Privacy

HIPAA, the U.S. health-privacy law, covers doctors, hospitals and health plans. We are none of those. When you connect a hospital, you are choosing to send your record to us, and HIPAA no longer applies to the copy we hold. This policy, and the state laws that protect consumer health data, apply instead. We hold ourselves to the protections below.

• Your email address, to sign you in with a one-time code. We don’t use passwords.
• What you tell us about yourself: your sex, age range and whether you’re pregnant; your answers to health-history questions; your goals and what you want to track.
• Things you report, like “I got my period today” or a blood pressure reading. We keep the coded fact (a period, a date, a reading), not the sentence you typed.
• Records you connect: your lab results, vital signs, conditions, medicines, allergies, immunizations, procedures and visits, read from your hospital’s patient portal (Epic MyChart or Oracle Health) after you sign in there, or from a health summary or Apple Health export you upload. We note that a clinical note exists, its kind, author and date, but we never fetch its text. Records that a pregnancy ended (a miscarriage or an abortion) are dropped before anything is stored.
• Your phone number, only if you link it to text us.
• Things you choose to track, like meditating or drinking water: the name you give each one, its unit and goal (encrypted before they are stored, and never written to our logs), and the days you check off.

Your questions are not stored. What you type is used to answer you and then let go. It never goes into our database or our logs. Before it leaves our servers, names, emails, phone numbers, addresses and dates of birth are taken out of it.

Photos of results stay on your device. A photo is read on your phone or computer, and only the result you confirm is used.

On servers in the United States: our database is hosted by Supabase and the site by Vercel. Your health information (records, findings, history answers, reports, profile and linked phone number) is encrypted by our own code before it is written, with a key kept separately from the database. Each person can read only their own rows.

We keep your data as long as your account is open. Disconnecting a health system deletes the records read from it, and deleting something you track deletes its days. Deleting your account deletes all of your data; it then drops out of our hosting provider’s backups as they roll over.

• You.
• Apps you connect. If you connect Reasoning Labs to Claude, you approve that connection on its own screen, can see it in your account, and can disconnect it at any time. It can read your record and ask questions for you. If you allow it, it can also log what you ask it to, like a period or a reading, and you can undo any of it in the app. It cannot change anything that came from your hospitals.
• The people who run Reasoning Labs, only to keep the service working, fix problems, or when the law requires it. We don’t browse your records.

Our physician reviewer checks the answers the service writes. She sees answers and the sources they cite, never your name, your record or your questions.

No one else. We don’t share your data with your doctors, employers, insurers, advertisers, data brokers or researchers.

Each of these receives only what it needs to do its job, under its own terms:

• Anthropic writes answers. It receives your question with identifiers taken out, the published passages the answer must come from, and coded facts such as your age range. Not your record and not your name.
• TypeSafe reads what kind of question you asked. It receives your question with identifiers taken out and, so it can tell which one you meant, the names of the things you track.
• Resend sends your sign-in codes. It receives your email address.
• Telnyx carries text messages, if you text us. Texts are not encrypted: your phone carrier and Telnyx can see them. We send full answers as a link for that reason.
• Supabase and Vercel host our database and our site.
• Your hospital’s portal (Epic or Oracle Health) sends us your record when you sign in there and approve it.

• Sell your data, or give it to anyone for their own use.
• Show you ads, or let anyone advertise to you using your data.
• Use your health information to train an AI model, ours or anyone’s.
• Use your data for anything other than giving you the service.

We use one cookie to keep you signed in, and a short-lived one while you sign in at your hospital. Your browser also remembers, on that device, your sex, age range and pregnancy, and the question and answer you have open in a tab. We use no analytics, tracking or advertising cookies.

• See everything we have read from your records on your Timeline and Records pages.
• Disconnect a health system, which deletes what we read from it.
• Disconnect apps you connected, and unlink your phone.
• Delete your account from your Account page, which deletes all of your data.
• Ask for a copy of what we hold, or anything else about your data, at hello@reasoninglabs.ai.

Depending on where you live, state law may give you more rights over your health data. We honor those requests for everyone, wherever you live.

You must be at least 18 and live in the United States. We don’t knowingly collect information from anyone younger.

If we change how we collect or share your data, we’ll update this page and its date, and for a material change we’ll tell you by email before it applies.

hello@reasoninglabs.ai