Privacy Policy

Alfi handles health information. This policy explains what we collect, where it goes, who processes it on our behalf, and what you can do about it. We have tried to write it so you can actually read it.

1. About this Privacy Policy

This Privacy Policy describes how Axiom Health, Inc., a Delaware corporation doing business as Alfi (“Alfi,” “we,” “us,” or “our”), collects, uses, and discloses information when you visit hialfi.com, use the Alfi application, or otherwise interact with our products and services (the “Service”). Capitalised terms not defined here have the meaning given in our Terms of Service.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date and, where required by law, notify you or obtain your consent.

2. Age limits

The Service is intended for adults at least 18 years old (or the age of majority in your state of residence, if higher). We do not knowingly collect information from anyone under 18. If you believe someone under 18 has provided us with information, contact us using the details below and we will take reasonable steps to delete it.

3. HIPAA, and why Alfi is not a covered entity

Alfi is not a HIPAA covered entity. We do not provide treatment, we do not bill health plans, and we are not a healthcare clearinghouse. We also do not currently act as a business associate of any provider through the Service.

Information you share with Alfi is protected by this Policy, by our contracts with the companies that process it for us, and by applicable state consumer health privacy laws.

If we begin providing or facilitating clinical care, we will update this Policy before that change takes effect.

4. Information we collect

Information you give us directly.

• Account details: your name, email address, and authentication information.
• Health information you enter or tell us: goals, conditions, symptoms, medications and supplements, measurements, allergies, family history, diet, activity, sleep, and anything else you choose to share.
• Documents you upload, such as laboratory results, and the structured data we extract from them.
• The content of your conversations with Alfi, by text and by voice.
• Payment information, handled by our payment processor.

Information Alfi generates about you. As you use the Service, Alfi creates entries in your health profile — observations drawn from what you said, items it is tracking, and summaries of conversations. These are stored with your other information and are identified as having been created by Alfi.

Information collected automatically. Device and browser type, IP address, pages and features used, timestamps, and similar technical data. We use this to operate the Service, keep it secure, and understand which parts of it people use.

5. Conversations, including voice

Alfi supports conversations by text and, in some parts of the Service, by voice.

Text conversations are saved. Your chat transcripts are stored in your health profile so you can return to them, and so Alfi can refer back to what you have already discussed. They are retained until you delete them.

Voice sessions send audio to our AI provider. When you use a voice feature, audio from your microphone is transmitted to our AI model provider to be transcribed and responded to in real time. The resulting transcript is used to produce a written summary that is saved to your health profile. You control when a voice session starts and ends.

6. Documents you upload

When you upload a document, it is sent to a third-party document-processing service that converts it into text and structured data Alfi can read. The extracted information is stored in your health profile alongside the original document.

Deleting an uploaded file and deleting the information extracted from it are two different actions. Removing the original document does not by itself remove health information Alfi has already extracted and recorded. Section 12 explains how to remove both.

7. How we use information

• To answer your questions in the context of your own health information.
• To build and maintain your health profile, and to surface things that may deserve your attention.
• To operate, secure, troubleshoot, and improve the Service.
• To communicate with you about your account, and — where you have opted in — about the product.
• To comply with law and enforce our Terms.

8. How artificial intelligence processes your information

Alfi is built on artificial intelligence models operated by third-party providers. To answer you, relevant parts of your health information are transmitted to those providers for processing and returned as a response.

What we send. We send the information relevant to what you asked, rather than your entire record. Where the Service supports it, Alfi removes direct identifiers — such as your name and date of birth — from the material sent to the model.

What is still sent. Removing direct identifiers reduces what the model receives, but health details relevant to your question are still transmitted, because they are what the question is about.

Training. Under our agreements with our AI providers, your information is not used to train or fine-tune their general-purpose models. We do not sell your information to AI companies, and we do not permit them to use it for their own purposes.

Automated decisions. Alfi does not make decisions about your eligibility, your care, your finances, or your legal rights. It produces information for you to consider. Where state law gives you the right to opt out of profiling or automated decision-making that produces legal or similarly significant effects, you may exercise it using the contact details below.

9. Who processes your information

We use service providers to run the Service. They may process your information only on our instructions and only to provide their service to us. The categories are:

• Health record platform — a third-party platform that stores your health profile and the documents you upload.
• AI model providers — to generate responses, transcribe voice, and read documents.
• Document processing — to extract structured data from files you upload.
• Cloud hosting and infrastructure — to run and secure the Service.
• Product analytics — to understand which features are used. Analytics receives usage events and account identifiers, not your health information.
• Communications and support tooling — to notify our team of operational events and to respond to you.
• Payment processing — to take payment where a membership applies. We do not store full card numbers.

We may also disclose information when required by law or valid legal process; to protect the rights, safety, or property of you, us, or others; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will give notice before your information becomes subject to a different privacy policy.

10. What we do not do

• We do not sell your personal or health information.
• We do not share your health information with advertisers, and we do not use it for interest-based advertising.
• We do not send health details to our analytics provider. Analytics receives which features were used — never a lab value, a medication, a diagnosis, or the contents of a conversation.
• We do not write health information into general application logs or error reports.
• We do not allow our AI providers to train their general-purpose models on your information.

11. De-identified information and research

Improving the Service — on by default. We create de-identified information from your health information and use it to improve Alfi. De-identified means we have removed identifiers and taken reasonable measures so the information cannot reasonably be used to identify you or be linked back to you. We do not attempt to re-identify it, we do not use it to contact you or make decisions about you, and we require anyone who receives it to maintain it as de-identified.

This is on by default, and you can turn it off at any time in your settings. Turning it off stops any further use. It does not change the Service you receive.

Third-party research — off by default. Separately, you may choose to allow de-identified information to be used for health research by third parties. This is off unless you turn it on, is never required, and can be switched off at any time. Switching it off stops future sharing; it cannot recall information already provided to a research partner.

12. Retention and deletion

We keep your information for as long as your account is open, and afterwards only as long as needed for the purposes described here or as required by law.

Deletion is permanent. When you delete an item, your health information, or your account, we delete it from our live systems and instruct our service providers to do the same. We do not keep a hidden copy, and deleted information is not used to answer your questions, to improve the Service, or for research.

There are two limits on that, and they are the only two:

• Backups. Encrypted backups are overwritten on a rolling schedule. Deleted information can persist in a backup until that cycle completes, after which it is gone. Backups are never used to restore an individual record you asked us to delete.
• Legal hold. If we are legally required to preserve specific information — for example, because of active or reasonably anticipated litigation, or a lawful order — we will preserve only what we are required to, for only as long as we are required to, and we will tell you.

Deleting an uploaded document and deleting the health information extracted from it are two separate actions. Deleting your health information, or your account, removes both.

13. Your choices and controls

• See it. Review the information Alfi holds about you, and where it came from, in the app.
• Correct it. Fix anything Alfi recorded or extracted incorrectly.
• Export it. Contact us and we will provide a copy of your information.
• Delete it. Remove individual items, your health information, or your whole account.
• Control research use. Opt in or out of de-identified research use at any time in your settings.
• Communications. Unsubscribe from product emails; we will still send essential account messages.

We will not discriminate against you for exercising any of these rights.

14. State privacy rights

Depending on where you live, you may have rights to know what personal information we hold, to access a copy, to correct it, to delete it, to obtain it in a portable format, to opt out of sale, sharing for targeted advertising, or certain profiling, and to appeal a decision we make on a request. We do not sell personal information or share it for targeted advertising.

To exercise a right, contact us using the details below. We will verify your identity before acting, and will respond within the time the applicable law allows. You may use an authorised agent where the law permits.

15. Consumer health data

Several states, including Washington and Nevada, apply specific protections to consumer health data — information that identifies a person’s past, present, or future physical or mental health. Most of what you share with Alfi is consumer health data.

We collect it to provide the Service to you, as described in this Policy, and with your consent where consent is required. We do not sell it. We share it only with the service providers listed in Section 9, under contracts that limit them to providing their service to us. You may withdraw consent and request deletion of your consumer health data using the contact details below. Our Consumer Health Data Privacy Policy gives further detail.

16. Security

Traffic is encrypted in transit. Health information is stored in a health-record platform with encryption at rest. Sessions are server-side and revocable, and credentials are never exposed to the browser. Access to production systems is restricted to the people who need it and is logged.

No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorisation.

If there is a breach. If your health information is acquired, used, or disclosed without your authorisation, we will notify you without unreasonable delay and in any event within 60 days of discovering it, and we will notify the Federal Trade Commission and, where the breach is large enough, the media, as the FTC’s Health Breach Notification Rule requires of health apps that are not covered by HIPAA. Our notice will tell you what happened, what information was involved, what we are doing, and what you can do.

17. Changes to this Policy

We will revise the “Last updated” date above when this Policy changes. For material changes — particularly any change to what we send to AI providers, who processes your information, or how long we keep it — we will give notice through the Service or by email, and obtain consent where the law requires it.

18. Contact us

Questions about your data, or to exercise a right: privacy@hialfi.com. General enquiries: hello@hialfi.com.

Axiom Health, Inc. d/b/a Alfi, 1117 State St, Santa Barbara, CA 93101.