Privacy Policy

Last updated: 18 August 2026

This policy is issued by AIHealth Labs for the AIHealth Chat web application and WhatsApp channel at https://aihealthchat.qzz.io.

1. Information we collect

Account data: email and profile fields you provide via Supabase Auth (including Google sign-in if you choose it).
Conversations: messages and optional photos you send to the assistant, stored in Supabase under Row Level Security (RLS).
Health tracker: vitals and symptoms you log manually, or that are extracted from chat/WhatsApp only after you opt in (Settings → Health data).
Visit summaries: SOAP notes generated from chats you select, plus optional share-link metadata (token, expiry, view count).
WhatsApp: phone number and link-code metadata when you connect WhatsApp to your web account.

2. How we use it

We use this data to run the assistant, optional tracker logging, SOAP visit summaries, and account security (rate limits, webhook signatures). We do not sell, rent, or trade your personal or health data.

3. AI and infrastructure subprocessors

Prompts and, when you attach a photo, image data are sent to providers so we can generate a reply or a report. Current subprocessors:

Groq — primary web and WhatsApp generation, plus structured JSON (triage, tracker extract, reports).
OpenRouter — fallback generation when Groq is unavailable or rate-limited.
Mistral — vision when you attach a medical photo; optional objective finding on report generation.
Supabase — PostgreSQL, Auth, and Storage (including a private chat-images bucket).
Meta — WhatsApp Cloud API.
Vercel — hosting and serverless functions.

Gemini is not in the live provider chain. Paid API terms for Groq, OpenRouter, and Mistral provide that API content is not used to train their public models. We do not sell your health content.

4. Sharing visit summaries

If you create a share link, the secret is a cryptographically random token in the URL fragment (/report#token), not the path. Recipients do not need an account. Public share pages do not embed original chat photos; they may include text findings. You can expire or revoke links in the app.

5. Security

Data in transit uses TLS. Access to chats, reports, and metrics is enforced with RLS: you only read your own rows. SOAP reports are minted by our API after authentication and quota checks; browsers cannot insert fabricated reports. Chat images are private; signed URLs are short-lived and scoped to your session.

6. WhatsApp

Inbound webhooks are verified with HMAC-SHA256. Metrics are extracted from WhatsApp only for a linked number and only if you have enabled “Log health data mentioned in chat.” Unlinked WhatsApp data is purged after 30 days of inactivity.

7. Your rights and deletion

You can unlink WhatsApp, delete tracker rows and reports, and permanently delete your account from Settings → Delete my account (type DELETE). That removes profile, chats, reports, tracker entries, uploaded photos, and any WhatsApp link.

8. Contact

Privacy questions: info@aihealthchat.qzz.io