Privacy Policy

Information We Collect

We collect information that you provide directly to us, information generated by your use of the Services, and limited technical information about your device and connection.

• Account information: Your name, email address, and password when you create an account. Passwords are stored as hashed values and are never readable by us in plain text.
• Health and wellness information you provide: Responses to onboarding and assessment questions, self-reported lifestyle habits, goals, tracked metrics, body measurements, and documents you choose to upload such as lab reports or health checkup summaries.
• Usage data: Information about how you interact with the Services, including the pages you visit, features you use, timestamps, and referral sources. We collect this through cookies and similar technologies described in our Cookie Policy.
• Technical data: Your IP address, browser type, operating system, and device identifiers. This information is used for security, fraud prevention, and maintaining service availability.

How We Use Your Information

We use the information we collect to provide, maintain, and improve the Services, and to communicate with you. Specifically, we use your information to:

• Create and manage your account and authenticate your identity.
• Generate your Health Map, Wellness Score, roadmap, and AI-assisted summaries and insights based on the information you provide.
• Operate features such as goals, habits, progress tracking, metrics, and document storage.
• Send service-related communications, including account verification, security alerts, and responses to your support requests.
• Analyze usage patterns to understand how the Services are used and to improve their performance, reliability, and usability.
• Detect, prevent, and respond to fraud, security incidents, and violations of our Terms of Service.
• Comply with our legal obligations and protect our rights and the rights of others.

Data Storage and Security

Your data is stored in a hosted PostgreSQL database provided by Supabase. Every database table is protected by Row-Level Security (RLS) policies that ensure users can only read and write their own data. Administrative and service-level credentials are kept on the server and never delivered to your browser. Uploaded documents are stored in private storage buckets and accessed only through time-limited signed URLs tied to your authenticated session.

While we apply security measures designed to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we work to protect your data using the safeguards described above and in our security overview.

Data Sharing

We do not sell your personal information or health information to third parties. We share information only in the limited circumstances described below.

• Service providers: We use third-party providers to operate the Services, including database hosting (Supabase), AI model providers for summaries and insights, and email delivery. These providers process data on our behalf under contractual obligations and only to provide the services we request.
• AI providers: When you use AI-assisted features, relevant portions of your information may be sent to our AI model providers to generate summaries, insights, and navigator responses. See our AI Disclosure for details.
• Legal compliance: We may disclose information when required by law, court order, or legal process, or when we believe disclosure is necessary to protect our rights, comply with applicable laws, or respond to law enforcement requests.
• Business transfers: If BetterHealthMap is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We would notify you before your information is transferred under materially different terms.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. If you delete your account, we remove your personal information and health information from our active systems within a reasonable period. We may retain certain information in backup or log systems for a limited time for security, fraud prevention, and legal compliance purposes, after which it is deleted or de-identified.

Your Rights and Choices

You have control over your information and your use of the Services. Depending on where you live, you may have additional rights under applicable data protection laws.

• Access and export: You can view your data within the Services and export a copy of your assessment results, Health Map, goals, habits, and tracked metrics from your privacy settings at any time.
• Update and correct: You can update your profile information and edit the health and wellness information you have provided at any time within the Services.
• Delete your data: You can permanently delete your account and all associated data at any time. This action is irreversible.
• Withdraw consent: Where we rely on your consent to process information, you can withdraw that consent at any time by adjusting your settings or contacting us.
• Opt out of communications: You can unsubscribe from marketing emails using the link in each email or by adjusting your notification preferences.

To exercise any of these rights, log in to your account settings or contact us at privacy@betterhealthmap.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services. This includes essential cookies required for authentication and security, as well as analytics and preference cookies that help us understand usage and remember your settings. You can manage or disable non-essential cookies through your browser settings, though some features of the Services may not function properly without them. For more detail, see our Cookie Policy.

Children's Privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at privacy@betterhealthmap.com and we will take steps to delete that information.

International Data Transfers

Your information may be processed and stored in the United States and other countries where our service providers operate. By using the Services, you acknowledge that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your own. We take steps to ensure appropriate safeguards are in place for such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will notify you through the Services or by email before the changes take effect. We encourage you to review this policy periodically. Your continued use of the Services after changes take effect constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• By email: privacy@betterhealthmap.com
• By mail: BetterHealthMap, 880 Wellness Path, Suite 420, Denver, CO 80202, United States