Effective Date: March 1, 2024
Last updated: August 17, 2026
This Privacy Notice for Kaizen Healthcare Inc ("Kaizen Health", "we", "us", or "our"), 1875 Mission St Ste 103, San Francisco, CA 94103, United States, describes how and why we access, collect, store, use, and share ("process") your personal information. Kaizen Healthcare Inc is the controller of your personal data. This Notice applies when you:
We refer to all of the above together as the "Services". Questions or concerns? If you do not agree with our policies and practices, please do not use the Services. If you have questions, contact us at info@kaizenhealth.io.
In Short: We collect personal information that you provide to us.
Sensitive information. With your consent or as otherwise permitted by applicable law, we process health data, account login credentials, and precise geolocation. We do not collect genetic data, and we do not collect biometric identifiers such as fingerprints or voiceprints. If you enable Face ID, Touch ID, or Android biometric unlock, that check happens on your device through the operating system and we never receive or store the underlying data.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.
In Short: Some information, such as your IP address and device characteristics, is collected automatically when you use the Services.
We do not buy personal information from data brokers, and we do not enrich your profile with data purchased from third parties.
Subscriptions are sold and billed by Apple and Google. We never receive or store your card number, bank details, security code, or billing address. Payment data is handled entirely by Apple and Google under their own privacy policies.
The AI chat on our website asks for your email address and verifies it with a one-time code. Your questions, any files you attach, and your email address are processed to produce a response, and your IP address is used to apply rate limits. Please do not enter information in the website chat that you would not want associated with your email address.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
In Short: We process your information to provide, improve, and administer the Services, to communicate with you, for security and fraud prevention, and to comply with law. We process it only when we have a valid legal reason.
We do not use your health information, documents, or chat content to target advertising, and we do not profile you for advertising purposes. Marketing communications we send are based only on your contact details and your subscription status.
In Short: We process your personal information only when we have a valid legal reason to do so under applicable law.
The GDPR and UK GDPR require us to explain the legal bases we rely on. For each purpose in section 2, we rely on:
We process your information where you have given us express consent, or where consent can be inferred from the circumstances (implied consent). You can withdraw your consent at any time. In limited cases, applicable law permits us to process without consent, for example: where collection is clearly in your interest and consent cannot be obtained in time; for investigations, fraud detection, and prevention; for business transactions meeting certain conditions; to identify injured, ill, or deceased persons and communicate with next of kin; where we have reasonable grounds to believe someone has been a victim of financial abuse; where disclosure is required by subpoena, warrant, or court order; or where the information is publicly available and specified by the regulations.
In Short: We share information only in the situations described below. We do not sell your personal information and we do not share it for cross-context behavioral advertising.
We do not disclose your health data to data brokers, insurers, or employers.
If you add a document or record to a care group, every member of that group can see it, and members can communicate with each other in the App. You control what you share and can turn sharing off at any time, but members may already have seen or saved the content. Removing sharing does not undo what someone has already read. Content shared into a care group is visible only to that group. It is not public, and it is not published outside the Services.
These vendors process data on our behalf, under written contract, and only for the purposes we specify:
We may disclose information where we believe it is required by law, or reasonably necessary to comply with legal process, enforce our terms, investigate suspected fraud or abuse, or protect the rights, property, or safety of you, us, or others. Where we are legally permitted, we will notify you before disclosing your information in response to a legal request.
If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy, and we will require the recipient to honor the commitments in this Notice. Your health data is not an asset we will market or sell separately from the Services.
In Short: We use a small set of cookies and analytics tools. We do not use advertising or retargeting trackers.
We use strictly necessary cookies and local storage for sign-in, security, and remembering your preferences. These cannot be turned off without breaking the Services. We use the measurement tools listed below. None of them is given your health records, documents, or chat content.
We do not use advertising, retargeting, or social media tracking pixels on the website or in the App, we do not display third-party advertising or offer walls, and we do not permit third parties to collect data through the Services for their own advertising purposes. Because we do not use tracking technologies for targeted advertising, there is no advertising opt-out for us to offer.
Analytics data collected through Google Analytics 4 and Firebase Analytics is retained for no longer than 14 months. Error and diagnostic data in Sentry is retained for no longer than 90 days. For more on Google's practices, see the Google Privacy & Terms page.
In Short: Yes. We offer features powered by artificial intelligence, and this section explains how your data is handled when you use them.
Our AI features provide chat responses, document and image analysis, text summarization, health insights, and voice transcription. The providers we use are:
How we handle this processing:
To give you continuity across conversations, we store extracted health facts ("memories") and their vector embeddings in a database hosted on Supabase. You can view and delete individual memories, or all of them, in the App.
AI output is informational only and is not medical advice. See our Medical Disclaimer.
In Short: If you register or log in using Apple or Google, we receive limited profile information from them.
You can register and log in using Sign in with Apple or Google Sign In. When you do, we receive a unique account identifier, your email address (or Apple's private relay address if you choose to hide it), and your name where you choose to share it. We use this information only for the purposes described in this Notice, principally to create and authenticate your account.
We do not control, and are not responsible for, other uses of your personal information by Apple or Google. We recommend reviewing their privacy notices to understand how they collect, use, and share your information, and how to set your preferences.
In Short: We keep your information for as long as you have an account with us. When you delete your account, we delete your data.
Your account is the retention period. Your profile, health records, documents and media, voice recordings, health-fact memories, and group memberships are kept while your account exists, and are deleted when you delete your account. We do not keep your health data on some separate clock, and we do not retain it after you leave. You can also delete individual records, documents, and memories at any time without closing your account.
Four narrow things cannot disappear at the same instant, and we would rather say so than imply otherwise:
Two further notes. Content you shared into a care group may already have been saved or exported by other members, and we cannot reach those copies. And the website AI chat is keyed to an email address rather than an account, so it is not covered by account deletion: verification codes expire within minutes and chat rate-limit records are kept no longer than 24 hours, both independently of whether you have an account.
Where we no longer have a legitimate need to process your information and cannot delete it immediately, we securely store it and isolate it from further processing until deletion is possible.
In Short: We protect your information with organizational and technical security measures, though no system can be guaranteed completely secure.
Our safeguards include encryption in transit with TLS, encryption at rest, per-user access rules enforced at the database level, scoped file storage, optional biometric app lock, credentials stored in your device's secure keychain or keystore, least-privilege access for our team, and audit logging of administrative access. Despite these efforts, no electronic transmission or storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never defeat our security. Transmission of personal information to and from the Services is at your own risk, and you should only use the Services in a secure environment.
If a breach affects your personal or health information, we will notify you and the relevant regulators as required by applicable law, including the FTC Health Breach Notification Rule, state breach notification laws, and GDPR Articles 33 and 34.
In Short: We do not knowingly collect data from or market to children under 18 years of age.
The Services are for people 18 and over. We do not knowingly collect, solicit data from, or market to children under 18, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor dependent and consent to that minor's information being recorded.
Adult account holders can record information about a child as a family member or dependent. When you do, you are responsible for having the legal authority to provide that information, you act as that child's parent or guardian for consent purposes, and the child's information is treated with the same protections as your own. It is never used for advertising or profiling. If we learn that a child under 18 has created an account, we will deactivate it and promptly delete the data. If you become aware of any data we may have collected from a child, contact us at info@kaizenhealth.io.
In Short: Depending on where you live, you may review, change, or terminate your account at any time, and you have rights that give you greater access to and control over your personal information.
In these regions you have the right to request access to and a copy of your personal information; rectification or erasure; restriction of processing; portability of data you provided to us; and not to be subject to solely automated decision-making. In certain circumstances you may also object to processing based on our legitimate interests. Exercising these rights is free and we will not treat you differently for doing so.
To exercise any of these rights, email info@kaizenhealth.io with "Data Rights Request" in the subject line, or use our support form. We respond within one month and may extend by two further months for complex requests, telling you if we do. We may need to verify your identity first.
If you are in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or the UK Information Commissioner's Office. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
You can complain directly to us before going to a regulator, and we would appreciate the chance to put things right. Contact us online at our support form, by email at info@kaizenhealth.io, or by post at the address in section 18. We will acknowledge your complaint within 30 days, investigate without undue delay, keep you informed of progress, and explain the outcome. For UK users, this is in addition to your rights under the UK GDPR and the Data Protection Act 2018.
Where we rely on your consent, including explicit consent for health data, you can withdraw it at any time by contacting us using the details in section 18, or by turning off the relevant feature or device permission. Withdrawal does not affect the lawfulness of processing before it, nor processing we carry out on another lawful basis.
You can unsubscribe from marketing messages at any time using the link in any marketing email, or by contacting us. You will then be removed from our marketing lists. We will still send service-related messages necessary for the administration of your account, responses to your requests, and security notices.
Most browsers and some mobile operating systems offer a Do-Not-Track ("DNT") setting. No uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this Notice.
We do honor Global Privacy Control (GPC) signals as a valid opt-out preference signal where applicable law requires it. Because we do not sell personal information or share it for cross-context behavioral advertising, a GPC signal does not change how we handle your data, but we recognize and respect it.
In Short: If you live in a US state with a comprehensive privacy law, you may have rights to access, correct, delete, and obtain a copy of your personal information, and to withdraw your consent.
This section applies if you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a comparable law. These rights may be limited in some circumstances by applicable law.
The table below shows the categories of personal information we have collected in the past twelve months. For the full detail, see section 1.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, alias, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | Yes |
| B. Personal information as defined in the California Customer Records statute | Name and contact information | Yes |
| C. Protected classification characteristics under state or federal law | Sex or gender, age, and date of birth | Yes |
| D. Commercial information | Subscription plan, transaction identifiers, purchase and renewal dates, and entitlement status | Yes |
| E. Biometric information | Fingerprints and voiceprints | No |
| F. Internet or other similar network activity | Screens viewed, features used, session timing, and interactions with our website and App | Yes |
| G. Geolocation data | Device location, where you grant permission | Yes |
| H. Audio, electronic, sensory, or similar information | Documents and images you upload or scan, and voice recordings you create in the App | Yes |
| I. Professional or employment-related information | Job title, work history, and professional qualifications | No |
| J. Education information | Student records and directory information | No |
| K. Inferences drawn from collected personal information | Your health score, and summaries or health facts our AI features derive from your records | Yes |
| L. Sensitive personal information | Health data, account login credentials, and precise geolocation | Yes |
We retain each category for as long as you have an account with us, subject to the exceptions in section 8. We may also collect personal information outside these categories when you interact with us through customer support, surveys, or in the course of delivering the Services and responding to your inquiries.
We collect sensitive personal information, including health information and precise geolocation where you permit it. We use it only to provide the Services you requested and for the purposes permitted by law. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you for advertising. You may have the right to limit our use and disclosure of your sensitive personal information.
We have not sold personal information, and we have not shared it for cross-context behavioral advertising, in the preceding twelve months. We will not do so in the future, and we do not knowingly sell or share the personal information of anyone under 16. We do disclose personal information to the service providers named in section 4.2 for business purposes, under written contracts that restrict what they may do with it. Using your information for our own internal research and technological development is not a sale.
Under the Washington My Health My Data Act and Nevada SB 370, consumer health data receives specific protections. We collect the consumer health data described in section 1 for the purposes in section 2, we share it only with the service providers and processors named in section 4.2, and we do not sell consumer health data and will not do so without your separate written authorization. You may withdraw consent to the collection or sharing of your consumer health data, and request its deletion, using the contact details below. This Notice, together with the deletion terms in section 19, serves as our consumer health data privacy notice.
We handle medical information in line with the California Confidentiality of Medical Information Act, which applies to businesses offering health applications to California residents.
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about the categories of personal information we disclosed to third parties for their direct marketing purposes, and the names and addresses of those third parties. We do not disclose personal information to third parties for their own direct marketing purposes. To make a request, contact us using the details in section 18.
Use our support form, email info@kaizenhealth.io with "Data Rights Request" in the subject line, or write to us at the address in section 18. We acknowledge requests within 10 business days and respond within 45 days, extending once by a further 45 days where necessary and telling you if we do.
Authorized agents. You may designate an authorized agent to make a request on your behalf. We may deny a request from an agent who does not submit proof of valid authorization, and we may need to collect additional information from you to verify your identity.
Request verification. We will need to verify your identity before acting on a request. We use the personal information in your request only to verify your identity or authority. If we cannot verify you from the information we already hold, we may ask for additional details for verification and fraud-prevention purposes.
Appeals. If we decline to act on your request, you may appeal by emailing info@kaizenhealth.io with "Privacy Request Appeal" in the subject line. We will inform you in writing of any action taken or not taken, with our reasons. If your appeal is denied, you may submit a complaint to your state attorney general.
Our backend application servers are hosted on Amazon Web Services. Your account data, health records, and uploaded documents are stored on Google Cloud and Firebase infrastructure, and health-fact memories and their vector embeddings are stored on Supabase. This infrastructure is located in the United States, and our service providers are located primarily in the United States.
If you use the Services from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. For transfers of personal data out of the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with additional technical and organizational safeguards. You can request a copy of the relevant transfer mechanism by contacting us.
Two features process your data automatically: your health score, which compares metrics such as age, sex, height, weight, step count, and resting heart rate against published population averages (see how the health score is calculated), and our AI features, which generate summaries and responses. Neither makes decisions about you that have legal effects or similarly significant consequences, and neither is used to determine eligibility for insurance, credit, employment, or care. If a decision producing legal or similarly significant effects were ever made solely by automated means, we would tell you, explain the main factors, and offer a simple way to request human review. You can ask us to explain a result, contest it, or stop using these features.
We apply HIPAA-aligned administrative, technical, and physical safeguards to health information, and we have Business Associate Agreements in place with OpenAI, Anthropic, and Google Cloud. Kaizen Health is a direct-to-consumer service, so when you use it on your own behalf we are generally not acting as a HIPAA covered entity or business associate, and the health information you give us is not protected health information under HIPAA. Instead, it is protected by this Notice, by the consumer health privacy laws described in section 13, and by the FTC Health Breach Notification Rule. Where we provide services on behalf of a HIPAA covered entity, we act as a business associate under a written agreement and HIPAA applies to that processing.
Yes. We update this Notice as necessary to stay compliant with relevant laws and to reflect changes to the Services. When we do, we will change the "Last updated" date above. If a change materially affects how we handle your personal or health data, we will notify you in the App or by email before it takes effect, and where the law requires it we will ask for your consent. Previous versions are available on request.
Kaizen Healthcare Inc
1875 Mission St Ste 103
San Francisco, CA 94103
United States
info@kaizenhealth.io
For privacy questions, put "Privacy Question" in the subject line. For rights requests, see section 13.
You have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, and deletion. You can delete your account and its data at any time, using any of these methods:
What deletion removes: your profile and account record, your health records and entries, uploaded documents and media, your health-fact memories and their embeddings, your group memberships and invitations, your stored device push tokens, and your sign-in credentials. Deletion is permanent and cannot be undone. We complete deletion immediately for in-app requests, and within 30 days for requests sent by email or through support.
What may remain, and why: encrypted backups until the rotation described in section 8; aggregated or de-identified statistics that can no longer be linked to you; transaction and tax records we are legally required to keep; records we must retain to prevent fraud, resolve a dispute, assist an investigation, or enforce our legal terms; content you shared into a care group that other members have already saved or exported; and short-lived diagnostic logs held by our analytics and error-monitoring providers, which age out on the schedules in section 8.
Deleting your Kaizen Health account does not cancel your Apple or Google subscription. Cancel that in your App Store or Google Play account settings.
Get Kaizen Health free
Download the App