Privacy Policy

1. Overview

Health-GPT is designed to help users organize and understand their medical information. We are committed to keeping your health data private, secure, and under your control.

• We do not access, view, or review your personal health data.
• All data you provide remains private to you unless you explicitly choose to share it.

2. Information We Collect

We may process the following data:

• User-provided health information (e.g., uploaded medical documents, notes, or "medbits")
• Generated content (e.g., summaries, timelines, suggested questions)
• Technical data (e.g., device type, crash logs, usage diagnostics)

3. How We Use Your Information

Your data is used only to:

• Process and structure your medical information
• Generate timelines and insights

We do not:

• Sell your data
• Use your data for advertising
• Train AI models on your personal data

4. Data Access and Confidentiality

• Omni Timeline LLC, including its director and developers, does not access or review user health records
• Your data is processed automatically by systems designed to preserve privacy
• Any infrastructure providers are bound by strict confidentiality and data protection obligations

5. Data Sharing

We do not share your personal data with third parties, except:

• With secure service providers necessary to operate the app (e.g., cloud hosting or AI processing), under strict data protection agreements
• If required by law

6. Data Retention

We retain your data only as long as you choose to keep it:

• User-uploaded content (including "medbits") and generated data are stored until you delete them
• If you delete individual entries, those entries are permanently removed
• If you delete your account, all associated data is deleted (see Section 7)
• Limited technical logs may be retained for up to 30 days for security and debugging purposes

7. Data Deletion

You have full control over your data:

• You can delete individual entries ("medbits") at any time within the app
• You can delete your account, which will permanently delete all associated data
• If needed, you may also request deletion by contacting:
  support@health-gpt-org
• Account and data deletion requests are completed within 7 days

8. Data Security

We use industry-standard safeguards, including:

• Encryption in transit (HTTPS)
• Secure storage systems
• Access controls to prevent unauthorized access

9. Your Rights

You may:

• Access your data
• Delete your data at any time
• Request assistance with data deletion
• Contact:
  support@health-gpt.org

10. Children's Privacy

Health-GPT is not intended for children under 13. We do not collect data from children.

11. Changes to This Policy

We may update this policy. Updates will be posted with a revised effective date.