HEALTH INSIGHT

Privacy Policy

How Health Insight 365 collects, uses, protects, retains, and deletes personal information

Where the App is available

Health Insight 365 is available in the countries and regions selected for the App in the App Store. We operate the service from the United States and process account and uploaded laboratory information there. Privacy rights and requirements may differ by location. Contact us using Section 13 to ask about your information or exercise a right available where you live.

1. Scope and who we are

This Privacy Policy explains how Health Insight (the “App”), operated by Atilasllc (“Health Insight,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information. It applies when you create or use a Health Insight account, upload a laboratory report, enter health-related context, connect Apple Health, generate or share reports, or contact us.

Health Insight is a lifestyle-improvement tool. It uses laboratory information as one input for educational wellness insights. It is not a healthcare provider, does not provide a medical diagnosis, and is not a substitute for professional medical advice, diagnosis, or treatment.

2. Information we collect

Account and authentication information

Email address, display name, account status, verification status, and account creation/update dates.

A securely hashed password for email/password accounts; we do not store your plain-text password.

If you use Sign in with Apple or Google Sign-In, the provider identifier and information the provider makes available to us, such as your verified email or name, subject to your choices with that provider.

We create encrypted copies and keyed, nonreversible lookup values for account identifiers such as email addresses and Apple or Google provider identifiers. This pseudonymization applies to email/password, Apple, and Google accounts. It reduces direct exposure if a database is accessed without the separately controlled keys, but it does not make account or health records anonymous.

When you explicitly enable sign-in details in Account Activity, we record the server-observed sign-in IP address and/or a broad, device-reported approximate location. Location requires iOS permission, is requested only at sign-in, and is not tracked continuously or in the background. You may decline without losing access and disable future recording in Account Activity or revoke location permission in iPhone Settings. Previously recorded security activity remains subject to our retention practices.

Login and session information, including recent login time, token records, session family identifiers, and security events used to authenticate you and prevent misuse.

Profile and preference information

You may provide a first and last name, age, sex assigned at birth, gender, height, weight, waist measurement, time zone, preferred measurement units, and an optional avatar. The App asks for an optional age rather than a date of birth. Some older profile records may retain a previously supplied date of birth until the profile is next saved. An avatar may be a built-in icon or a photo you choose through the iPhone photo picker. Your selected photo is cropped, compressed, and stored with your account for profile display; it is not used for health analysis. These fields are used only when relevant to your profile, report presentation, or wellness context.

Laboratory and health information

Laboratory reports you upload as PDF, image, or CSV files, including information visible in those files such as patient name, laboratory name, collection date, test names, results, units, reference ranges, and abnormal flags.

Structured marker data, calculations, health scores, trends, findings, educational summaries, lifestyle guidance, generated reports, and source links derived from your uploaded reports.

Optional “Feeling Today” information, including a feeling or symptom description, severity, frequency, notes, and relevant dates.

Recommendation activity or other actions you choose to record in the App.

Apple Health activity information

With your permission, the App reads selected activity information from Apple Health, including step count, Apple Exercise Time, active energy burned, walking and running distance, and workout records. You may separately choose to show recent sleep information or review height and waist measurements from Apple Health. Access is read-only and requested through Apple's HealthKit controls when you use the relevant feature. Activity and sleep are displayed on your device and are not uploaded to our backend, stored in your server account, or sent to the Analysis Engine. Height and waist are not automatically imported: you review and select available measurements before placing them in My Profile, then separately choose Save Profile. Only measurements you choose to save are stored in your account and may be used as profile context for analysis, as with manually entered measurements. The App does not write to Apple Health. You can change HealthKit permissions in Apple's system settings.

Technical and communications information

Request and security information needed to operate and protect the service, such as timestamps, endpoint activity, error information, and rate-limit events. Depending on production hosting configuration, infrastructure logs may also include IP address, device/browser information, and similar network data.

File-security scan results and limited file metadata used to detect malware or unsafe uploads. We do not use rejected files to generate a health analysis.

Analysis Engine usage records, including the processing operation, model, response identifier, input and output token counts, estimated processing cost, timestamp, and internal user or file identifiers. These records do not contain prompts, generated summaries, complete laboratory reports, or laboratory values.

Password-reset requests and short-lived reset-code records. If email delivery is enabled, your email address is provided to the configured email service for delivery.

Information you provide when you contact support, submit in-app feedback, or send us a privacy request. In-app feedback includes a category, subject, message, submission time, and account link. If you separately authorize diagnostics, it may also include the app version and build, app environment, iOS version, device model, and source screen. The feedback form does not automatically attach health data, location, passwords, or account credentials.

Website cookies and similar technologies

The public Atilas LLC and Health Insight information pages currently do not set or read cookies, use local or session browser storage, run advertising or analytics trackers, or use cross-site tracking. Because the public website does not currently use cookies or similar tracking technologies, it does not display a cookie-consent banner.

Our hosting and security infrastructure may still create server logs when a page is requested. As described above, those logs may include the requested page, timestamp, IP address, and device or browser information and are used for security, troubleshooting, and reliable operation. They are not used for targeted advertising.

If we introduce non-essential cookies, analytics, advertising technologies, or embedded third-party services, we will update this notice and provide any required notice, consent, rejection, or preference controls before those technologies are used.

3. How we use information

Create, authenticate, secure, and maintain your account and sessions.

Receive and validate uploaded files, extract laboratory results, organize markers, calculate scores and trends, and create report views and PDFs.

Generate educational health-profile summaries and marker-aligned lifestyle guidance.

Display optional Apple Health activity and sleep context locally on your device, and let you review and optionally save height or waist measurements in My Profile.

Provide password resets, account deletion, report deletion, support, troubleshooting, and service communications.

Detect fraud, abuse, unauthorized access, and technical failures; enforce limits; maintain logs; and improve reliability and security.

Comply with law, respond to lawful requests, protect rights and safety, and establish or defend legal claims.

We do not use your personal information or health information for targeted advertising. We do not sell personal information, health information, or HealthKit information. We do not use HealthKit information for advertising, data brokerage, or eligibility decisions.

4. How the Analysis Engine works

The Health Insight Analysis Engine uses an external processing provider to support two core functions: (1) extracting structured laboratory results from files you upload, and (2) creating educational summaries and lifestyle guidance from supplied laboratory markers, profile context, trends, and optional Feeling Today information. The content sent can contain sensitive health information and identifiers that appear in an uploaded report, including a patient name or laboratory details.

The Analysis Engine is configured not to diagnose disease, prescribe treatment, recommend medication changes, or invent results. Lifestyle guidance is constrained to a curated set of reputable U.S., Canadian, European, and international health sources selected by Health Insight; social-media posts and general web browsing are excluded from that analysis. Analysis Engine output can still be incomplete or wrong and must be reviewed critically.

A laboratory file sent to the external Analysis Engine provider for extraction is temporary. Health Insight requests deletion immediately after processing, whether extraction succeeds or fails, and retries a failed deletion request. The upload also carries a one-hour automatic expiration as a provider-side safeguard. Health Insight records token counts and an estimated cost for each model response so we can monitor operating cost and detect unnecessary or repeated processing; the usage record excludes the prompt, generated text, and laboratory values.

5. When we disclose information

We disclose information only as described below and only to the extent reasonably necessary:

An external Analysis Engine processing provider, to extract and analyze the data described above.

Amazon Web Services, which provides production hosting, database, storage, email, monitoring, and security services.

Apple and Google, when you choose their authentication services. Their handling of information is governed by their own policies.

An email-delivery provider, when needed to deliver a password-reset message or another requested communication.

Your chosen recipient or mail provider when you export or email a Health Insight PDF. Once shared, the recipient’s handling of the report is outside our control.

Professional advisers, regulators, courts, law enforcement, or other parties when required by law or reasonably necessary to protect rights, security, users, or the public.

A successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality protections and applicable notice requirements.

We require service providers to process information for contracted purposes and to protect it appropriately.

For support and forensic review, authorized administrators can view a limited account activity timeline, including agreement versions and acceptance times, sign-in and account-deletion events, Apple Health permission-flow choices, uploads, analyses, verified credit additions, feedback, and administrator account actions. This view excludes report contents, filenames, free-text feedback, and raw audit metadata. Administrator access requires an investigation reason and is itself audited.

6. Retention and deletion

We retain account-linked user data while your account is active. In My Profile, you may request permanent account deletion after a 30-day period or choose immediate deletion. A scheduled request restricts account access at once. The App shows the UTC deletion deadline; before that deadline you may sign in to cancel the request or choose immediate deletion. The scheduled cleanup runs hourly, so completion may occur shortly after the deadline. When email delivery is available, we also send request, cancellation, and completion notices. After permanent deletion, the account cannot be recovered. If an active account has no authenticated activity for three years, Health Insight automatically deletes the account and its associated active-system data. We send inactivity notices after two years and again after two-and-a-half years; each notice states the last-activity date and scheduled deletion date. Signing in or otherwise using an authenticated App function before deletion resets the inactivity period. Limited information may be retained when required by law, necessary to resolve a dispute, or necessary to document or investigate a security incident.

A scheduled request does not erase account-linked information during its 30-day cancellation period; access is restricted instead. Permanent deletion then removes account-linked information from active application systems. Encrypted system backups are retained on a rolling 30-day schedule and are then permanently deleted or overwritten. After permanent deletion, associated information may remain in a protected backup for no more than 30 additional days, is not restored to active use, and is removed as the backup expires. Specific records may be retained longer only when required by law or necessary for an active security investigation, dispute, or legal hold; they are deleted when that purpose ends.

7. How we protect information

We use administrative, technical, and organizational safeguards designed for the sensitivity of health information. Current controls include password hashing, signed short-lived access tokens, hashed refresh-token records, token rotation and revocation, server-side session validation, rate limiting, access checks that restrict user-scoped data, file type/signature and size validation, security headers, account deletion, storage of iOS session credentials in Apple Keychain, and optional on-device App Lock using Apple's Local Authentication framework. Production configuration requires debug mode to be off, a strong signing secret, PostgreSQL, bounded session timeouts, and configured secure email delivery.

The production service uses HTTPS/TLS, encryption at rest, restricted administrative access, managed secrets, encrypted backups, monitoring, vulnerability management, and an incident-response process. No security measure is perfect, and we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us promptly.

Health Insight also pseudonymizes account identity fields by storing encrypted representations and keyed lookup values. Encryption keys are managed separately through AWS Secrets Manager and AWS Key Management Service with restricted application access. During the staged transition, legacy identity fields remain available for compatibility and recovery; therefore, pseudonymization is an additional safeguard rather than anonymization or a substitute for access control, encryption at rest, and other security measures.

8. Your choices and privacy rights

Choices available to all users

Review and update available profile information in My Profile.

Decline or revoke Apple Health permissions in Apple’s system settings.

Delete individual uploaded reports through Upload/Manage Bloodwork. Deletion is permanent and changes aggregate scores and trends.

Schedule account deletion for 30 days after your request, cancel before the deadline, or delete your account immediately through My Profile.

Request access, correction, deletion, or a portable copy by using the privacy contact published with the App.

California

The California Consumer Privacy Act applies only to businesses that meet statutory thresholds. Whether or not Health Insight currently meets those thresholds, California residents may use the privacy contact below to request access to, correction of, deletion of, or a portable copy of account information. If the CCPA applies, California residents also have the rights to know the categories, sources, purposes, and recipients of personal information; to opt out of sale or sharing; to limit uses of sensitive personal information beyond permitted purposes; and to receive equal service without unlawful discrimination for exercising a privacy right.

During the preceding 12 months, Health Insight may have collected the categories described in Section 2 directly from users, their devices, Apple or Google when selected for authentication, and service providers supporting the requested transaction. We use and disclose those categories for the purposes described in Sections 3 through 5. Health Insight does not sell personal information and does not share it for cross-context behavioral advertising. Sensitive information, including health information, account credentials, precise data contained in uploaded reports, and authentication information, is used only to provide, secure, maintain, and comply with law for the service. Because we do not sell or share personal information for cross-context behavioral advertising or use sensitive information outside those purposes, the public website does not currently require a Do Not Sell or Share or Limit My Sensitive Personal Information link.

Submit a request by email or postal mail using Section 13. We will acknowledge and respond within the period required by applicable law. When the CCPA applies, we aim to respond to a verifiable request within 45 calendar days and will explain any permitted extension. We may request information reasonably necessary to verify identity or an authorized agent's authority, use verification information only for that purpose, and deny or limit a request when an exception applies. If we deny a request, our response will explain the reason and any available way to challenge the decision or contact the California Privacy Protection Agency.

European privacy rights

Health Insight 365 is established in the United States. Where European data-protection law applies to our processing, we will provide the notices, rights, and safeguards required by that law. Before making the App available in additional countries or regions, we review applicable local requirements, including any required transfer safeguard, local representative, or data protection officer.

If European data-protection law nevertheless applies to particular processing, Atilasllc is the controller. Depending on the activity, the legal basis may be performance of a user agreement, explicit consent for health information where required, compliance with law, or legitimate interests in securing and operating the service that do not override individual rights. Applicable rights may include access, correction, erasure, restriction, portability, objection, withdrawal of consent, and a complaint to the relevant supervisory authority. Information is processed in the United States, and legally required safeguards will be used for a restricted international transfer. Contact us through Section 13 to exercise a right.

9. Processing locations

Health Insight 365 is operated from the United States. Production application data is hosted in Amazon Web Services in the United States. Information may also be processed where another service provider operates. For people in App Store countries or regions outside the United States, information submitted to the service is transferred to and processed in the United States. We will provide applicable notices, individual rights, and transfer safeguards required by law. Before making the App available in additional regions, we will review local requirements.

10. Children’s privacy

Health Insight is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. Where local law requires a higher age for valid consent to processing health information or using an online service, a parent or guardian must provide legally valid authorization. If you believe a child provided information without appropriate authorization, contact us so we can investigate and delete it as required.

11. Breach notification

We maintain an incident-response process and will provide notices to affected individuals, regulators, and others when required by applicable law. Depending on the service and facts, this may include the U.S. Federal Trade Commission’s Health Breach Notification Rule and applicable state breach-notification laws.

12. Changes to this policy

We may update this policy as the App, service providers, or legal requirements change. We will post the updated policy with a revised “Last updated” date and provide additional notice or request renewed consent when required for a material change.

13. Contact us

For privacy questions or to exercise a privacy right, contact Atilasllc at privacy.healthinsight@gmail.com or by mail at 131 Continental Drive, Suite 305, Newark, DE 19713, USA. The same contact methods should appear in the App, App Store listing, and public website. Privacy requests should identify the account email and the right being requested; do not email a laboratory report or other sensitive health information unless specifically instructed through a secure channel.