Privacy

Your family's health records belong to you and no one else. Well Advised stores them so that you can see them, never to sell them, share them, or show you ads. And you can permanently delete everything, from inside the app, whenever you choose.

Only what you and your family put in. That means the people you track and their records: symptoms, vitals, medications, labs, appointments, family history, daily logs, notes, and any medical documents you upload.

About you, we store one thing: the email address you sign in with. Your password is scrambled before it is stored, so no one, including us, can read it.

Your records live in our database at Supabase, on servers in the United States. They are encrypted on the way there and while they are stored.

A privacy wall inside the database means each account can only ever reach its own records. Your family's records are never mixed with anyone else's, and nobody browses them.

When you ask Florence a question, your question and the relevant parts of that person's record are sent to Anthropic's Claude, the AI service that writes her replies. When you upload a medical document, Claude reads it to write the plain-English summary you review. When you use the microphone button, your recording is turned into text by OpenAI's Whisper, and the audio is not kept.

These services work for you and answer only you. They do not use your words or records to train their AI. And chats with Florence are not saved anywhere, not even by us: when you close them, they are gone.

One small exception, so you have the whole picture: we count how many questions each account asks Florence, to keep her running costs steady and the app free. That count is a date and time only. It never includes your question, her answer, or anything from your records.

Well Advised emails you only about your own account: confirming your address when you sign up, and resetting your password when you ask. Those messages are sent through Resend, our email service, from florence@well-advised.app.

Refill reminders, if you turn them on, arrive as notifications on your phone, not as email. We will never send you marketing email. We will write to you once when Well Advised arrives in the app stores, because that version unlocks features the website cannot offer, and you can opt out of even that in a single click.

You can set Well Advised to lock itself every time you put it down, and open again with a PIN, Face ID, or your password. The PIN and Face ID for that lock are stored only on your own device. They never touch our servers.

There is no advertising in Well Advised. We do not sell or rent your information to anyone, ever. Nothing here follows you around the internet, builds a profile of you, or measures how you use the app. The one outside service that runs in your browser is the error reporter described below, and it is told nothing about you.

Software goes wrong sometimes. When it does, Well Advised sends a report to Sentry, an error-tracking service, so we find out and can fix it rather than waiting for you to notice and tell us.

Those reports are stripped before they leave. They say which screen failed and what went wrong technically. They do not include your name, your email address, anything from your records, anything you typed, or which family member you were looking at when it happened. Your device does not contact Sentry directly either, so Sentry never learns your internet address.

Nothing records your screen or watches what you tap. That is a feature these tools offer, and we have deliberately left it switched off.

You can erase your account and everything in it from inside the app: open Settings and choose Delete my account. It asks for your password and one typed confirmation, and then it is done: every person, record, document, and reminder is permanently erased, along with the account itself.

There is no undo, no waiting period, and nothing to email us about. Once deleted, we cannot bring your records back for you. Our database keeps rolling security backups for 7 days, purely so we could recover from a disaster, and your records age out of those within a week of deletion. Nobody reads them in the meantime.

If anything here is unclear, or you want to know more about how your records are handled, write to florence@well-advised.app.