Consumer Health Data Policy

Consumer health data means information that identifies your past, present or future physical or mental health. Nearly everything BioByte holds is that, which is why this page exists. The categories are:

• Individual health conditions and diagnoses recorded in your timeline, including when they were first noted and whether they are active, managed or inactive.
• Medications, including dose, schedule, and whether a course is current.
• Test and measurement results, meaning lab values with their units, dates, reference ranges and how confident the extraction was, plus what BioByte originally read where you have corrected it.
• Treatments and procedures, including visits, immunisations and procedures recorded in your timeline.
• Bodily functions and vital signs you enter or that appear in a document, including height, weight and blood type, and, if you connect Apple Health in the iPhone app, sleep, steps, workouts, heart rate, resting heart rate, heart rate variability and body weight.
• Sex assigned at birth, optional and skippable, asked once during onboarding and editable afterward. It is used for two things: choosing which reference figure the Journal Body tab draws, and as part of the background summary sent with questions about your records, so answers can take it into account. It is not included in the doctor summary you can export.
• Allergies you record on your profile.
• Your uploaded documents themselves, which are health records in full, and the text passages and search index derived from them.
• Photos you track, of a spot or area of skin you choose to follow over time.
• Your questions and our answers in chat, including anything you attach, which are about your health by definition.
• What BioByte learns with you: facts about you that you state or confirm, and the summaries, suggestions and things to keep an eye on that BioByte writes from your record.
• Your research choice: whether you turned research search off, which says something about what you are looking into.
• Bug reports, from test builds of the app only: what you write and a screenshot of the screen you were on, either of which can show health data.
• Identifiers that tie the above to you: your account identifier, your email address, and the name and date of birth on your profile.

The purpose is one thing. We collect this data to run BioByte for you: to store your records, to extract structure from documents you upload, to show you the result for your approval, to let you search and ask questions about your own history, and to keep the service working and secure. We do not use your health data for advertising, for profiling, or to build products for anyone else.

We do not collect location data, and BioByte does not track your movements. BioByte does draw inferences, the summaries, suggestions and proposed facts above, but only from what you give it: your documents, your answers, your chat and, if you connect it, Apple Health. A fact BioByte infers waits for your approval before it joins your record.

From you directly. What you type into your profile, the documents you choose to upload or photograph, the corrections you make during review, and the questions you ask in chat.

From Apple Health, if you connect it.The iPhone app reads the Apple Health data listed above, with your permission, and never writes to Apple Health. You can turn access off at any time in your iPhone's Health settings.

Derived from what you gave us. The structured record BioByte extracts from your documents, the passages and embeddings used to search them, and the summaries, suggestions and proposed facts BioByte writes from your record. These come from what you gave us and nowhere else.

From Apple, if you use Sign in with Apple. An identifier and the email address you chose to share. This is account data rather than health data, but it is how your health data is tied to you.

From nobody else. We do not buy health data, we do not receive it from data brokers, health systems, insurers, pharmacies or advertising networks, and apart from Apple Health, which you choose to connect, we do not collect it from other apps on your device.

We share consumer health data only with the service providers that make BioByte work, and only so they can do that work for us. We do not share it with anyone else. The specific third parties, and what each one receives:

• Supabase stores all of it: your account, your profile, your timeline, your documents in a private bucket, your chat, and the search index.
• Vercel hosts the website and runs the API, so your data passes through it while a request is being served. It also runs the AI Gateway that every model request goes through.
• AI model providers, reached only through Vercel's AI Gateway, receive the documents you upload in order to extract a record from them, your chat questions along with the parts of your record needed to answer them, and passages of your documents in order to produce the embeddings that make search work.
• Apple receives nothing about your health. It handles sign-in only, if that is how you sign in.
• Sentry receives error and crash reports that are filtered to remove health data before they are sent: no request bodies, no error message text, no query strings, and no name, email or IP address.
• Linear, our issue tracker, receives the bug reports you send from a test build of the app: what you wrote, the screenshots and pictures attached, and basic device details. We do not send your account identifier or email address with them, but a screenshot or what you wrote can show health data and can identify you.
• EMBL-EBI (Europe PMC), NCBI/NLM (PubMed), NLM (MedlinePlus) and the US FDA (openFDA)are third-party recipients of a search query when you ask a general medical question while research search is on. BioByte checks the query for the name and date of birth on your profile, for names of people and places written in your recent records, for nicknames and initials, for full dates and birthdays, for addresses and postcodes, and for contact, insurance and ID numbers, including when they are written with common lookalike letters, spelled-out digits or an encoding, and refuses to send it if it finds one. That check cannot catch everything, so avoid typing other people's names or identifying details in a research question; the query can include general clinical details such as a lab value, a medication or an age range. Research search is on unless you turn it off in Vault, and while it is off nothing is sent to them.

Every model request goes through Vercel's AI Gateway and asks for zero data retention. The Gateway sends a request only to a provider that Vercel holds a zero-retention agreement with, and if none of them can serve it, the request fails rather than going anywhere else.

Zero data retention means the provider does not store your request or its answer once it has responded. It has limits: a provider can still hold a request where the law requires it or to check for abuse, and a provider may briefly cache part of a conversation, for a few minutes, to answer the next message faster. We do not use your health data to train models, and we do not give it to anyone for that purpose.

We may also disclose data if the law requires it, or to protect someone from imminent harm. If BioByte is ever acquired or merged, your data may transfer as part of that, and we will tell you before it does so that you can delete your account first if you prefer.

We do not sell consumer health data, and we have no plans to. Under the My Health My Data Act a sale would require your separate, specific, written authorisation, and we have never asked for one because we have never had a use for it. If that ever changed, it would require your explicit signed authorisation, which you could withdraw at any time, and we would not condition your use of BioByte on giving it.

We also do not use consumer health data for targeted advertising, and BioByte carries no advertising, no advertising identifiers and no third party trackers.

You have the right to:

• Confirm what we hold and get a copy of it, including a list of the third parties we have shared it with.
• Withdraw your consent to our collecting it or sharing it.
• Delete it, including from our archived and backup systems, and to have us tell the service providers listed above to do the same.
• Appeal if we refuse any of the above.
• Not be discriminated against for exercising any of these rights. Using them will never degrade the service you get.

Deletion, immediately, by yourself. Open BioByte, go to Vault, and choose Delete my vault. This deletes your documents, photos, records, Apple Health data, chat, the bug reports stored with your account and their screenshots, and your account. It is permanent and it takes effect at once. This is the fastest route and it needs no request and no waiting.

What in-app deletion does not reach. Bug reports already sent to our issue tracker are kept. They carry no account identifier or email address, but what you wrote and the screenshots attached can show health data and may still identify you. If you want them deleted, ask us by email and we will delete them.

Everything else, by email. Write to support@mybiobyte.com from the address on your account and tell us which right you want to use. We will confirm that you control the account, then answer within 45 days. If we need longer we will tell you why within those 45 days and take no more than 45 additional days.

If we say no. We will tell you why, and how to appeal, in the same reply. Appeals go to the same address, marked as an appeal, and we will decide within 45 days and explain the outcome in writing. If we deny your appeal, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint.

You can also use an authorised agent to make a request for you. We will ask for proof that you authorised them.

Until you delete it. There is no automatic expiry on health data in BioByte, because a record you cannot find in five years is not a record. Removing a single document deletes its stored file at the same time. When you delete your account, we remove your stored files and then delete your account, which removes every record tied to it.

Bug reports are the exception: they stay in our issue tracker until the BioByte team deletes them, including after you delete your account, without any account identifier attached.

If we change what we collect, what we do with it, or who we share it with, we will update this page and the effective date at the top before the change takes effect. Reach us at support@mybiobyte.com. Our general Privacy Policy covers everything else we hold.