Privacy policy

Who we are

KaraWell AI (“KaraWell”, “we”) provides a personal health companion app at app.karawell.ai and in mobile app stores. Contact: admin@karawell.ai.

What we collect, and why

Account information — your email address and name, to create and secure your account (sign-in via email, Apple, or Google).

Health information you provide — documents you upload, medications, conditions, symptoms, tasks and visit recordings you enter, and health records you import from your healthcare providers through our connectivity partner, Fasten Health. We collect this only at your direction, and it is used solely to power the features you use: organizing records, lab trends, medication management, visit summaries, and Kara, our AI assistant.

Family profile information — if you create profiles for family members, the same applies to their data. You are responsible for having the authority (for example, as a parent or caregiver with consent) to add another person’s information.

Payment information — subscriptions are processed by Stripe (web) or Apple/Google (mobile). We never see or store card numbers; we store only your subscription status.

Usage and diagnostics — de-identified interaction events (which screens are used) and crash reports, to keep the app working. Our analytics are configured to exclude the contents of your health records.

How the AI works with your data

Kara’s answers are generated by AI models (currently provided by OpenAI) using the health context you have stored in KaraWell. Your data is sent to the model provider only to answer your requests, is not used by us to train models, and every AI response is labeled as AI-generated. Kara is informational — not medical advice.

What is required vs. optional

Required to function: account information and the health data you choose to store. Optional: record imports, family profiles, voice features, push notifications, and analytics — each activates only when you use or enable it, and notification preferences can be changed any time in Settings.

What we never do

We do not sell your data. We do not share it for advertising. We do not use it for marketing to third parties. We do not attempt to re-identify de-identified data. There is no targeted advertising and no automated decision-making that produces legal or similarly significant effects about you.

Who we share data with

Only service providers necessary to run KaraWell, bound by contracts limiting their use of your data to providing their service to us: Supabase (secure database and storage), Fasten Health (health-record connectivity), OpenAI (AI responses), Stripe / Apple / Google (payments), RevenueCat (subscription management), Vercel (web hosting), and error/analytics tooling (Sentry, PostHog) configured to avoid health-record contents. We may also disclose information if required by law.

Security

Your data is encrypted in transit (TLS) and at rest, protected by row-level access controls so each account can only reach its own records, and access to protected health information is logged in an audit trail. No system is perfectly secure; if a breach affects your data we will notify you as required by applicable breach-notification laws.

Retention and deletion

We keep your data for as long as your account exists. You can permanently delete your account and all of its data at any time in the app: Settings → Account & Security → Delete Account. Deletion removes your uploaded documents, imported records, chats, and profile, and cannot be undone. Security audit logs are retained (without a resolvable identity) as required for compliance. Dormant accounts: if your account is inactive for 24 months we may contact you and subsequently delete it.

Your choices and rights

You can export your data (Settings → Export), correct anything you entered, disconnect a health system at any time, withdraw optional consents, and delete your account in-app. Depending on where you live, you may have additional legal rights (access, portability, correction, deletion) — contact us and we will honor them.

Children

KaraWell accounts are for adults 18+. Minors’ health information may appear only inside a family profile managed by their parent or guardian; minors cannot create accounts or connect records themselves.

Changes to this policy

If we make material changes we will notify you in the app and by email before they take effect, and where required ask you to re-confirm your consent.

KaraWell AI · Terms of Service · Medical Disclaimer