Data Security & Privacy

Your health data is yours.
We protect it like it is.

We built this product for our own families. This page explains exactly how your documents are processed, what AI never sees, and how to delete everything in one click.

✅ AI never trains on your data
✅ PII removed before AI sees anything
✅ One-click full deletion
✅ Each user's data is fully isolated
✅ Built on AWS — enterprise security
Section 1 · How We Process Your Documents

What happens when you upload a file

Your raw document passes through a strict pipeline before any AI ever touches it. Here's every step, in order:

📄
Your File
PDF, image, Word doc — any format
→
🔐
Encrypted Upload
TLS 1.3 in transit • AES-256 at rest
→
🔍
PII Scanner
AI detects names, DOBs, SSNs, addresses
→
✂️
PII Removed
Sensitive identifiers stripped from text
→
🤖
AI Sees This
Anonymized medical content only
→
💬
Your Answer
Insights returned directly to you
🚫
What is NEVER sent to any AI model:
Your full nameDate of birthSocial Security NumberHome addressPhone numberEmail addressInsurance member IDProvider namesAccount numbers

The AI only ever sees: lab values, diagnoses, medications, imaging findings, and clinical observations — stripped of all identifying information.

BEFORE — Raw Document
Patient: John Smith
DOB: 03/15/1968
Provider: Dr. Sarah Chen
Address: 42 Oak St, Austin TX
HbA1c: 8.2% (HIGH)
TSH: 5.6 mIU/L (HIGH)
LDL: 142 mg/dL
→
AFTER — What AI Sees
Patient: [REDACTED]
DOB: [REDACTED]
Provider: [REDACTED]
Address: [REDACTED]
HbA1c: 8.2% (HIGH)
TSH: 5.6 mIU/L (HIGH)
LDL: 142 mg/dL
Section 2 · AI Training

Your data is never used to train AI

This applies to us and to Amazon Web Services, the cloud platform we run on.

🤝

Our commitment

  • We never sell your data to anyone
  • We never use your records to train our models
  • We never share your data with third parties
  • Your anonymized data never leaves your account context
aws
Amazon Web Services

Amazon's official guarantee:

“Amazon Bedrock doesn't use your prompts and continuations to train the base model. Your inputs and outputs are not shared with model providers.”

→ AWS Bedrock Data Protection docs ↗
How your data flows — and where it stops
👤
You
→
🔐
Your Vault
encrypted
→
🤖
AWS Bedrock
anonymized only
→
💬
Answer
back to you
🚫Your data is NEVER used to train any AI model — by us or by AWS
Section 3 · Data Isolation

Your data never touches anyone else's

Every user gets a completely separate encrypted vault. There is no shared storage, no shared context, and no way for one user's data to leak into another's AI answers.

👩User A🔒
📄 Lab results
📄 Echo report
📄 Visit notes
Encrypted · Private · Isolated
👨User B🔒
📄 MRI report
📄 Blood work
📄 Prescription
Encrypted · Private · Isolated
🧑User C🔒
📄 Discharge summary
📄 X-ray report
📄 Lab results
Encrypted · Private · Isolated
🔒
Technical isolation guarantees:
Per-user S3 prefix (your account ID in every path)Per-user OpenSearch index (zero cross-user search)JWT-verified on every API callAI context includes only your documents
Section 4 · Storage & Retention

Exactly what we store — and what we delete

You decide what stays. Everything can be deleted in seconds.

📄Original file
Stored: Yes — in your private S3 folder
Deletable: Yes — delete per-file or all at once
📝Anonymized text
Stored: Yes — extracted text with PII removed
Deletable: Yes — deleted when document is deleted
🧠AI embeddings
Stored: Yes — in your private search index
Deletable: Yes — wiped when you delete your account
💬Chat history
Stored: Yes — your conversation sessions
Deletable: Yes — cleared with account deletion
📊Health portfolio
Stored: Yes — your synthesized health summary
Deletable: Yes — deleted with your account
🔑Your passwords
Stored: Never — hashed by AWS Cognito only
Deletable: N/A — we never see it
Section 5 · Infrastructure Security

Built on AWS — enterprise-grade security

We use the same AWS infrastructure that banks, hospitals, and governments trust.

🏗️
Amazon S3
ISO 27001 • SOC 2

Your files stored with server-side AES-256 encryption in your private prefix

🔍
Amazon OpenSearch
Encrypted at rest

Your search index is completely private — no shared cluster, no cross-user queries

🤖
Amazon Bedrock
HIPAA eligible

AI inference runs in a private API call. AWS explicitly does not use it for training

🪪
Amazon Cognito
MFA supported

Authentication handled by AWS. We never store or see your password

⚡
AWS Lambda
Isolated per request

Serverless — no persistent server that could be breached. Code runs and terminates

🌐
AWS CloudFront
TLS 1.3

All traffic served over TLS 1.3. Data encrypted in transit at all times

🗑️

Want to delete everything?

One button. Every document, every analysis, your entire health index, all chat history, and your account — gone permanently. We give you a deletion receipt.

All uploaded filesAnonymized text copiesAI search indexHealth portfolioChat historyNutrition plansYour account
🗑️ Delete All My Data →

You must be signed in. Takes you to your profile where you confirm.

🔒TLS 1.3 encryption in transit on all connections
🔐AES-256 encryption at rest for all stored data
🚫Zero data sold, shared, or used for AI training
👤Each user's data completely isolated from others
🗑️Full account + data deletion available anytime
☁️Hosted on AWS — same infrastructure as hospitals