Privacy Policy

1. Scope and operator

51Heal Health Assistant operates the Health Assistant service at 51heal.com. This policy applies to the website, account features, AI conversations, health-organization tools, and uploaded files. Questions or privacy requests may be sent to privacy@51heal.com.

2. Information we collect

We collect information you provide, information created through your use of the service, and limited technical information needed to operate and protect it.

• Account data, including your name, email address, password hash, invitation redemption, language preference, and account status.
• Health-related content you choose to enter, including conversations, health records, medications, profile details, and uploaded attachments.
• Service and security data, such as login times, session data, error logs, IP address, browser/device information, and actions needed to investigate abuse or incidents.
• Communications with us, including support and privacy requests.

3. How we use information

• Provide, personalize, maintain, and secure the service.
• Generate AI responses and preserve the conversation and health-organization features you request.
• Authenticate users, deliver non-clinical account messages, prevent fraud, troubleshoot problems, and enforce these terms.
• Comply with law, respond to valid legal requests, and establish or defend legal claims.

4. Service providers and disclosures

We disclose information only as needed to operate the service, comply with law, protect users, or complete a business transfer. Providers may process data under their own contractual terms. Current core categories include:

• Amazon Web Services for hosting, private object storage, and encrypted backups.
• OpenAI for processing prompts and permitted attachment content to generate assistant responses. Do not submit regulated health information until the required agreements and configuration have been confirmed.
• Resend for generic transactional email such as account verification and password reset. We do not intentionally place health details, chat content, attachments, diagnoses, or medications in these emails.
• Professional advisers, authorities, or transaction counterparties when legally required or reasonably necessary.

5. Storage, retention, and deletion

Account content is retained while your account is active and as reasonably needed to provide the service. When you delete your account, active records are scheduled for deletion, but limited copies may remain temporarily in encrypted backups, security records, or records required by law. Retention periods should be reviewed and approved by the service operator before production use.

6. Security

We use measures intended to protect information, including encrypted transport, private storage, access controls, and backups. No system is completely secure. You are responsible for protecting your password and promptly reporting suspected unauthorized access.

7. Cookies and similar technologies

The service uses essential session, security, and language-preference cookies. These are needed for login, request protection, and remembering your selected language. If optional analytics or advertising technologies are added, this policy and any required consent controls must be updated first.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. You may update profile information or delete your account in the service, or contact privacy@51heal.com. We may need to verify your identity before fulfilling a request.

9. Children, transfers, and changes

The service is intended for adults and is not directed to children under 18. Information may be processed in the United States and other locations used by our providers. We may update this policy and will post the revised date; material changes may also be communicated through the service or email.