Effective July 18, 2026

Consumer Health Data Privacy Policy

This separate policy describes how Eisen Labs LLC collects, uses, and shares consumer health data in Protocol One.

Consumer health data we collect

Depending on what you choose to use, we collect identifiers linked to: clinician-supervised protocol and schedule records; compounds, vial inventory, reconstitution and administration records; symptoms, side effects, wellness notes, weight, body measurements, labs, progress photos and documents; health data imported with permission from Apple Health or Health Connect; and inferences or summaries produced only from records you select for an AI request. Subscription, device, support, security, and diagnostic data may also be consumer health data when it reveals your use of a health feature.

Sources

We collect data directly from you, from files you upload, from Apple Health or Health Connect only after the device permission you initiate, from billing providers for subscription status, and from service providers operating Protocol One. We do not obtain consumer health data from data brokers.

Purposes

We collect and use consumer health data to provide the record, scheduling, reminder, synchronization, export, report, support, security, billing-entitlement, and user-requested AI features; prevent fraud and cross-account access; diagnose service failures; honor deletion and privacy requests; and comply with law. We do not use consumer health data for advertising or unrelated profiling.

Sharing

We share only what is reasonably necessary with processors supporting the feature you request: Supabase for authentication, database, and private storage; Vercel for web/API hosting and AI Gateway; the selected AI model provider through the gateway for records you expressly select; Apple and Google for app delivery, device health permissions, notifications, and store billing; Stripe for web billing; Expo for app build and update delivery; and Sentry for redacted error diagnostics. A current processor-category list is available from privacy@eisenlabs.io. We do not sell consumer health data. We do not use health-facility geofences.

Your rights and choices

You may confirm whether we collect or share your consumer health data; access, correct, or export it; ask for a list of third parties or affiliates with which it was shared; withdraw consent; disconnect device-health access; or request deletion, including notification to processors where required. Use account export, account deletion, or email privacy@eisenlabs.io. We may authenticate your request. If we deny a request, reply to the decision within 45 days with “Privacy appeal” in the subject. We will review the appeal and explain the result and available regulator complaint path.

Retention and changes

Active account data remains until you delete it or the applicable feature requires less time. Deletion is targeted within 30 days; backups age out under the documented retention schedule. Limited security, fraud, billing, consent, and legal records may be retained as required. Material changes to the categories, purposes, or sharing described here will be posted and, when required, presented for renewed consent before the changed processing begins.

Contact

General Privacy Policy · Return home