AIvora ("we", "us") is a personal health companion app that lets you view your wearable metrics, clinical records, and upcoming appointments in one place, with optional AI-generated summaries. This policy explains what data the app accesses, how it is used, and your choices.
We request read-only access and only the data categories needed for the features you use. We never write to your medical record.
The app does not maintain a server-side database of your health records. AI chat requests are processed transiently to generate a reply and are not stored by us for profiling. Provider connection tokens remain on your device until you disconnect or uninstall. You can revoke a health-system connection at any time from that provider's patient portal (e.g. MyChart) and remove Apple Health access in iOS Settings → Privacy & Security → Health.
Deletion rights: because your data lives on your device, uninstalling the app removes the locally stored profile and connection tokens. You may also revoke access and request deletion of any account information by contacting privacy@myhealthsyncai.com; we will respond within a reasonable time.
Data is not retained after deletion. We keep no server-side copy, so once you uninstall the app (and disconnect any connections), no data about you is retained by us.
AIvora is not a healthcare provider, covered entity, or business associate under HIPAA. When you direct the app to access your health information, that information is provided to you, the individual, and is processed on your behalf to power the app's features. Use of the app does not create a provider-patient relationship.
Connections use OAuth 2.0 with PKCE; tokens are kept in the device secure store; network traffic uses TLS. No security measure is perfect, and you use the app at your own discretion.
The app does not currently maintain an access audit log, and it does not send a notification each time your data is accessed. Because your data stays on your device and is only used to provide the app's features (with AI chat processed transiently), there is no central access record to surface. We may add access logging and notifications in a future version.
AIvora is intended for users 18 and older. It is not directed to children, and we do not knowingly collect data from anyone under 18.
We may update this policy; material changes will be reflected by the "Last updated" date above.
Privacy requests: privacy@myhealthsyncai.com
General & support: support@myhealthsyncai.com