Legal
Effective July 27, 2026
Three kinds of information, kept separate on purpose. Account data: your email address, and the profile you fill in during setup. Health data: the readings you connect or paste — wearable metrics, lab results, conditions and medications from a health record, and anything you tell Aequa in chat or when answering a question about a reading. Site analytics: coarse, anonymous usage events — which sections you view, how far you scroll, which buttons you click, and where you arrived from.
Your health data is used to produce your own views: your Insights, your trends and flags, the advisor's answers, and the doctor handoff you can print. That is the whole list. Your email is used to run your account — sign-in links, your membership receipt, a renewal reminder before an annual charge, and occasional product notices. Analytics tell us which parts of the site and product are working.
We don't sell your data. We don't share it with advertisers, ad networks, or data brokers, and we don't use it to grade, rate, or score you for anyone else. Nothing goes to a healthcare provider or any other third party without your explicit, one-time approval for that specific share — and you see exactly what is being sent before it goes anywhere.
Our analytics are built so this holds by construction, not by promise: the events we may send to our analytics provider are a fixed, audited allowlist of event names and property keys, and no health value, code, or identifier is on it. A reading cannot ride along even by mistake.
Health data is stored in our encrypted application database and nowhere else. The access tokens for the devices and health systems you connect are encrypted at rest with a key we hold separately. To generate your Insights and answer your questions we send a compact summary of your own readings to our AI provider (Anthropic) for processing; it is used to produce your output and is not used to train models.
Payments are processed by Stripe. Your card number never reaches Aequa's servers — it goes directly to Stripe, which is the record-keeper for your payment method and receipts. We store only what we need to know whether your membership is active: your subscription status, billing interval, renewal date, and a Stripe customer reference. Stripe never receives your health data, and your health data is never used for billing, pricing, or eligibility.
Every figure, chart, and sample report shown on the public pages of aequahealth.dev — including the "see it work" demo — is synthetic data from a demonstration patient who does not exist. No real person's health information appears anywhere on the marketing site or in the demo.
We keep your data for as long as your account exists. You can delete your account at any time from Settings: doing so revokes the connections you granted and erases your health data, profile, chat history, and connection records from our database. Payment records held by Stripe are retained as required by financial and tax law; they contain no health data. If you'd rather we handled it, email hello@aequahealth.dev.
Reach us any time at hello@aequahealth.dev.