Privacy policy

Effective from 2 November 2026 · v2026-11-02

Draft: the operator’s details are not filled in yet.

HealsMe holds the most sensitive data people have: data about their health. This page explains in plain words what we collect, why, where it is kept, who else sees it, and how you stay in control of it.

In short: we don’t sell your data or show ads, and the HealsMe app uses no third-party trackers. Health records are encrypted with a separate key for every account and stored in the EU. You can export everything or delete your account at any time. This public website uses Microsoft Clarity analytics only if you allow it.

1. Who is responsible for your data

The controller of your personal data is TODO: legal name of the operator, registration code TODO: registration code, address: TODO: registered address. For privacy questions write to [email protected].

We process data under the Law of Ukraine "On Personal Data Protection" and, for users in the EU, the EU General Data Protection Regulation (GDPR).

2. What we process

Account: email, name, how you sign in (email, Google or Apple). Only the Microsoft Entra sign-in service sees your password; HealsMe never receives or stores it.
Profiles of the people in your record: name, date of birth, sex, blood type, height, weight, phone, pregnancy, photo, allergies, conditions, medications, emergency contacts, doctors.
Health records: lab results, uploaded documents (PDFs, photos), notes, reminders, medication courses and doses, first-aid kit contents and pack photos, the shopping list.
Sharing: the email addresses of people you invite and their roles.
Settings: language, time zone, notifications, device tokens for push notifications.
Activity log (no health data): when an action happened, which records it touched (ids only), the outcome, a keyed hash of the IP address, a shortened browser description.
Technical error logs with no health data.

Health data is a special category of personal data. We process it only because you enter it to keep your record, and only with your explicit consent.

3. Why, and on what basis

To provide the Service: store and show your records, draw charts, remind you, share with the people you chose (performance of the contract; for health data, your explicit consent).
To read reports, prescriptions and packs and to write summaries with AI when you start those features (your explicit consent).
To protect the Service and your data: the activity log, abuse detection, backups (legitimate interest and security obligations).
To send service emails: invitations, and the weekly summary if you turned it on (performance of the contract).

We don’t use your data for advertising, sell it or pass it on for marketing, train AI models on it, or make automated decisions about you with legal or similar effects.

4. How AI handles your data

Reading a report or prescription: the file you chose is sent to Azure AI Document Intelligence and Azure OpenAI in the EU (Sweden) to read the values. You check the result before anything is saved.
Summaries and trend explanations: the model gets only marker names, values, units, ranges, dates, age and sex. No names, notes, lab names or documents.
Microsoft does not use this data to train its models. Under Azure OpenAI rules, requests may be kept for up to 30 days only to detect abuse, unless an exemption from that monitoring applies to us.
AI answers are for information only and can be wrong. They are not medical advice (see the Terms of use, sections 2 and 3).

5. Where and how data is stored

All records are stored in Microsoft Azure in the EU (Netherlands); the AI services run in Sweden.
Health fields and files are encrypted with a separate key for every account, and those keys are protected by a key in Azure Key Vault. Connections are always encrypted (HTTPS).
Files are scanned for viruses on our own servers before they are stored.
Push notifications carry no health data, only a general text such as "You have a reminder".
We don’t look at the contents of your records. They are reached only to fix a fault you asked us to fix.

6. Who else processes data

We use only the providers the Service can’t run without, under data processing agreements:

Microsoft Ireland Operations Ltd. (Azure): hosting, sign-in (Entra External ID), AI services, email sending, notification delivery.
Google and Apple: only if you sign in with their account, and as the push delivery services of your browser or iPhone (no health data).
Stripe: only if you take a paid plan in future; only Stripe sees card details.
Microsoft Corporation (Clarity): only on this public website and only if you allow it. It sees how pages are used (clicks, scrolling, page views, device and browser type, approximate location from the IP address), never the HealsMe app and never health records.

Health records stay in the EU. Where Google, Apple or Stripe handle service data (an address, a device token) outside the EU, they do so under the EU standard contractual clauses. Clarity data may be processed in the United States under the EU-U.S. Data Privacy Framework and the standard contractual clauses.

People you share your record with also see it, within the role you chose. You can revoke their access at any time.

7. Cookies and local storage

The HealsMe app uses one necessary cookie for your sign-in session (secure, out of reach of scripts) and the browser’s local storage for language and theme. It has no analytics or advertising cookies.

This public website asks before loading Microsoft Clarity. Until you choose “Allow”, the Clarity script doesn’t load and sets no cookies; your answer is kept in the browser’s local storage. If you allow it, Clarity sets the _clck cookie (up to 1 year) and the _clsk cookie (1 day) on this site, and Microsoft sets its own cookies on clarity.ms and bing.com (such as MUID, CLID and ANONCHK). Legal basis: your consent.

You can change your answer at any time with “Cookie settings” at the bottom of every page. Withdrawing stops Clarity and removes its cookies from this site; Microsoft’s own cookies can be cleared in your browser settings. There are no advertising cookies on the website.

8. How long we keep data

For as long as your account exists, or until you delete a record.
When you delete your account, its encryption key is destroyed at once, so the data can no longer be read, and the records and files are erased straight away in the background. Encrypted database backups expire within 7 days.
Export files (PDF, ZIP) are deleted 24 hours after they are made.
Website analytics (Microsoft Clarity, only with your consent): kept by Microsoft for up to 13 months.
The activity log, which holds no health data, is kept for 6 years from each event so security incidents can be investigated, and is then deleted.

9. Your rights

Get a copy of your data: Profile → Privacy & data → export all records (PDF or ZIP).
Correct your data: any record can be edited in the app.
Erase your data: single records, or the whole account in Profile.
Withdraw consent: stop using the AI features or delete your account. Withdrawal does not affect processing that happened before.
Restrict or object to processing, and see who opened or changed your records (Profile → Access history).
Complain to the Ukrainian Parliament Commissioner for Human Rights or to the data protection authority in your EU country.

Write to [email protected] about any of this. We reply within 30 days.

10. Children

You must be 18 or older to create an account. A parent or legal representative may keep a child’s records in their own account and is responsible for having the right to do so.

11. If something goes wrong

If a breach may affect your data, we will tell the supervisory authority within the legal deadline (72 hours in the EU) and tell you without undue delay, explaining what happened and what to do.

12. Changes to this policy

We will tell you about significant changes in advance, in the app or by email. If a change affects your consent, we will ask you to accept the new version.