Privacy policy

• Your account — your name, email address and password (stored only as a secure hash by our sign-in provider).
• Your health profile — what you tell us: date of birth, sex, conditions, allergies, medicines and anything else you choose to add.
• Your documents — the files you upload, and the results, dates and details read from them.
• Your questions — conversations with HealthDost, so you can return to them.
• Feedback you send — your message, the page you sent it from, basic device details, and a screenshot if you attach one.

We use a sign-in cookie to keep you signed in. We do not use advertising trackers.

Your records live in our database and file storage, hosted by Supabase. The original files you upload are kept so you can open them again. They are private: they are never at a public address, and they open only through signed links that expire after an hour.

Every record is tied to your account, and the database itself refuses to show one person's rows to another (row-level security). Data is encrypted in transit (HTTPS) and at rest.

HealthDost is not end-to-end encrypted. To read and explain a report, our servers have to read it.

To read a report, explain it, answer your questions and spot changes over time, the relevant text and images are sent to our AI provider, OpenAI, through its API. Under its API terms, data sent this way is not used to train its models.

AI explanations can be wrong. They are always marked as AI-written in the app, and they are never a diagnosis — see the medical disclaimer.

You. A small number of authorised HealthDost staff can see limited account information — such as your email address and how many records you have — to run and support the service.

We never sell your data, and we never share it with advertisers. We would disclose it only if the law required us to.

• Correct it — every value read from a document can be edited, and your profile can be changed at any time.
• Export it — download everything you have added from Settings → Export your data.
• Delete it — deleting your account in Settings permanently erases your profile, records, stored files, trends, medicines, alerts and conversations. It is not a “deactivation”.

We keep your records until you delete them or your account.

Signed in, use Help & feedback from the menu. It reaches the team directly, and you can follow the reply from the same place.