Legal Documentation

Privacy Policy

We collect only what is necessary to deliver care features and never sell your data.

Data We Collect

• Account & identity information.
• Health content and authorizations.
• Device and diagnostic telemetry.

How We Use Data

• Deliver core features.
• Safety, reliability, and support.
• Legal and compliance obligations.

Sharing & Disclosure

• Authorized doctors or patients.
• Service providers under contract.
• Legal or safety requirements.

Security Highlights

• Encryption in transit and at rest.
• Access controls and logging.
• Optional biometric protection.
• Audit logging.

Your Choices & Rights

• Manage and revoke authorizations.
• Delete logs or request deletion.
• Request access or export.

Retention

Data is retained while your account is active or as required by law.

Children

Not directed to children under 13.

Changes

Updates will be posted here and in-app.

Terms of Service

Health eRecords provides health logging, AI chat, image analysis, and controlled data sharing. Not for emergencies.

Your Responsibilities

• Provide accurate information and lawful use only.
• Keep your account secure.
• Respect privacy and data protections.

Prohibited Uses

• Unauthorized access or security bypass.
• Malicious, abusive, or illegal content.
• Unlicensed medical claims.

Disclaimers & Liability

Service provided as-is. AI is informational only.

Indemnity

You agree to indemnify Health eRecords for misuse.

HIPAA Notice of Privacy Practices

This notice explains how your protected health information (PHI) may be used and shared, and what rights you have.

How We May Use or Share PHI:

• Treatment: Sharing with authorized clinicians involved in your care.
• Operations: Security and quality improvement.
• Legal/Public Health: Reporting when required by law.

Only the minimum necessary information is used, and you will be notified of any reportable breach.

Your Rights:

• Access or request copies of your PHI.
• Request corrections to your record.
• Request limits on certain uses or disclosures.
• Revoke authorizations when legally allowed.
• Request a record of disclosures where applicable.
• File a complaint without retaliation.

If you have questions or want to exercise your rights, email support@myhealtherecords.org.

Security & Data Protection

• TLS for all traffic; encryption at rest.
• Role-based access with row-level security.
• Optional biometrics and planned passkeys.
• Audit logging for sensitive actions.
• Backups and breach response per law.

End-to-End Encryption

End-to-end encryption (E2EE) means message content is encrypted on your device and can only be decrypted by the intended recipients.

• On-device encryption: content is encrypted before it leaves your device.
• Recipient-only decryption: only authorized recipients can decrypt the content.
• Key protection: encryption keys are protected and not shown in the UI.
• Metadata limits: message content is encrypted, some metadata may remain.
• Sharing control: access depends on doctor/patient authorization.

Encrypted content is treated as opaque data during transport and storage.

Support

We're here to help. Reach out for technical issues, feedback, or data requests.

For privacy or data requests, include the email tied to your account.

Tips

• Update to the latest app version.
• Include screenshots for errors.
• Use your account email for privacy requests.