Privacy Policy
Your privacy matters. Here's how we protect your health information.
Last updated: January 1, 2025
Introduction
WhatsAilingMe™ ("we," "our," or "us") is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our health analysis platform and services.
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
HIPAA Compliance
We are HIPAA compliant.
We adhere to the Health Insurance Portability and Accountability Act (HIPAA) requirements for protecting your Protected Health Information (PHI).
As a health analysis platform, we handle Protected Health Information (PHI) and are committed to maintaining the privacy and security standards required by HIPAA. This includes implementing administrative, physical, and technical safeguards to protect your health information.
Information We Collect
Personal Information
When you create an account and use our services, we collect:
- Name and contact information (email address, phone number)
- Account credentials
- Billing and payment information
- Date of birth and demographic information
Health Information
To provide our health analysis services, we collect:
- Medical history and health records you upload
- Symptoms, conditions, and health concerns you report
- Medication history, including start and stop dates
- Supplement and vitamin usage
- Laboratory test results (including those from Quest Diagnostics)
- Lifestyle factors, environmental exposures, and life events
- Imaging reports, doctor's notes, and specialist records
Technical Information
We automatically collect certain information when you use our platform:
- Device information (type, operating system, browser)
- IP address and general location
- Usage data (pages visited, features used, time spent)
- Cookies and similar tracking technologies
How We Use Your Information
We use your information to:
- Provide our health analysis services and generate your Possibility Report
- Create your Physician Intake Document
- Analyze patterns and correlations in your health data
- Communicate with you about your account and services
- Process payments and manage your subscription
- Improve our platform and develop new features
- Comply with legal obligations
- Respond to your inquiries and provide customer support
How We Protect Your Information
We implement comprehensive security measures to protect your data:
All data is encrypted in transit (TLS/SSL) and at rest (AES-256).
Strict role-based access controls limit who can view your data.
Our servers are hosted in SOC 2 compliant data centers.
We maintain detailed logs of all access to your health information.
Information Sharing and Disclosure
We do not sell your personal or health information. We may share your information only in the following circumstances:
- With your consent: When you explicitly authorize us to share your information
- Service providers: With trusted third parties who assist us in operating our platform (e.g., Quest Diagnostics for laboratory services), bound by confidentiality agreements
- Legal requirements: When required by law, court order, or governmental regulation
- Safety: When necessary to protect the safety of you or others
- Business transfers: In connection with a merger, acquisition, or sale of assets, with continued protection of your information
Your Rights
You have the following rights regarding your information:
- Access: Request a copy of the personal and health information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your information, subject to legal retention requirements
- Portability: Receive your data in a structured, commonly used format
- Restriction: Request that we limit how we use your information
- Objection: Object to certain types of processing
To exercise any of these rights, please contact us at privacy@whatsailingme.com.
Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:
- Active account data is retained while your account remains active
- Health records and reports are retained for a minimum of 7 years as required by healthcare regulations
- After account deletion, certain data may be retained in anonymized form for research and improvement purposes
- Billing records are retained as required by tax and financial regulations
Cookies and Tracking
We use cookies and similar technologies to:
- Keep you signed in to your account
- Remember your preferences
- Understand how you use our platform
- Improve our services
You can control cookies through your browser settings, though disabling certain cookies may affect functionality.
Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@whatsailingme.com.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
WhatsAilingMe™ Privacy Team
Email: privacy@whatsailingme.com