This Privacy Policy describes how Healthread may use, disclose, and protect information collected through your access to and use of the app and related services.
Healthread is not a covered entity or business associate under HIPAA. Certain information may still be protected under other privacy laws, including the FTC Health Breach Notification Rule.
1. GENERAL
By using the Service, you consent to collection, use, disclosure, storage, and processing consistent with this Privacy Policy and applicable law.
Data may be processed in countries outside your residence, and legal protections may differ by jurisdiction.
3. AI AND OTHER HEALTH SERVICE PROVIDERS
OpenAI: Healthread AI chat and voice messages, medicine label and prescription scanning, medication information and interaction summaries, skin analysis insights, and the automated review of a thread before you publish it use AI models from OpenAI. The content needed for each feature, such as your chat messages, voice recordings, previous Healthread AI conversation history, the trackers, check-ins, medicines, and care group details Healthread AI looks up when you ask about them, label photos or text, medicine names, your skin photo and answers (photos of the groin, genitals, or buttocks are never sent), or the title and text of the thread you are about to publish, is sent to OpenAI to generate a response. We ask for your permission, naming OpenAI, before any of these features first sends your data to OpenAI. If you do not agree, none of this data is sent to OpenAI: those features stay off and threads publish without the automated review. You can withdraw your permission at any time in Settings.
Amazon Web Services: skin analysis photos are processed using machine-learning infrastructure hosted by Amazon Web Services.
Isabel Healthcare: the symptoms and details you enter in the symptom checker are sent to Isabel Healthcare to generate possible conditions.
These providers process your information only to provide the feature you are using and are required to protect it in line with this Privacy Policy. Information we send to OpenAI through its API is not used by OpenAI to train its models.
5. SKIN ANALYSIS PHOTOS AND AI TRAINING
Skin analysis photos and related answers are processed by AI and stored to perform the skin analysis.
Your photos and derived data are used to train, test, or improve AI models only if you opt in when you start that analysis. This choice is optional, is made for each analysis, and does not change the analysis or what you pay. Analyses without this consent are excluded from AI training.
If you photograph skin on your face, the photo may show your face. Healthread does not use face recognition, face detection, Face ID, or TrueDepth camera data, and does not create face geometry, faceprints, or any other biometric identifier from skin photos. A skin photo is used only for that skin analysis: it is analyzed by our skin model on Amazon Web Services, sent to OpenAI only if you have given permission (see Section 3), and viewed by Healthread's dermatologist reviewers. It is never sold, used for advertising, or shared for any other purpose.
Each skin photo is stored in encrypted Google Cloud storage until you delete that analysis or your account, and is then permanently deleted. When you send a new photo for an analysis, the earlier photo is deleted.
6. APPLE HEALTH AND HEALTH CONNECT DATA
If you connect Apple Health or Health Connect, Healthread reads only the data types you approve, such as steps, heart rate, blood oxygen, sleep, and menstrual cycle data, to update your trackers and cycle predictions. Healthread does not write data to Apple Health or Health Connect.
Data from Apple Health and Health Connect is not used for advertising, marketing, or data mining; is not sold; is not shared with third parties except as needed to provide the features you use; and is not stored in iCloud. You can revoke access at any time in your device settings.
7. COMMUNITY SAFETY: REPORTS, BLOCKS, AND ANONYMOUS POSTS
When you report or block content or a user, we store the report, the reason you give, and your block so we can review it and hide that user's content from you.
When you post anonymously, your name is hidden from other users, but Healthread retains the link to your account so that reports can be reviewed and our Terms of Use enforced.
10. DATA BREACH NOTIFICATION
For qualifying incidents involving unsecured health information, we notify affected users and regulators in accordance with applicable law, including HBNR timelines.
13. CHILDREN'S PRIVACY
The Service is intended for adults aged 18 or older and is not directed to children. We do not knowingly collect personal information from children.
14. THIRD-PARTY SITES AND SERVICES
Third-party websites and services linked from the app are governed by their own privacy policies.
15. YOUR CALIFORNIA PRIVACY RIGHTS
California residents may have specific rights regarding requests related to personal information disclosures for direct marketing purposes.
17. PREMIUM SUBSCRIPTIONS AND PURCHASES
Subscriptions and skin analysis credit packs are purchased through Apple or Google, which process your payment. Healthread does not receive your payment card details. We use RevenueCat to manage subscriptions; it receives your purchase receipts and an identifier linked to your Healthread account so we can unlock the features you paid for.
18. CHOICE OF LAW AND VENUE
Privacy-related disputes are governed by New York law except where otherwise required by applicable law.
19. NO MEDICAL ADVICE
The Service is informational and does not create a healthcare provider-patient relationship.
20. UPDATES TO THIS PRIVACY POLICY
We may update this policy from time to time and will post updates with effective dates.