Privacy Policy
Draft: under legal review
This document has not yet been reviewed by a lawyer. It applies during the invite-only Friends and Family Beta and may change before public launch. If we make a change that matters, we will tell you before it applies.
1. About this policy
This policy explains what information Antelic collects, how we use it, who helps us process it, and the choices you have. It covers the Antelic app at app.antelichealth.com and this website, antelichealth.com.
Antelic is a private health and wellness app. It keeps your goals, daily check-ins, medications and supplements, lab results, and health documents in one place, and it uses AI to explain that information.
Antelic is in an invite-only Friends and Family Beta. The company that will operate Antelic has not been formed yet. Its legal name and business address will be provided here before public launch. In this policy, “Antelic”, “we”, and “us” mean Antelic and the people who operate it during the beta.
Most of what you save in Antelic is health information. Our Consumer Health Data Privacy Policy explains how we handle it and the rights you have under Washington’s My Health My Data Act, Nevada’s consumer health data law, and similar laws. If the two policies differ about health information, the Consumer Health Data Privacy Policy applies.
2. Who can use Antelic
Antelic is only for adults 18 or older. To register, you must confirm that you are 18 or older. If we learn that an account belongs to someone under 18, we will close the account and delete its information.
3. Information we collect
We collect the information you give us and the information created when you use Antelic. We do not buy information about you, and we do not collect information from other apps on your device.
Account information. Your email address and password. Your password is stored in hashed form, not as readable text. If you turn on two-factor authentication, we also store what is needed to check your sign-in codes.
Sign-up records. When your account is created, we record which invite admitted it and when. We do not store your invite code with your account: invite codes are stored only as a keyed digest, a fingerprint made with a secret key that cannot be turned back into the code. We also keep three consent records: your confirmation that you are 18 or older, your acceptance of our Terms of Use and this policy, and your separate consent to the collection of your health information. Each one records the version you agreed to and when you agreed.
Failed invite code attempts. To stop people from guessing invite codes, when an invite code is rejected we record when it happened and the network (IP) address the attempt came from, as reported to our server, or “unknown” if no address was reported. These records are not linked to any account.
Welcome email record. When your email address is first confirmed, we record when that happened and when we sent your welcome email, so that it is sent only once. This record holds no email address and no message content.
Profile and goals. Your first name, an optional last name, date of birth, sex, height, weight, the goals you choose, your answers to optional lifestyle questions, and app preferences such as reminder times.
Daily check-ins. How you rate your sleep, your energy and mood, your mental clarity, and how your body feels, plus any symptoms, severity ratings, and notes you add.
Medications and supplements. What you take, including names, doses, schedules, and how you take them, and the doses you log as taken or skipped. For injections, this can include the injection site.
Lab results and health documents. Lab results you upload or enter, including marker names, values, units, reference ranges, and dates. For other health documents you upload, we keep the summary and any listed items, such as medications or immunizations, that you review and approve. We do not keep the full text of the document.
Uploaded files. When you upload a photo or PDF, it is sent through our server to our AI provider so the details can be read. We do not keep the file. We keep only the details you review and save. For health documents, we also keep a digital fingerprint of the file so we can spot duplicates. A fingerprint cannot be turned back into the file.
Appointments. Visit dates, optional clinician names, and the questions you plan to ask, if you add them.
AI results and feedback. Summaries that our AI creates from your information, such as your health overview, which we store so they do not have to be created again. If you mark an AI answer as helpful or wrong, we keep that vote.
Usage records. A daily count of your requests that reached our AI provider, with technical details of the most recent request, such as which feature it was for. We use this to limit costs and diagnose problems.
Wearable data. Connections to wearable services, such as Oura and WHOOP, are turned off during the beta, so we do not collect wearable data. If we turn them on, we will update this policy first, and connecting a wearable will always be your choice.
Information kept on your device. The app keeps your sign-in session and a copy of your recent records in your browser’s local storage, or in your device’s storage, so it opens quickly. This copy is removed when you sign out or delete your account. If your connection drops while you log or remove a dose, check-in, or symptom entry, or archive a medication or supplement, the app also keeps that change in the same storage until it reaches our server, with any dose, note, severity, or injection site you entered and your account ID. It is sent automatically once your connection is back and you are signed in. A change that is still waiting when you sign out is not removed: it stays on that device so it can be sent the next time you sign in there to the same account. It is removed when someone signs in to a different account on that device, or when you delete your account from that device.
Website visits. This website does not use cookies or analytics. Like any web host, our hosting provider receives technical information, such as your IP address and browser type, when you load a page.
4. How we use your information
We use your information to:
- provide Antelic, including saving your records, showing your history and progress toward your goals, and checking what you take for known interactions;
- create the AI explanations and summaries you ask for or that the app shows you;
- read the files you upload, so you can review the details before saving them;
- send account emails, such as a welcome message, a link to confirm your email address, or a link to reset your password;
- keep Antelic secure, prevent abuse, and limit how many AI requests one account can make;
- find and fix errors;
- review the quality of AI answers, using your helpful or wrong votes and counts that do not identify you; and
- meet our legal obligations.
We do not sell your information, and we do not use it for advertising. We do not use advertising tools or tracking pixels. We do not use your information to train AI models, and we do not use it for research. Any future research or AI training use would require a separate opt-in that you could withdraw at any time. That option is turned off during the beta.
5. Service providers
We use the service providers below to run Antelic. They process information on our behalf to provide their services to us.
- Supabase runs our database, sign-in system, and server functions. It stores your account and everything you save in Antelic. Our Supabase database is hosted in Canada.
- Anthropic provides the AI model behind Antelic’s explanations and file reading. When you use an AI feature, our server sends Anthropic the information that feature needs. Depending on the feature, this can include your age, sex, height, weight, goals, and lifestyle answers; what you take; your lab results; summaries of your health documents and check-ins; questions you ask; and the files you upload. We do not send your email address or the name on your profile, but an uploaded file may show your name or other details printed on it. Under its commercial terms, Anthropic does not use content sent through its API to train its models. Anthropic may keep that content for a limited time under its own policies, for example to detect misuse.
- Resend sends our emails from noreply@antelichealth.com. It receives your email address and the content of each email. We do not put your health records in emails. That address is not monitored, so please do not reply to it.
- Vercel hosts this website and the Antelic web app. Like any web host, it receives technical information, such as your IP address and browser type, when you load a page.
- Sentry receives error reports from the Antelic app so we can find and fix problems. A report includes the error, technical details about your device or browser and the app version, and a short record of recent activity in the app that Sentry collects automatically, such as screen changes and the addresses of recent requests. We label reports with your account ID, not your name or email address, and we do not attach your health records. Even so, automatically collected details could occasionally include small pieces of information you entered. Sentry stores our error reports in the United States.
We do not sell your data, and we do not share it with anyone else. The providers above process it only on our behalf. We may disclose information if the law requires it, such as in response to a valid court order. If the company that will operate Antelic is formed, or if Antelic is ever sold or merged, your information would move with it and remain covered by this policy.
If you export your data or create a care report and send it to someone, such as your doctor, that sharing is your choice. The file is created on your device, and we do not see where you send it.
6. Where your information is processed
Our database is hosted in Canada. Our other providers may process your information in the United States or in other countries where they operate.
7. How long we keep your information
We keep your information until you delete it or delete your account, with these exceptions:
- Uploaded files are not kept after they are read.
- Your stored health overview is replaced each time a new one is created.
- Records of failed invite code attempts are not linked to an account. Records more than 24 hours old are deleted each time a new failed attempt is recorded.
- Error reports are kept by Sentry under its own retention schedule. They are not deleted automatically when you delete your account.
- Copies in our providers’ backups and logs are removed on those providers’ own schedules.
8. Your choices and rights
You can do the following in the app at any time:
- See and download your information. Use Export my data in Settings to download a file with your profile, what you take and your dose logs, lab results, check-ins, health documents, appointments, AI feedback votes, and your sign-up consent records.
- Correct your information by editing it in the app.
- Clear your history. Use Clear history & records in Settings to delete your dose logs, lab results, and stored health overview while keeping your list of what you take.
- Delete your account. Use Delete account in Settings to permanently delete your account and the information linked to it, including your profile, goals, check-ins, medications and supplements, dose logs, lab results, health documents, appointments, AI results, feedback votes, usage records, sign-up records, and welcome email record. Deletion from our database happens immediately, and the app also removes the copy kept on that device.
- Withdraw your consent. Deleting your account withdraws your consent and stops all collection.
We offer these rights to everyone who uses Antelic, wherever they live. Depending on your state, you may have other rights under state law. Our Consumer Health Data Privacy Policy explains how to use the rights that apply to health information, including how to appeal a decision. We will not treat you differently for using any of these rights.
Contact. For privacy questions and requests, email privacy@antelichealth.com. Our sending address, noreply@antelichealth.com, is not monitored.
9. Security
We restrict each record in our database to the account that owns it, encrypt information in transit and at rest, require a signed-in account for AI features, and offer optional two-factor authentication. No system is perfectly secure, so we cannot promise that your information will never be accessed without permission.
If a security breach affects your health information, we will tell you without unreasonable delay, and no later than 60 days after we discover it, and we will notify regulators where the law requires.
10. Children
Antelic is not for anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete its information.
11. AI and medical advice
Antelic’s AI explanations are for information only. They are not medical advice, and they can be wrong or incomplete. Antelic is in beta, and independent clinical review of its health content is still in progress. Talk with a licensed doctor before changing anything you take. Our Terms of Use explain more.
12. Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we handle your information, we will tell you by email or in the app before it applies, and we will ask for your consent again where the law requires.