What families care about most. Clear answers about how we collect, use, and protect your health information.
Health profile information
Diagnosis details, symptoms, medications, and appointments — so we can personalize your experience and provide relevant insights.
Documents you upload
Medical records, test results, and care plans — stored securely and used only to help you search and understand your health information.
Timeline entries and journal notes
Your daily logs and observations — to help you track patterns and share progress with your care team.
Messages with your AI companion
Chat history — to provide context for ongoing conversations and improve your experience over time.
Account and contact information
Email address and basic account details — to authenticate you, send important updates, and enable account recovery.
We never sell your data. Your health information is not for sale. Ever.
We never share your data for advertising. No targeted ads, no marketing partners, no data brokers.
We never use your data to train AI models. Azure OpenAI API terms prohibit this, and we enforce it contractually.
We never share individual health records for research. Only aggregated, de-identified datasets — and only with your explicit opt-in consent.
You have full control over your health information. Here's what you can do:
Download all your data in a portable format at any time from your account settings.
Update or correct any information in your profile, documents, or timeline at any time.
Delete your account and all associated data permanently. We'll confirm deletion within 30 days.
You and only you
By default, your health data is private to your account. No one else can access it without your permission.
Service providers (when necessary)
Infrastructure partners like Supabase (database) and Azure (AI) process data on our behalf under strict data protection agreements. See our subprocessors list.
Research partners (opt-in only)
If you choose to contribute to research, only aggregated and de-identified data is shared. Never individual records. See Research Ethics.
Active accounts
We retain your data for as long as your account is active and you continue using RareJourney.
After account deletion
Personal data is permanently deleted within 30 days. Some anonymized analytics may be retained for service improvement.
Legal requirements
In rare cases, we may retain certain data longer to comply with legal obligations (e.g., financial records, dispute resolution).
This page provides a plain-language summary. For complete legal terms and detailed privacy practices, read our full Privacy Policy.