Connected sources
Connected = data seen within 14 days (Hevy) / 3 days (Wearable). Telegram bot reflects the coach gateway's live health check, not a data date. Bloodwork lab is manual-upload by design — its date is informational, not a freshness judgment.
Privacy
This is a single-user app — sign-in is passkey (WebAuthn) only, no shared accounts. The health vault is mounted read-only to this panel, which holds no ability to write it directly. Every change (logging, notes, program edits) goes through a validated health.py command over a local broker socket — the same path the Telegram coach uses, never raw SQL. The vault itself is never sent off-device. Two services do handle slices of this data: agent chat goes through the configured model provider (currently OpenRouter), and the coach loop's messages travel through Telegram's bot API. The connected sources above read in; nothing else goes out.