Pivot Wellness connects your health information — labs, wearables, sleep, nutrition, and medical records you choose to connect — and applies AI to read them together. That only works if you trust us with the record, so this page explains exactly what we hold, what we do with it, and what we will never do.
What we collect
- Account information — your name, email address, and authentication details.
- Health information you connect or enter — medical records from systems you link, wearable and phone health data you grant access to, lab results, and anything you log yourself such as meals, workouts, sleep, or mood.
- Usage information — how you interact with the product, so we can operate and improve it.
- Payment information — handled by our payment processor, Stripe. We do not store your full card details.
Health Connect and wearable data
Where you grant access through Health Connect on Android, Apple Health on iOS, or a connected wearable account, we read only the data types you approve — for example steps, heart rate, or sleep — and only to show them to you and to power the insights you asked for.
- We do not sell health data, and we do not use it for advertising.
- We do not share it with third parties for their own purposes.
- You can revoke access at any time, in your device settings or in Pivot Wellness. We then stop receiving new data.
- You can delete data we already hold, either specific sources or your whole account.
How we use it
To operate the Service: to show you your own record, to generate the insights and summaries the product exists to produce, to let practitioners you have explicitly granted access work with you, and to keep the platform secure and running.
AI and your data
Every AI model that reads your data runs on hardware we own. There is no third-party AI provider in the path, so your record and your questions are not sent to an outside model for processing.
We do not use your data to train anyone else’s models.
Who we share with
We do not sell, rent, or trade your health information. We share it only:
- With practitioners you choose, at a scope you set. Paying for an engagement is not consent to share your record — granting access is a separate, explicit step, and you can withdraw it at any time.
- With service providers who run parts of the platform, such as our payment processor, under contract and only for that purpose.
- Where the law requires it, or to protect someone’s safety.
Security and storage
Your data is encrypted in transit and at rest, and particularly sensitive material such as the access tokens for your connected medical record systems is encrypted at the row level. Access is restricted to the people and systems that need it. See Security for the current posture in detail.
Your rights
- Export everything, in standard formats, whenever you want.
- Delete means delete. When you delete your account we remove your data, other than records we are legally required to keep, such as payment records.
- Disconnect any source and we stop receiving new data from it.
- Correct your record where something we hold about you is wrong.
Regulatory status
Pivot Wellness receives your health information at your direction, as a consumer application. That generally means Pivot Wellness is not a HIPAA covered entity or business associate for this data, but is subject to the FTC Act and the FTC Health Breach Notification Rule. We apply HIPAA-grade safeguards voluntarily — encryption, access controls, data minimisation, and no sharing with advertising technology — and we will notify you and the FTC of a breach as that Rule requires.
Children
Pivot Wellness is not intended for anyone under 18, and we do not knowingly collect their data.
Changes
We may update this policy. Where a change is material we will tell you rather than quietly revise this page.
Contact
For questions about your data or this policy, contact us at privacy@pivotwellness.com.
See also our Additional Disclosures and Terms of Service.