Privacy Policy
Version 2026-08-21
This service handles health information, which is among the most sensitive data there is. Please read this page before recording anything about yourself, and only record what you are comfortable storing with us.
What we collect
- Account details — your name, email address, password (stored only as a secure hash), and date of birth.
- Your conversations — the messages you send and the answers you receive.
- Your health profile — if you are a member and choose to record it: medical history, medications, bloodwork, compounds used, goals, and anything else you tell the record keeper.
- Legal acceptances — which documents you accepted, which version, when, and the IP address and browser you used. We keep this as proof of consent.
- Usage records — counts and costs of AI requests, so we can apply daily limits and understand what the service costs to run.
Why we hold it
To run the service for you: to answer your questions, to remember your profile so answers can take it into account, to apply daily limits fairly, to take payment, and to keep the records the law expects us to keep.
Your health profile is recorded because you asked us to record it. That consent is the basis on which we hold it, and you can withdraw it at any time by removing entries or closing your account.
Who else sees it
- OpenAI — your messages, and (for members) your profile, are sent to OpenAI to generate responses. Their handling of that data is governed by their own terms.
- Stripe — handles payments. Your card details go to Stripe directly and never reach our servers.
- Our hosting and database providers — who store the data on our behalf.
We do not sell your data, and we do not use it for advertising. We will disclose it if the law requires us to.
How long we keep it
Your account and its contents are kept while your account is open. Profile entries are kept as a history rather than overwritten, so that measurements can be tracked over time — removing an entry takes it out of use but keeps the record.
Records of legal acceptance are kept for as long as they might be needed as evidence, which may be after your account closes.
Your rights
Depending on where you live, you may have the right to see the data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, and to receive a copy in a portable form. To exercise any of these, email pedmd.org@gmail.com.
You can also edit or remove any profile entry yourself at any time from your profile page.
Security
Passwords are hashed, connections to our databases are encrypted, and access is limited. No system is perfectly secure, and we cannot guarantee absolute security. Please consider that before recording especially sensitive details.
Children
This service is for adults aged 18 and over. We do not knowingly collect data from anyone younger. If you believe we have, contact us and we will delete it.
Changes
If this policy changes, the version above changes and you will be asked to accept the new version.