Privacy Policy

WiseHealth OS is designed around a governed, privacy-preserving architecture. This policy will cover, at minimum, the sections below — with particular depth required around sensitive data categories before onboarding any real users.

What we collect

• Health data uploaded by you or your institutional provider — including blood, urine and DNA/genetic results
• Mental-wellness check-in data and related behavioral inputs
• Nutrition and workout data
• Account and contact information
• Usage data necessary to operate and secure the platform

Special handling for sensitive categories

Genetic data, mental-wellness data and other especially sensitive health information require handling beyond general health-data practices. This section will specify, following legal review:

• Retention and deletion timelines specific to genetic data
• Consent mechanisms for genetic and mental-wellness data collection, separate from general platform consent
• Applicable frameworks, which may include HIPAA, GINA, and relevant state and international genetic-privacy and mental-health-data statutes depending on deployment jurisdiction
• Restrictions on any secondary use of genetic or mental-wellness data

How identity and AI processing are separated

Identifiable health records are intended to be controlled by WiseHealth or the institutional customer, not by third-party AI model providers. Only the minimum necessary structured, pseudonymized context is intended to be shared with an external model for explanation or prioritization support.

What we do not do

• We do not sell health data
• We do not position member data as an advertising product
• We do not use identifiable health data to train third-party foundation models

Your rights and choices

Details on access, correction, deletion and data portability rights — including any rights specific to genetic data — will be finalized here prior to general availability, consistent with applicable law in each deployment jurisdiction.

Institutional vs. individual data relationships

Where WiseHealth OS is deployed by an institutional partner (a lab, clinic, insurer, or health system), the partner’s own privacy notice and business-associate or data-processing agreement will govern in addition to this policy. This section will clarify that relationship in full once partner agreements are finalized.