← Back to sign up

Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect your email address, username, and hashed password when you create an account. We store health data you import or enter manually, including fitness activities, biometrics, blood work results, and financial information. We store payment information via Stripe — we never see or store raw card details.

2. How We Use Your Information

Your data is used solely to provide the Health Dashboard service to you. We use it to display your health trends, power AI-driven insights within the app, and process subscription payments. We do not use your health data to train AI models.

3. Data Storage

Health data is stored in Vercel Blob storage. Account credentials and session tokens are stored in Upstash Redis. All data is stored in isolated namespaces — other users cannot access your data.

4. Third-Party Services

We use Stripe for payment processing, Vercel for hosting and storage, and Upstash for session management. These services have their own privacy policies. We use the Anthropic API to analyze blood work PDFs; your lab data is sent to Anthropic for processing.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may disclose information if required by law.

6. Data Retention and Deletion

Your data is retained while your account is active. You can delete all your data from the Settings page. When you cancel your subscription and close your account, your data is permanently deleted.

7. Security

Passwords are hashed using bcrypt with a cost factor of 12. Sessions are secured with random UUID tokens stored as httpOnly cookies. All data in transit is encrypted via TLS.

8. Your Rights

You have the right to access, export, correct, or delete your personal data at any time through the settings page or by contacting us.

9. Contact

For privacy-related questions or data requests, contact us at the email address on file for your account.