How we protect your health information

This page describes what PocketHealth does today to protect what you store in it. It does not describe plans, and it makes no claim to a certification we do not hold.

Encryption, field by field

Each account has its own data key. Every piece of free text you store — symptoms, notes, conversations, check-in notes, documents — is encrypted with that key using AES-256-GCM before it is written to the database. The data keys themselves are encrypted by a master key held in Amazon Web Services Key Management Service (AWS KMS), which never sees your health information: it only protects the keys. Labels that need to be searchable, such as a symptom's name, are encrypted too, and stored beside a keyed hash so they can be matched without being readable.

Access rules on every table

Row-level security is switched on for every table that holds your information, so each account can only ever read its own rows. Writes go through our server, which checks who you are on every request. We keep an access log of reads and changes to health records, so access can be reviewed.

In transit

The site and its API are served over HTTPS only, with HTTP Strict Transport Security, and with a content security policy that limits which scripts and services a page may load.

Who else handles it

To answer you, the assistant sends your message and the relevant part of your record to OpenAI in readable form. The only other times health information leaves in readable form are ones you start: a message you write to our support team, and a request to see a doctor. Both are delivered to our team by email (through Resend, our email provider, into inboxes hosted by Proton Mail); for a doctor visit, we then share the details of your request with our telehealth partner to arrange it. Your conversations and timeline are never part of either. Our database host stores your record encrypted. The full list of service providers, what each receives and why, is in the consumer health data policy.

Your controls

• Export your whole record as a file from Settings.
• Edit or delete any timeline entry, including the ones saved automatically.
• Erase your health record while keeping your account, or delete the account entirely. Deletion removes the rows; it does not hide them.

Reporting a problem

If you think you have found a security issue, email support@pockethealth.pro with “Security” in the subject line. Please do not access other people's data while looking.