Privacy Policy

This Privacy Policy explains what information Personal Health Inspector collects, why, how it's used and protected, and the choices you have. It applies to the Personal Health Inspector website and application.

What information we collect

We collect information you provide directly, and a small amount generated by using the app:

• Account information: name, email address, and password (stored as a one-way hash, never in plain text).
• Health-organization information you enter: medications, appointments, preventive-care tasks, documents you upload, emergency-profile details, and notes you write. This is information you choose to record — we don't obtain it from any outside source.
• Contact/phone number, only if you add one to enable SMS reminders.
• Billing information if you subscribe to a paid plan — see "Payment processing" below.
• Usage information such as login timestamps and, if analytics is enabled, coarse product-usage events — see "Analytics" below.

Why we collect it

We collect only what's needed to provide the service: to create and secure your account, to store and display the health information you choose to track, to send the reminders you configure, to process payment for paid plans, to respond when you contact support, and to keep the application secure and working correctly.

How we use your information

Your account information and the health-organization data you enter are used to operate the app for you — nothing more. We do not sell your information, and we do not use the health information you record to build advertising profiles. If you invite a caregiver, they see only what your explicit permission level allows (see "Caregiver access" below).

How we protect your information

• Passwords are hashed, never stored in plain text.
• Every page and API request that touches your data checks your authenticated session and account ownership server-side before returning anything.
• Session cookies are set HTTP-only, marked secure in production, and scoped with SameSite protection.
• Payment details are handled entirely by Stripe — we never see or store your card number.

No system is perfectly secure, and we can't guarantee absolute security — see our Security page for more detail on our practices.

Data retention

We keep your account and health-organization data for as long as your account is active. If you delete your account, your personal data is anonymized and your health records are removed; a minimal record may be retained where required for legal, billing, or fraud-prevention purposes (for example, billing history Stripe requires us to retain).

Account deletion

You can delete your account at any time from Settings. Deletion anonymizes your account record and removes your profiles, medications, appointments, documents, and other health-organization data. This cannot be undone.

Data export

You can export your account's data at any time from Settings → Privacy, on any plan — this isn't a paid-only feature.

Third-party services

We use a small number of third-party services to operate the app, each only for its specific purpose:

• Stripe — payment processing for paid subscriptions.
• Resend — sending transactional and reminder emails.
• Twilio — sending SMS reminders, only if you've opted in and added a phone number.
• Google Analytics 4 — optional, coarse product-usage analytics; see "Analytics" below.

We do not share your health-organization data with any of these providers beyond what's required for their specific function (e.g., an email address to send you a reminder).

Payment processing

Subscription payments are processed by Stripe. We store a subscription status and Stripe's own customer and subscription identifiers — never your full card number, which Stripe handles directly.

Analytics

If enabled, we use Google Analytics 4 to understand coarse product usage (e.g., how many people view the pricing page). We do not send medication names, diagnoses, symptoms, appointment details, notes, or any other health information to analytics — ever. Analytics can be, and is, fully disabled by configuration.

Cookies

We use a small number of strictly necessary cookies (to keep you signed in) and, only if analytics is enabled, analytics cookies. See our Cookie Policy for detail.

Communications

We send account-related emails (welcome, password reset, billing changes) and, based on your preferences, reminder emails/texts. You can adjust notification preferences in Settings.

Caregiver access

If you invite a caregiver, they only gain access after accepting an invitation addressed specifically to their email address, and only to the permission level you selected (full access, or a specific area like appointments, medications, or emergency information). You can review and revoke caregiver access at any time.

Your rights

You can access, export, correct, or delete your information at any time through the app, or by contacting us through our Contact page. Depending on where you live, you may have additional rights under local law; contact us and we'll do our best to help.

Not a substitute for medical care

Personal Health Inspector is an organizational tool, not a healthcare provider. It does not diagnose, treat, or prevent any condition. Always consult a licensed healthcare professional for medical decisions, and call your local emergency number for a medical emergency.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page.

Contact

Questions about this policy or your data? Reach us through our Contact page.