Privacy Policy

• Local first. You can use the web app without an account, and records you enter remain in that browser unless you sign in and use cloud features.
• Your health information is not for advertising. We do not sell personal information or use health information for targeted advertising.
• You choose when to use AI. Recent records are sent for AI processing only when you request an AI-powered feature.
• Billing is handled by established providers. Stripe, Apple, and RevenueCat handle purchases and subscription status; we do not receive your full payment card number.

Account information. If you create an account, we handle information such as your name, email address, authentication provider, and a unique account identifier. Authentication is provided through Firebase Authentication and, when selected, Sign in with Apple.

Wellness records. HealthPilot may contain information you choose to enter, including symptoms, mood, energy, sleep, pain, stress, meals, habits, medications, goals, tags, pregnancy tracking, condition-pack entries, notes, and appointment-preparation content.

Subscription information. We receive purchase and entitlement information such as your plan, renewal status, product identifier, transaction identifier, and subscription-management link from Stripe, Apple, and RevenueCat.

AI request information. When you request AI-generated insights, HealthPilot sends the recent records needed for that request to our server and AI provider. AI output can be inaccurate and is not a diagnosis or treatment recommendation.

Technical and support information. Our hosting and security providers may process standard technical information such as IP address, browser type, device type, request logs, and timestamps. If you contact us, we keep the message and contact details needed to respond.

On your device. The web app stores local records in your browser. You can remove those records with the data controls in Settings or through your browser's storage controls.

In your cloud account. If you sign in and use cloud continuity, records may be stored in Google Firebase so they can be available across supported devices. Cloud records are associated with your authenticated account.

With service providers. Subscription, hosting, authentication, and AI providers process only the information needed to provide their part of the Service, subject to their own terms and privacy practices.

• Provide local tracking, account access, cloud continuity, and cross-device features.
• Generate charts, summaries, reports, and AI-powered insights you request.
• Process purchases, verify premium access, and support subscription management.
• Operate, secure, troubleshoot, and improve the reliability of the Service.
• Respond to support requests and comply with legal obligations.

We use providers that help operate the Service, including:

• Google Firebase for authentication and optional cloud data storage.
• RevenueCat for subscription entitlement and purchase coordination.
• Stripe and Apple for payment processing and subscription management.
• Vercel for website hosting, delivery, and operational logs.
• OpenAI for AI-powered features you request. Requests are configured not to store generated responses in our API application history, although provider security and abuse-monitoring retention may still apply.

We may also disclose information when required by law, to protect users or the Service, or in connection with a business reorganization. We do not sell personal information or share health information for cross-context behavioral advertising.

Local records remain in your browser until you clear them. Cloud records remain until they are deleted or your account is closed, subject to backups and legal requirements. Subscription and transaction records may be kept as needed for accounting, fraud prevention, tax, dispute resolution, and legal compliance. Support messages are kept as long as reasonably needed to resolve the request.

• Use the core web app locally without creating an account.
• Choose whether to sign in, use cloud continuity, enable notifications, or request AI features.
• Clear records stored in the current browser from HealthPilot Settings.
• Manage or cancel a subscription through the applicable billing provider.
• Request access to, correction of, or deletion of account and cloud information by emailing flightcrew@pilotsuite.design.

Depending on where you live, you may have additional rights, including rights to know, correct, delete, or limit certain uses of personal information. We will not discriminate against you for making a valid privacy request.

We use reasonable technical and organizational safeguards appropriate to the sensitivity of the information we handle. No internet transmission or storage system can be guaranteed completely secure. Keep your account credentials private and contact us if you believe your account or information may have been compromised.

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without legally valid authorization. If you believe a child has provided information improperly, contact us so we can review and delete it where appropriate.

We may update this policy as the Service or applicable requirements change. We will update the effective date above and provide additional notice when appropriate. For privacy questions or requests, email flightcrew@pilotsuite.design.