The data are only kept locally on your device. The data will never be sent to our server. For security, the HealthKit store is encrypted when the device is not unlocked.
See the full privacy policy for more details.