How we collect, use, protect, and share your information, and the control you keep over your data.
HealthForge Inc. (HealthForge, we, us) builds a platform that brings your health data into one place, reads it with a personal AI, and connects you with longevity clinicians. This Privacy Policy explains what we collect, how we use it, and the choices you have. It applies to our website, our applications, and related services, which we call the Services.
Health information is among the most sensitive data there is, and we treat it that way.
By creating an account and using the Services, you consent to the collection, use, retention, and other practices described in this policy.
Account details such as your name, email, and password. Health information you choose to add, such as medications, supplements, goals, and notes. Messages you send to us.
Data from wearables, apps, and services you connect, such as sleep, heart rate, activity, and continuous glucose data. Laboratory results you upload or authorize us to import.
If you use our clinical or telehealth services, information related to that care, handled as described in the Health information and HIPAA section below.
How you interact with the Services, along with device type, browser, and similar technical details, collected through standard technologies including cookies.
When you pay for a service, payment details are handled by our payment processor. We do not store full card numbers.
We also create data about you, such as analyses, scores, inferences, and other outputs generated from your information, and we may obtain information about you from third parties and other sources where permitted by law. We collect and use the information described in this section to the fullest extent permitted by applicable law.
We use the information we collect, and the data we generate from it, to:
Subject to applicable law and the consents you provide, we use the information we collect and the data we derive from it for any lawful business purpose, including commercial purposes. We do not sell your identifiable personal information.
You keep ownership of the information you provide. By using the Services, you grant HealthForge a worldwide, perpetual, irrevocable, royalty-free, transferable, and sublicensable license to host, store, process, analyze, de-identify, aggregate, create derivative works from, and otherwise use that information and the data we generate from it, including to develop, train, and improve our products, services, and AI and machine learning models, and for research and commercial purposes, in each case as permitted by applicable law. The full terms of this license are in our Terms of Service.
HealthForge exclusively owns all de-identified and aggregated data, and all models, algorithms, insights, analyses, and other materials that we develop or derive from your information, together with all intellectual property rights in them. These rights continue even after you close your account.
Where HealthForge provides or supports clinical or telehealth care, certain health information is protected under the Health Insurance Portability and Accountability Act (HIPAA). That information is handled under the applicable Notice of Privacy Practices and our agreements with the clinicians and providers involved.
Health information you add to the consumer app on your own, outside of a clinical relationship, is handled under this Privacy Policy and applicable law. If you are unsure which framework applies to your data, contact us and we will help.
You can access and review your data in the app, export your record, and correct your information. You can also close your account at any time. Closing your account stops our use of your identifiable data to provide the Services to you, but it does not require us to erase data from our systems. We continue to retain and use information as described in Data retention and Our rights to your data, including in de-identified and derived form.
Depending on where you live, you may have additional rights under privacy laws that apply to you, including rights to access or delete certain personal information. We honor those rights to the extent the law requires. Where we are required to delete personal information, we may still retain de-identified and aggregated data and the materials we have derived from your information, which are not subject to deletion.
To make a request, use the controls in the app or contact us. You can opt out of non-essential email at any time.
We protect your information with encryption in transit and at rest, access controls, and ongoing monitoring. No system is perfectly secure, so we also ask you to use a strong password and keep your account credentials private.
We retain the information we collect, and the data we derive from it, for as long as it is useful for the purposes described in this policy, and we may retain it indefinitely where permitted by law. Closing your account does not by itself require us to delete your information, and copies may remain in backups, archives, and derived data sets.
We retain information where needed for legal, security, clinical recordkeeping, and similar reasons. Where applicable law requires us to delete personal information, we do so to the extent required. De-identified and aggregated data is not subject to deletion and may be retained and used indefinitely.
The Services are for adults. They are not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a minor has given us information, contact us and we will remove it.
HealthForge is based in the United States and processes information there. If you use the Services from outside the United States, you understand that your information will be handled in the United States under this policy and applicable law.
We may update this policy as the Services evolve. When we make material changes, we will update the date above and, where appropriate, notify you in the app or by email.
Questions about privacy or your data: privacy@healthforge.com.
HealthForge Inc., Long Island, New York.