Consumer Health Data Privacy Policy

1. Health data we collect

Depending on the features you use, we collect:

• Information you enter: symptoms, conditions, medications and doses, allergies, immunizations, mood, menstrual cycle, pregnancy and postpartum information, sleep, meals and nutrition, weight and body measurements, and exercise.
• Your conversations with our AI assistants, including through Telegram, Discord or WhatsApp if you turn those channels on.
• Files you upload: medical records, lab results, documents, meal photos and other images.
• Telemedicine information: appointments and consultations you book, notes written by the clinicians who see you, consultation audio when you agree to a recording, prescriptions, and the pharmacy details you give us.
• Data from devices and services you connect, such as Apple Health, Health Connect, Google Fit, Fitbit, Withings and Oura.
• Precise location, only if you grant permission, for features such as finding a nearby facility.
• Inferences we generate from the above, such as AI-generated insights and estimates of calories or sleep.
• Skin Journal check-ins, if you use that feature: the selfie you take (sent for analysis and not stored by us), the appearance scores it produces, the photo's brightness, an optional note about your routine, and the skin-tone band and sun-sensitivity type you choose to give.

2. Where it comes from

From you directly; from devices and health services you choose to connect; from clinicians who treat you through the Service; and from the Service itself when it generates insights or estimates.

3. Why we use it

We collect and use health data only to:

• Provide the features you ask for, including AI answers, tracking, reports and reminders.
• Let clinicians you book, or people you choose to share with, review your information and care for you.
• Send a prescription to a pharmacy you choose, and send the notifications you turn on.
• Detect possible emergencies in what you tell us and show you emergency guidance.
• Keep the Service secure, prevent fraud and abuse, and fix errors.
• Meet legal obligations.

4. Who receives it

We share health data only with the following categories of recipients, and only as needed for the purposes above:

• AI model providers. When you use an AI feature, the content of your request is sent to the provider that generates the answer. Today that is Z.AI (GLM models) for text and Google (Gemini models) for image and audio analysis. We may route requests to another provider, such as Anthropic, if the default is unavailable.
• Hosting and storage. Google Firebase and Google Cloud host your account and records; Cloudflare hosts our file storage and network services, including relays for video calls.
• Clinicians. Verified partner clinicians you book a consultation or appointment with, and anyone you grant access to through Sharing.
• Pharmacies you choose. Your name, the medication and dosage, and any note you add.
• Messaging providers. For notifications you turn on: Telnyx (SMS and WhatsApp), Resend and Cloudflare (email) and Firebase Cloud Messaging (push). A reminder can reveal, for example, that you have an appointment or a medication due. If you verify a phone number for SMS reminders, Google (Firebase Authentication) sends the verification code to it and Google reCAPTCHA checks that the request is not automated.
• Payment processors. Stripe, Whop and Paystack receive billing details such as your email address and the plan you buy. They do not receive your health records.
• Error monitoring and analytics. Sentry and PostHog receive technical and usage signals. Google Analytics (part of Google Firebase) receives the pages you open and product events such as signing up, choosing a plan or starting checkout, linked to a random account ID and an analytics cookie, so we can see where sign-up and the product need fixing. None of them receives your health answers, symptoms, conditions, measurements, medicines or the content of your records. Page addresses are sent without their query strings; clinical screens, including consultations, records, the weight quiz and the intake, are excluded or reported only as a private page; and Google's advertising features (Google signals and ad personalization) are turned off for this data.
• Skin analysis provider. If you use the Skin Journal and agree to it, each selfie you take there is sent to Perfect Corp (YouCam) to score visible skin features. Its processing takes place outside Kenya and may involve measuring facial geometry. We do not store the photo; we keep the scores, and ask Perfect Corp to delete the photo and results right after each analysis.
• Legal requirements. When the law requires it, or to protect someone's life or safety.

We do not sell consumer health data.

5. Advertising

We do not use your health data for advertising, and there are no ads inside your account. Some public blog articles may show ads served by Google. Those ads are non-personalized: we ask Google not to target them based on what you read or on your browsing, and we do not share account or health data with Google for advertising.

6. Your rights

You can:

• Confirm whether we hold your health data, and get a copy — use Export in your account settings, or email us.
• Delete your account and health data from Settings. Billing records are kept in anonymized form where the law requires it.
• Withdraw consent and stop sharing with a clinician or another person from Sharing in your dashboard.
• Ask us to correct inaccurate information.
• Appeal if we decline a request: reply to our decision and we will review it. If we still decline, you may contact your state Attorney General.

We respond within 45 days, or tell you within that time if we need longer as the law allows. We will not discriminate against you for exercising these rights.

7. How long we keep it

We keep health data while your account is open and delete it when you delete your account. Consultation audio recorded by the clinical scribe is deleted once the clinician signs the note, and at most seven days after recording.

8. Security

Data is encrypted in transit, clinical notes are encrypted at rest with per-patient keys, and access is limited by account and by explicit sharing. No system is perfectly secure; if a breach affects your health data we will notify you as the law requires.

9. Contact

To exercise your rights or ask a question, email [email protected] from the address on your account.