro tier, no feature held back. Hozz has nothing to sell you later.
No account
Nothing to sign up for, because there is nothing on the other end to sign up to.
No analytics
No tracking, no telemetry, and no crash reports with your health inside them.
No server of mine
No relay, no database, no cloud. There is nothing in the middle for you to trust.
Nothing put in iCloud
Hozz never stores your Health data there. Where a copy lands is your call, not a default.
Credentials stay put
Anything you use to reach your own server lives in the Keychain on that device, unsynced.
How it works
It only does three things.
- 01
You decide what it can read
iOS asks, not Hozz. Tick the data you want to take with you and leave the rest closed. Change your mind whenever you like.
- 02
It keeps up quietly
Hozz reads each kind of data from where it last stopped, so nothing arrives twice and nothing gets skipped. Close it mid-export and it picks the thread back up.
- 03
It writes where you say
A file you save, a server you run, a computer on your desk. Nothing leaves until you have set up a destination and confirmed it.
Destinations
Somewhere you already own.
A destination is a place you set up and confirm. There is no default one, because a default destination would be somewhere I chose.
A file you keep
Written in parts with a manifest, so an export that was interrupted can never look finished.
A server you run
TLS first, with credentials scoped to one destination and never handed to a redirect off-host.
CSV and GPX
Labelled as lossy projections, because that is what they are. The full record stays whole.
Honesty
Hozz will never tell you it got everything.
Apple will not let an app tell the difference between a data type you denied and one you simply have none of. From the inside, the two look identical. Plenty of export tools quietly call that “complete”.
Hozz reports what it asked for, what came back, and what it cannot prove — in those words.
allowedYou granted it, and every object HealthKit returned is accounted for.
denied or emptyApple will not say which of the two it is. Hozz will not guess, so it reports both.
not supported yetHozz cannot read it correctly yet, so it says so rather than quietly skipping it.
Coverage
Not a curated dozen.
The target is every category Apple exposes to an app, with the relationships between records left intact — a workout and its route, a correlation and its parts, a series and its measurements. Categories arrive as the milestones below land.
- HeartRate, variability, ECG, resting and walking averages
- ActivitySteps, distance, energy, exercise minutes, workouts
- NutritionEverything you log to eat and drink, down to the micronutrient
- MobilityWalking speed, step length, asymmetry, stair speed
- RespiratoryBlood oxygen, respiratory rate, peak flow, VO₂ max
- BodyWeight, height, body fat, lean mass, temperature
- SleepEvery stage, every night, from wherever you record it
- MindMindful minutes, state of mind, time in daylight
- CycleTracking, symptoms, basal temperature, test results
- HearingHeadphone and environmental audio exposure
Status
Where it actually is.
Hozz is pre-alpha. There is no TestFlight and no build to install. The repository holds the reviewed architecture and the first acquisition test harness. Each milestone below ships only when its gate passes.
- M0ContractEvery HealthKit family classified; privacy and threat models written down.done
- M1FoundationThe Swift 6 targets build, and fault tests prove a retry cannot skip past data.in progress
- M2CatalogueThe full type list, with the awkward authorization flows kept separate.planned
- M3Canonical modelByte-identical output whatever your locale or time zone.planned
- M4AcquisitionMillions of changes survive cancellation and injected crashes.planned
- M5FilesManifests that verify every part and disclose every limitation.planned
- M6BackgroundTested on real devices through lock, reboot and lost network.planned
- M7DeliveryIdempotent batches reconciled against an open-source reference receiver.planned
- M8Multi-deviceOne writer at a time, with an explicit handover between your devices.planned
- M9ReleaseAccessibility, localisation, and a multi-year endurance run.planned
Free forever
There is no paid version coming.
Hozz has nothing to upsell, so watching the repository is the only way to follow it for now. If you want to help it along, sponsorship is optional and goes to this and the other free apps.