Privacy Policy

1. Information we collect

Account and contact information: name, email address, phone number, emergency-contact information, authentication credentials, and the account's user identifier.

Health and care information: patient profile details, medications, dose acknowledgments, reminder schedules, appointments, providers, care tasks, visit information, diagnoses, instructions, test information, warnings, caregiver relationships, and other health information entered or authorized by a user.

User content: photos and videos, document and medication-label images, PDFs, audio recordings, transcripts, notes, extracted text, structured summaries, and support communications.

Subscription and activity information: subscription product, purchase and renewal status, entitlement status, transaction metadata, feature interactions, consent records, sharing permissions, confirmations, timestamps, and audit activity. Apple or Google processes payment-card information; MyHealthVaultAI does not receive or store the full payment-card number.

The app accesses the camera, photo library, microphone, and notifications only after a user selects or permits the related feature. It may also process limited app and platform information necessary for authentication, security, subscriptions, and reliable operation.

2. How we use information

We use information for app functionality: creating and authenticating accounts; synchronizing authorized records; organizing medications, visits, documents, reminders, appointments, and care tasks; providing AI-assisted transcription, OCR, extraction, translation, and summaries; enabling authorized caregiver access; restoring and managing subscription entitlements; responding to support requests; and protecting the service.

We may use user identifiers, purchase history, and product-interaction information for limited operational analytics, such as confirming subscription access, understanding whether features work correctly, preventing abuse, and improving reliability. We do not use health information for advertising.

AI and OCR output can contain errors. Generated information is presented for review and does not replace the original source or advice from a qualified healthcare professional.

3. AI, recording, and document processing

When a user requests an AI feature, the information needed for that request may be securely transmitted to OpenAI or another contracted processing provider. This can include selected text, document or medication-label images, PDFs, audio recordings, or related instructions. Providers process the information to return the requested transcription, extraction, translation, or summary.

Visit audio may be stored so the patient can review it and, when explicitly authorized, share it with a caregiver. Patients can delete stored recordings. Temporary processing files may be removed after processing, while returned transcripts, extracted information, and summaries may remain in the user's record until deleted.

Users are responsible for obtaining any consent legally required before recording a visit or uploading another person's information.

4. Authorized sharing and multiple-patient access

Patients can invite caregivers and choose permissions for each relationship. A caregiver may be connected to more than one patient. Access is limited to active relationships and the permissions granted by the patient, and patients can change or revoke access.

Information is not made public through MyHealthVaultAI.

5. Service providers and other disclosures

We share information only as reasonably necessary to operate requested features. Service providers may include Firebase and Google Cloud for authentication, databases, storage, and infrastructure; OpenAI and related providers for user-requested AI, OCR, and transcription processing; RevenueCat for subscription and entitlement management; and Apple or Google for app distribution and purchases.

We may also disclose information when required by law, to protect the rights or safety of users and others, to investigate fraud or abuse, or as part of a business transaction subject to appropriate protections.

We do not sell or rent personal or health information. We do not use personal or health information for third-party advertising, and we do not track users across other companies' apps or websites.

6. Storage, security, and retention

Information may be stored on the user's device and in Firebase or Google Cloud systems. We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network transmission and access controls. No electronic system can guarantee absolute security.

We retain information while an account is active and as needed to provide the service, comply with law, resolve disputes, prevent abuse, and maintain security. When an account is deleted, associated account and health-record data is removed from active systems, subject to limited retention in backups, transaction records controlled by Apple or Google, and records we must retain by law.

7. Your choices and control

Users can review and edit records, manage reminders and caregiver permissions, delete individual items where offered, revoke camera, photo-library, microphone, or notification access in device settings, sign out, erase local app data, and permanently delete an account from the mobile app or secure portal.

Removing the app does not automatically cancel a subscription or delete the account. Subscriptions must be managed through the Apple App Store or Google Play, and account deletion must be requested separately.

For deletion instructions, visit the account-deletion page. You may also contact support for access, correction, deletion, or other privacy questions.

Account-deletion instructions

8. Children's privacy

MyHealthVaultAI is not intended for children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided information, contact us so we can investigate and delete it where required.

9. Medical disclaimer

MyHealthVaultAI is an informational and organizational tool. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Confirm medication and care decisions with a physician, pharmacist, or other qualified healthcare professional. Call local emergency services for urgent medical concerns.

10. Changes and contact

We may update this Privacy Policy and will post the revised date on this page. Material changes may also be communicated through the service where appropriate.