Your health data is yours, always
We built My Healthcare Partner with privacy at its core. Your medical records are among the most sensitive data you own — we treat them that way.
Last updated:
Our Privacy Principles
Four commitments we make to every user, unconditionally.
End-to-End Encryption
All your health records are encrypted in transit and at rest using AES-256 encryption. Only you hold the keys to your data.
Zero Data Selling
We will never sell, rent, or share your personal health information with advertisers, insurers, or third parties — ever.
You Own Your Data
Your health records belong to you. You can export, delete, or transfer your data at any time with no questions asked.
Secure Infrastructure
Data is stored on ISO 27001-certified servers with regular third-party security audits and penetration testing.
Full Privacy Policy
This Privacy Policy describes how My Healthcare Partner ("we", "us", or "our") collects, uses, and protects your personal information when you use our application and services. By using My Healthcare Partner, you agree to the practices described in this policy.
1. What We Collect
Information you provide
When you create an account, we collect your name, email address, and optionally your phone number. When you upload health records, we store the documents and any metadata you add (such as date, doctor name, or notes).
Health records and documents
We store the medical documents, lab reports, prescriptions, and other health files you upload. Our AI processes these documents to extract structured health information to power features like search and summaries.
Usage data
We collect anonymized usage data (such as which features you use and app performance metrics) to improve the product. This data is never linked to your health records.
2. How We Use Your Data
To provide the service
Your data is used solely to power the features of My Healthcare Partner — organizing your records, enabling AI-powered search, generating health summaries, and managing family profiles.
AI processing
Our AI models process your uploaded documents to extract health information. This processing happens on our secure servers and the extracted data is stored only in your account. We do not use your health data to train AI models.
Communications
We may send you product updates, security alerts, and important account notifications. You can opt out of non-essential communications at any time from your account settings.
3. Data Sharing
We do not sell your data
My Healthcare Partner does not sell, rent, or trade your personal information or health records to any third party under any circumstances.
Service providers
We work with a small number of trusted service providers (such as cloud infrastructure and email delivery) who process data on our behalf under strict data processing agreements. They are not permitted to use your data for any other purpose.
Legal requirements
We may disclose information if required by law, court order, or to protect the rights and safety of our users. We will notify you of such requests where legally permitted.
4. Your Rights
Access and portability
You have the right to access all data we hold about you and to export it in a standard format at any time from your account settings.
Correction and deletion
You can correct inaccurate data or delete your account and all associated data at any time. Deletion is permanent and irreversible — we retain no copies after 30 days.
Consent withdrawal
Where we rely on your consent to process data, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
5. Security Measures
Technical safeguards
We use AES-256 encryption for data at rest, TLS 1.3 for data in transit, multi-factor authentication, and role-based access controls. Our infrastructure undergoes regular security audits.
Incident response
In the unlikely event of a data breach, we will notify affected users within 72 hours and take immediate steps to contain and remediate the incident.
Employee access
Access to user data by our team is strictly limited, logged, and requires multi-factor authentication. No employee can access your health records without a documented reason.
6. Data Retention
Active accounts
We retain your data for as long as your account is active. You can delete individual records or your entire account at any time.
Deleted accounts
When you delete your account, all personal data and health records are permanently deleted from our systems within 30 days. Anonymized, non-identifiable usage statistics may be retained.
7. Changes to This Policy
Notification of changes
We will notify you of any material changes to this Privacy Policy via email and an in-app notification at least 30 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.
We're here to help
If you have any questions about this Privacy Policy or how we handle your data, reach out to our privacy team.
Contact Privacy Team