Privacy Policy
Last Updated: January 2025
At Qronic AI, we understand that your health data is among the most sensitive information you have. We are committed to protecting your privacy and giving you full control over your data. This Privacy Policy explains how we collect, use, store, and protect your health information.
1. Your Data Stays Yours
Your health data belongs to you. We never sell your data to third parties. We never share your data without your explicit permission. You have complete control over what information Qronic AI can access and what it cannot.
- You can view all data that your AI Doctor has access to at any time
- You can revoke access to specific data sources or devices at any time
- You can export your data in standard formats whenever you need it
- You can delete your account and all associated data at any time
2. What Data We Collect
To provide you with personalized AI Doctor care, we collect the following types of data:
- Health Data from Wearables: Sleep patterns, activity levels, heart rate, heart rate variability (HRV), continuous glucose monitoring (CGM) data, blood pressure readings, and other biometric data from devices you connect or that we provide
- Medical Information: Lab results, medication records, medical history, and information from your healthcare providers (with your consent)
- Interaction Data: Your conversations with your AI Doctor, questions you ask, and feedback you provide
- Account Information: Name, email address, phone number, and account preferences
- Usage Data: How you interact with the Qronic AI platform, features you use, and technical information about your device
3. How We Use Your Data
We use your data exclusively to provide and improve your AI Doctor service:
- Personalized Care: Your AI Doctor analyzes your health patterns to provide personalized recommendations, insights, and early warnings
- Clinical Reasoning: We use your data to help your AI Doctor understand your unique health patterns and provide clinical-grade reasoning
- Safety Monitoring: We continuously monitor your data to identify potential health risks and escalate to human doctors when necessary
- Service Improvement: We use anonymized, aggregated data to improve our AI models and services (your personal identity is never included)
- Communication: We use your contact information to send you important updates, alerts, and respond to your inquiries
4. Data Security and Encryption
We employ industry-leading security measures to protect your data:
- Encryption: All data is encrypted both in transit (using TLS/SSL) and at rest (using AES-256 encryption)
- Secure Storage: Your data is stored in secure, HIPAA-compliant data centers with multiple layers of physical and digital security
- Access Controls: Only authorized personnel with a legitimate need can access your data, and all access is logged and monitored
- Regular Audits: We conduct regular security audits and penetration testing to identify and fix vulnerabilities
- Data Backups: Your data is regularly backed up to ensure availability and recovery in case of technical issues
5. HIPAA Compliance
Qronic AI is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) and all relevant US healthcare privacy regulations:
- We have signed Business Associate Agreements (BAAs) with all healthcare providers and partners who handle your data
- We follow HIPAA's Privacy Rule, Security Rule, and Breach Notification Rule
- We maintain detailed audit logs of all data access and modifications
- We provide you with the right to access, amend, and request deletion of your health information as required by HIPAA
6. Data Sharing and Third Parties
We are committed to keeping your data private:
- No Data Sales: We never sell your health data to advertisers, data brokers, or any third parties
- Healthcare Providers: We only share data with your healthcare providers when you explicitly authorize it, such as during telehealth visits or when your AI Doctor escalates a concern
- Service Providers: We work with trusted service providers (like cloud hosting) who are bound by strict confidentiality agreements and HIPAA compliance requirements
- Legal Requirements: We may disclose data if required by law, court order, or to protect the safety of you or others
- Anonymized Research: We may use anonymized, aggregated data for medical research, but your personal identity is never included
7. Your Rights and Choices
You have complete control over your data:
- Access: You can view all your data at any time through your account dashboard
- Correction: You can correct inaccurate data or add additional context
- Deletion: You can delete specific data points or your entire account at any time
- Export: You can export your data in standard formats (JSON, CSV) for your records or to transfer to another service
- Opt-Out: You can opt out of non-essential communications and data uses
- Revoke Access: You can disconnect devices or revoke access to specific data sources at any time
8. Data Retention
We retain your data for as long as necessary to provide you with services:
- Active Accounts: We retain your data while your account is active and you are using our services
- Account Deletion: When you delete your account, we permanently delete your data within 30 days, except where we are required to retain it by law
- Medical Records: Some medical information may be retained longer if required by healthcare regulations or if you have ongoing care relationships
- Anonymized Data: Anonymized, aggregated data used for research and service improvement may be retained indefinitely, but it cannot be linked back to you
9. Children's Privacy
Qronic AI is designed for adults managing chronic conditions. We do not knowingly collect data from children under 18 years of age. If you believe we have collected data from a child, please contact us immediately so we can delete it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending you an email notification if the changes significantly affect your rights
- Displaying a notice in your account dashboard
Your continued use of Qronic AI after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding your privacy or this Privacy Policy, please contact us:
- Email: privacy@chronicgpt.com
- Phone: (650) 380-7733
- Mail: ChronicGPT Inc., Dallas, TX
We are committed to responding to your privacy inquiries within 30 days.
12. Transparency and Trust
At Qronic AI, we believe transparency builds trust. That's why:
- You can see exactly what data your AI Doctor has access to
- You can understand why your AI Doctor makes specific recommendations
- You can see who has accessed your data and when
- You have full control over your data at all times
We are committed to being transparent about our data practices and giving you the tools you need to make informed decisions about your health data.