Privacy

What is recorded

Only what arrives through the conversation, plus what you connect to it:

• Messages you send, and the replies. Symptoms, sleep, mood, medication, anything you choose to mention.
• Photos you send, meals, and occasionally something you want looked at. Stored privately; never public, never indexed.
• Wearable data, if you connect a device. Sleep, heart rate variability, resting heart rate, steps, blood oxygen, temperature deviation.
• What it works out, your personal baselines, patterns it is investigating, and questions it wants to ask.

Every value is stored with its provenance: whether you reported it, a device measured it, or a model estimated it from a photo. These are never treated as interchangeable, because a number you guessed and a number a sensor recorded are different kinds of fact.

Where it lives

In a PostgreSQL database in London (eu-west-2), and processed by servers in London. Health data does not leave the region for storage.

Every table has row-level security, so a query can only reach one person’s records. Credentials for connected devices are encrypted before they are written down.

Who else sees it

Four third parties, each for one job:

• OpenAI, reads your messages to understand them and to phrase replies. Sent for processing, not for training.
• Meta (WhatsApp), carries the messages. Meta can see anything sent through WhatsApp, under their own terms.
• Supabase, hosts the database and the private photo storage, in London.
• Ōura, only if you connect a ring, and only to read the metrics above.

Nothing is sold, and nothing is shared for advertising. Product analytics, where enabled, receives counts and timings under a pseudonymous identifier, never message text, never images, never health values. That is enforced by an allowlist: a field is dropped unless it has been explicitly permitted.

What it will not do

It does not diagnose, and it does not prescribe. It reports what your own data shows and how confident that is, which is a different thing from medical advice.

If you describe something that needs urgent attention, it stops and tells you to seek help from a person, without consulting a model first, so that path cannot be talked out of working.

Getting rid of it

Ask, in the conversation. There is no form and no waiting.

• “What do you know about me?”, everything held, in plain language.
• “Forget everything about my headaches”, removes one topic and the conclusions drawn from it.
• “Send me a copy of my data”, a full export.
• “Delete everything”, the whole record, permanently.

Deletion means deletion: the rows are removed, not flagged. Disconnecting a wearable revokes the access token with the device provider as well.

How long it is kept

Until you delete it. The product only works by remembering over months, so nothing expires on a timer, which makes the controls above the ones that matter.

Contact

Questions, or a request you would rather not make through the chat: james@uniqueinteractions.com.