Privacy Policy
Version 2026-10-12
This service handles health information, which is among the most sensitive data there is. Please read this page before recording anything about yourself, and only record what you are comfortable storing with us.
What we collect
- Account details — your name, email address, password (stored only as a secure hash), and date of birth.
- Your conversations — the messages you send and the answers you receive.
- Voice recordings, briefly — if you use the microphone in a message box, your recording is sent to be turned into text and is then discarded. We never store the audio: it is not saved to disk, not attached to your message, and not kept after the words have been written out. What we keep is the text, which becomes your message like anything you had typed.
- Your health profile — if you are a member and choose to record it: medical history, medications, bloodwork, compounds used, goals, and anything else you tell the record keeper.
- Legal acceptances — which documents you accepted, which version, when, and the IP address and browser you used. We keep this as proof of consent.
- Usage records — counts and costs of AI requests, so we can apply daily limits and understand what the service costs to run.
Why we hold it
To run the service for you: to answer your questions, to remember your profile so answers can take it into account, to apply daily limits fairly, to take payment, and to keep the records the law expects us to keep.
Your health profile is recorded because you asked us to record it. That consent is the basis on which we hold it, and you can withdraw it at any time by removing entries or closing your account.
Who else sees it
- OpenAI — your messages, and (for members) your profile, are sent to OpenAI to generate responses. If you use the microphone, your recording goes to OpenAI as well, to be turned into text. Their handling of that data is governed by their own terms. We chose to do this rather than use your browser's own speech recogniser, which on some browsers would send your voice to a different company again.
- Stripe — handles payments. Your card details go to Stripe directly and never reach our servers.
- Our hosting and database providers — who store the data on our behalf.
We do not sell your data, and we do not use it for advertising. We will disclose it if the law requires us to.
How long we keep it
Your account and its contents are kept while your account is open. Profile entries are kept as a history rather than overwritten, so that measurements can be tracked over time — removing an entry takes it out of use but keeps the record.
If you use the service without an account, your conversation is tied to your browser session and is deleted 30 days after your last message. Creating an account carries your conversation into it, and it is then kept with the account.
Records of legal acceptance are kept for as long as they might be needed as evidence, which may be after your account closes.
Voice recordings are the exception to all of this: they are not kept at all. A recording exists only for as long as it takes to turn it into text, and is discarded whether or not that succeeds.
Your rights
Depending on where you live, you may have the right to see the data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, and to receive a copy in a portable form. To exercise any of these, email pedmd.org@gmail.com.
You do not need to ask for any of this. You can edit or remove any profile entry yourself at any time from your profile page, change your email address or password from your account settings, download a copy of everything we hold about you from the same page, and delete your account and everything in it from there too. Deletion is immediate and cannot be undone; we keep only anonymous counts of how many messages were sent on a given day, which name nobody.
Security
Passwords are hashed, connections to our databases are encrypted, and access is limited. No system is perfectly secure, and we cannot guarantee absolute security. Please consider that before recording especially sensitive details.
Children
This service is for adults aged 18 and over. We do not knowingly collect data from anyone younger. If you believe we have, contact us and we will delete it.
Changes
If this policy changes, the version above changes and you will be asked to accept the new version.