Draft pending legal review.
Privacy policy
Last updated: October 4, 2026
Your health information is a special category of personal data. This policy explains what data we process, why, and your rights. Controller: [Legal entity name], [address], [country] — contact: [privacy@domain]. Data protection officer / representative: [DPO contact].
1. Data we process
- Account data: name, email, password (stored as a hash), profile picture if you sign in with Google.
- Health data you add: health profile, studies, diagnoses, appointments, notes and conversations with the assistant.
- Security data: IP address and browser associated with your sessions, and an activity log of access to and changes on your data.
- Consents: what you accepted, which version and when.
2. Purposes and legal bases
We do not use your data for advertising, do not sell it, and make no automated decisions with legal effects on you.
| Purpose | Legal basis |
|---|---|
| Providing the service and managing your account | Performance of contract (GDPR art. 6(1)(b)) |
| Processing your health data | Explicit consent (GDPR art. 9(2)(a)) |
| AI assistant (sending content to an AI provider) | Explicit, separate and revocable consent |
| Security, fraud prevention and activity logging | Legitimate interest (GDPR art. 6(1)(f)) |
| Transactional emails (verification, password) | Performance of contract |
3. How we protect it
- Encryption in transit (TLS) and at rest by our infrastructure providers.
- In addition, clinical fields are encrypted in the application (AES-256-GCM) with a dedicated key per health record.
- Per-record access control, activity logging and optional two-step verification.
- Internal access restricted to the minimum necessary.
4. Who we share it with
Only with providers (processors) we need to run the service, under data processing agreements. The full list is under Subprocessors. The AI provider only receives data if you enabled the assistant.
We may disclose data where required by law or a competent authority.
5. International transfers
Your data is hosted in the United States (AWS us-east-2, through Supabase). Some providers may process data outside your country; in those cases we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or other recognized mechanisms.
6. Retention
- For as long as your account is active. If you delete it, we permanently delete your data immediately, except backups that are overwritten within [30] days.
- The activity log is kept for as long as the account exists.
7. Your rights
You can access, rectify, export (portability) and erase your data, object to or restrict processing, and withdraw your consents at any time. Most can be exercised directly in Settings › Privacy; for anything else write to [privacy@domain].
Withdrawing consent does not affect the lawfulness of prior processing. You can lodge a complaint with your country's data protection authority.
8. Children
Accounts are for adults. Data about minors may only be added by their legal representative.
9. Changes
If we materially change this policy, we will ask you to accept it again.