Consumer Health Data Privacy Policy

This policy is specifically about consumer health data. It exists as its own document because Washington's My Health My Data Act, and comparable laws in Nevada and elsewhere, require that. It sits alongside our general Privacy Policy.

What counts as consumer health data here

Anything that identifies your past, present or future physical or mental health. In PocketHealth that means: the conditions, allergies and medications in your profile; every symptom and entry in your timeline; your weekly check-in scores and notes; your conversations with the assistant; and any photograph you send.

Where it comes from

All of it comes from you — typed into the app, or picked up from what you tell the assistant in a conversation. We do not buy health data, and we do not infer it from anything outside the app. Details the assistant picks up from a conversation are saved to your timeline automatically, marked as saved automatically, and you can edit or delete any entry from your timeline at any time. The conversation itself is saved to your history.

What we use it for

Only to provide the service: answering your questions with your own history as context, showing you patterns over time, and preparing summaries you can take to an appointment. We do not use it for advertising, and we do not use it to train AI models.

Who we share it with

We share the content of your messages, and the relevant parts of your record, with OpenAI, which generates the assistant's replies. This is the only third party that receives your health information in readable form, and it happens only when you send a message or ask for a summary. OpenAI is contractually prohibited from using your data to train its models.

OpenAI may hold message content briefly for security and abuse monitoring before deleting it. We are working to remove that retention entirely; this page will say so when it has been.

OpenAI is the only third party we send your health information to in readable form, with two exceptions you control. If you write to support, from the support button in the app or by email, what you write is delivered to us through Resend and kept in our support inbox, which Proton Mail hosts. And if you ask to see a doctor, your request — a reference number, the specialty you chose, your account email and any note you choose to write, but never your conversations or your timeline — is delivered to us the same way and kept in our contact inbox, and the details of the request are shared with our telehealth partner so the visit can be arranged. Please include only what we need to help. Supabase stores your record encrypted and Vercel passes it through in transit. Amazon Web Services holds the encryption keys and receives no health data — only the keys used to protect it. When you send a photograph, its location and camera metadata are stripped in your browser before it leaves your device. Stripe handles payment and receives no health information, and apart from a message you choose to send to support, neither does Resend, which delivers our email. If you accept advertising cookies, Google (Google Analytics and Google Tag Manager) measures visits to our public pages, such as the homepage and our guides; it never runs once you are signed in and never receives health information. When someone subscribes, our server tells Google Analytics that a purchase was made and its amount, and nothing about who made it: no name, email, account or browser identifier. Our Cookie Policy lists every such partner.

We do not sell consumer health data. Selling it would require your written authorization, which we do not seek and have never obtained. We also honor Global Privacy Control as an opt-out of any sale or sharing.

Doctor visits

Telehealth partner: when you ask to see a licensed doctor, the doctor and the visit are provided by an independent telehealth partner, not by PocketHealth. We share the details of your request with it — a reference number, the specialty you chose, your account email and any note you write — so it can arrange the visit. We do not send your conversations or your timeline. What happens during the visit is governed by the partner's own terms and privacy notice. The conditions of the complimentary visit are at pockethealth.pro/doctor-visit.

Your rights

To exercise any of these, use Settings, or email support@pockethealth.pro. We will not charge you or degrade the service for making a request.

How long we keep it

Until you delete it. There is no fixed retention period, because the value of the record is that it accumulates — a symptom you logged two years ago is exactly the kind of context that makes a later conversation useful.

Changes to this policy

If we materially change how health data is collected, used or shared, we will ask for your consent again rather than relying on the consent you have already given.

Contact

support@pockethealth.pro