Privacy Policy

DRAFT v0.4.2 — pending attorney review. Last updated: April 22, 2026.

Privacy Policy

Your privacy matters. This policy explains what information we collect, how we use it, and your rights. It applies to Helix Anesthesia ("the App," "we," "us").

1. Information We Collect

Account Information: Name, professional title, institution (optional), email address, and authentication credentials.

Usage Data: Features used, screens viewed, crash and error reports, app version, device type, operating system version.

AI Chat Queries: The clinical questions you submit and the AI responses generated. Queries are hashed for caching; hashed versions are retained to reduce cost and improve response time.

Subscription Data: Transaction receipts from Apple App Store or Google Play Store, when applicable. We do not receive or store your credit card information directly.

Audit and Legal Records: When you accept legal agreements (Terms of Service, Privacy Policy, Beta Tester Agreement), we record the timestamp, agreement version, your IP address, your device type (user-agent), and your name/email/institution as they appear on your profile at the time of acceptance. This information is retained as a legal compliance record.

2. What We Do NOT Collect

We do not knowingly collect Protected Health Information (PHI). You are instructed not to enter patient identifiers, MRNs, names, DOBs, addresses, or other PHI into the App.

If you submit PHI despite our instructions, we cannot guarantee its protection and you assume all associated risk. The App includes automated filters to detect and prevent common PHI patterns, but these filters are not perfect.

We do not sell your data to third parties for advertising or any other purpose.

3. How We Use Your Data

• Operate, maintain, and improve the App

• Process AI queries through our model provider

• Manage subscriptions and billing

• Respond to your support requests

• Send critical service announcements (not marketing)

• Detect and prevent fraud, abuse, and technical issues

• Comply with legal obligations

4. Third-Party Service Providers

We use the following subprocessors:

· Anthropic — AI model provider for the chat feature. Queries are transmitted to their API. Review their privacy policy at anthropic.com.

· Supabase — database and authentication infrastructure. Review their policy at supabase.com.

· Apple App Store / Google Play Store — app distribution and subscription processing.

· Expo — app delivery and update infrastructure.

Each provider processes data under their own privacy policies. We select providers with reasonable security practices but cannot guarantee their conduct.

5. Data Security

Data is encrypted in transit (HTTPS/TLS 1.2+) and at rest (AES-256). Passwords are hashed using modern algorithms. We use reasonable industry practices to protect data.

No system is completely secure. We cannot guarantee absolute security against all threats. You are responsible for keeping your account credentials confidential.

6. Your Rights

You have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Delete your account and associated data

• Export your data in a portable format

• Opt out of non-essential analytics

• Lodge a complaint with your local data protection authority

Exercise any of these rights by contacting: privacy@helixanesthesia.com (placeholder).

7. Data Retention

· Account data: Retained while your account is active, plus 30 days after deletion for recovery purposes.

· AI chat history: Retained for 90 days unless you delete it sooner.

· Hashed query cache: Retained up to 12 months to reduce costs and improve response time. Cache entries contain only hashed questions, not your identity.

· Anonymized usage analytics: Retained indefinitely in aggregated form.

· Legal/billing records: Retained as required by law.

8. Children

The App is not intended for individuals under 18. We do not knowingly collect data from minors. If we learn we have collected data from a minor, we will delete it.

9. California Residents (CCPA/CPRA)

California residents have additional rights: to know what categories of personal information we collect, to request deletion, to opt out of "sale" of personal information (we do not sell), and to non-discrimination for exercising rights. Contact privacy@helixanesthesia.com to exercise these rights.

10. EU/UK Residents (GDPR/UK-GDPR)

Our lawful bases for processing your data include: performance of a contract (operating the App for you), legitimate interest (improving the App, security), and consent (where required). You may object to processing based on legitimate interest and withdraw consent at any time. You have the right to data portability and to lodge complaints with your local data protection authority.

11. International Data Transfers

Our servers and subprocessors may be located in the United States. By using the App, you acknowledge your data may be transferred to and processed in the US, which may have different privacy protections than your country.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the App and by email. Continued use after changes constitutes acceptance.

13. Contact

Privacy questions, requests, or concerns: privacy@helixanesthesia.com (placeholder — will be updated before public release).

Privacy questions: privacy@helixanesthesia.com. View Terms of Service →