Consumer Health Data Privacy Policy

What health data we keep, and why

We keep the health details you choose to add on these pages. Medical information holds your medications, allergies and conditions, your blood type, your doctors, your health insurance and the people to call in an emergency. Organ and body donation wishes hold your choices, your notes and the organisations you name. The tonight plan holds the allergies and the doctor of each child you add. The care handover holds the conditions, medication, allergies, doctors and hospital of a person in your care, and the signs that they are in distress. On your important documents page you can also note a document about your health, such as a living will or a do not resuscitate order, and where it is kept.

We keep them so that you can see and change them, and so that we can pass them to the people you choose, when and as you set. We do not use them for advertising, we do not sell them, and we do not use them to build a profile of you. What you write on these pages is encrypted before it is stored, and no screen our team uses shows it.

Where it comes from

From you, when you write it on these pages. When the details are about a child or a person in your care, they still come from you, and you tell us who you are to that person each time you save. After a death, a death certificate sent to us can state a cause of death. We keep that document only to decide the case, as our Privacy Policy describes, and we pass it to nobody.

Who receives it

Only the health details you agreed to pass on, and only to the people you named for them, once the conditions you set are met. Your medical information goes to the people you name on its page after your death is confirmed. Your organ and body donation wishes go to the people you choose to read them, and until you choose, to everyone on your contact list who opens their page, after your death is confirmed or sooner if someone you allowed reports your death and you do not answer in time. The tonight plan goes to the person you named to take your children and to the backup, and the care handover to the carer and the backup you named, once a death is reported that way or confirmed. The care handover can also open to that carer or backup during an emergency access you allowed them to ask for, when you chose to share that person's handover in an emergency. A health document you note on your important documents page reaches the people you named to work through your family guide, after your death is confirmed.

Without your yes to passing health details on, your medical information and your organ and body donation wishes reach nobody, the tonight plan and the care handover go out without the health details listed above, and a health document you noted is left out of your family guide.

Companies that handle it for us

Amazon Web Services runs the servers, the database and the file storage the service runs on, and holds your health details there in encrypted form. Cloudflare carries every visit to our website and app, so what you type passes through its network on its way to us. If you write to us by email about your health, your message is kept in our company email at Google Workspace. Each of them handles the data only to run its part of the service for us, under a contract with us. If you switch an AI assistant on and write health details into it yourself, the AI provider receives what you write, as our Privacy Policy describes. Nobody else receives it.

Your consent

Accepting our Terms is not enough. Before you keep health details we ask for your own yes to keep them, a box you tick. Before they are passed on we ask for a separate authorization, which you sign on a page of its own with your full name and the date it ends. You can take back either at any time in your settings with one press, and you can change the authorization by signing it again. If you take back the yes to keep them, the health pages close, nothing on them is used or passed on from that moment, and we delete what you wrote there 15 days later, unless you give your yes again before then. If you take back the authorization, or once its end date passes, they go to nobody.

Your rights, and how to use them

You can ask whether we hold health data about you, get a copy of it with a list of everyone we shared it with and how to reach them, take back your consent, and have it deleted. We delete it from the live service, and it leaves our backups as each one reaches the end of its cycle, within 35 days. You do not need an account to ask, and it costs nothing. Write to the address below. We answer within 30 days, and we will ask you to prove who you are first.

If we refuse, reply to our answer and say you want it looked at again. We answer an appeal within 45 days, and if we still refuse, we tell you how to complain to the Attorney General of your state.

Where to write. [email protected]