Our commitment
Your health story is private. We designed Sanare so you can see everything we hold, remove any of it, and delete all of it. We do not sell your personal information, and we do not use your health information to target advertising.
Information we collect
- Account information: your name and email, your password if you create one (stored only as a secure hash), and an optional profile photo. If you sign in with Google or Microsoft, we receive your name and email from that provider and never see your provider password.
- Health information you provide: what you tell us in conversation (typed or spoken), health forms, records you upload or scan with your camera, records you email to our records address (held for your review before anything is added), files you choose to import from Google Drive (only the files you pick, transferred directly in your browser), records you import from your patient portal (you sign in to your own portal; access is one-time and we never store your portal password or access token), and (if you add them) insurance details. This is the information used to build your story and summary.
- Voice: if you dictate, your audio is transcribed to text by our cloud speech service; if you use the voice-conversation mode, your speech is processed in real time by the AI speech service in our cloud environment so it can reply out loud. In both cases we keep the text transcript as part of your conversation. We do not keep the audio.
- Location: the country and state or region you choose on your account page, used for settings that depend on where you live (for example, crisis resources for your country) and, in the United States, to find clinicians in your state. If you tap "Use my current location" or ask to sort clinicians by distance, your device shares its position for that request only. It is not saved to your account, and for the account lookup it is rounded to about a kilometre first.
- Health app data (Apple Health or Health Connect): only if you connect it in the Sanare app, and only the measures you allow. Your phone sends one value per day for each (for example, daily steps, sleep, resting heart rate, heart rate variability, weight, blood pressure, blood glucose and blood oxygen); individual readings stay on your phone. We use it only to show trends in your health story. It is never used for advertising, never sold, and never shared except when you share your story. You can pause, disconnect, or remove it from your data vault at any time.
- Emergency card: if you set one up, we keep what you choose for it (from your allergies, current medicines, conditions you reported and a short summary of what you are seeking care for), an optional blood type and note in your words, and up to three emergency contacts you add (name, relationship, phone, email). Nothing is shared until you approve the card. When you send it, you send it yourself from your own phone; we make a link that opens only for the time you choose (1, 24 or 72 hours), store only a scrambled form of it, count how often it is opened, and let you turn it off at any time. A link shows the card you approved, without anything you have since removed from your story. If you add your location to the message, your phone builds the map link; we never receive it. When you look for hospitals near you, your position is used for that search only, rounded to about a kilometre, and not saved. Sanare does not call emergency services or contact anyone for you. Deleting your story removes the card and turns its links off; deleting your account removes your contacts too.
- Appointments and daily check-ins: if you add the date of an appointment, we keep the date, an optional time and who you are seeing, in your words, to send one reminder and to show what is new since then. If you use the daily check-in, we keep each day's ratings, an optional energy rating and an optional note. Your book shows your ratings as counts and your recent notes. You can remove the check-ins from your data vault at any time.
- Definitions: when you tap "What is this?" beside a test, medicine or symptom, we look up that term on MedlinePlus (U.S. National Library of Medicine). Only the term itself is sent, never your name, results or anything else about you.
- Wallet health card: if you add the health card to Apple Wallet, it holds your name, the allergies, medicines and conditions you gave us, and a code that opens your book. The card is made on our servers and kept by Wallet on your device (and in iCloud if you sync Wallet). Apple is not sent anything by us, and the card never shows on your lock screen by itself. The code is a share link: it stops opening after 30 days, and you can turn it off at any time.
- Optional check-ins: if you answer the brief "did your visit give you direction?" question, we store your answer choice and, if you add one, a short optional note. Neither is ever joined to your health story or shared summary.
- Technical information: basic logs needed to operate and secure the service (e.g., request identifiers, error diagnostics), and count-only usage events (for example, that a summary was viewed or a record was uploaded) that contain no health content.
Emails and notifications
We send transactional email (verification, password reset, records-received confirmations) and occasional reminder emails about your own story; reminders are count-based and never include your health details, and you can opt out any time from the email or your account page. If you enable push notifications, they may tell you that something happened ("your story was viewed", "records received") or offer a gentle check-in. They never include your health information.
How we use it
- To provide the service to you: organizing your story, generating your summary, and the features you enable.
- To secure the service and prevent abuse.
- We do not sell your information or use your health data for advertising.
Where your data is processed
Your information is processed on Microsoft Azure, within our cloud environment. The AI processing that helps organize your story runs on Azure OpenAI under our agreements with Microsoft, and on Anthropic's Claude API under our agreement with Anthropic in a HIPAA-oriented configuration. Your health information is never sent to consumer AI apps, and none of these providers may use your information to train their models. A limited number of vetted service providers (for example, transactional email) process data only as needed to operate the service and under confidentiality obligations.
How long we keep it
We keep your information while your account is active. When you remove a source or delete your story or account, we delete the associated data (and everything derived from it), subject to limited retention required by law or for security.
Your choices and rights
- See it: your data vault lists every source that fed your story.
- Remove it: remove any source, or delete your entire story, at any time.
- Export it: download a copy of your data.
- Delete your account: this erases your health data and anonymizes your identity.
Depending on where you live, you may have additional rights (for example, under GDPR or state privacy laws). Contact us to exercise them.
Security
We use encryption in transit and at rest, hashed session tokens, access controls, rate limiting, a web application firewall, and monitoring. Password accounts can enable optional two-step verification by email code. No system is perfectly secure, but protecting your health information is a core design goal.
Children
Sanare is not intended for anyone under 18.
Contact
Privacy questions: hello@sanarehealth.ai.