Privacy Policy

Account information. Your email address and name. Sign-in is handled by our authentication provider, Clerk; we never see your password. If you choose “Continue with Google,” Google shares your basic profile (name, email address, and profile picture) with Clerk.

Profile information you choose to add. Health goals, age range, biological sex, fitness level, research filter preferences, and how often you want a digest. Health conditions and supplements are saved only after you give consent under the Consumer Health Data Privacy Policy. All profile fields are optional and self-reported.

Consent records. Which of our documents you agreed to (for example these policies, the Medical Disclaimer, and that you are 18 or older), the version, and the time. We don’t store your IP address with them.

How you use the product. Which daily ideas you were shown and read, whether you liked or disliked them and why, whether you tried a suggested action and how it went, and any optional note you add (notes can contain health details, so only add what you’re comfortable storing). We also derive personalization signals from your goals and reading activity, such as which topics you seem interested in.

Check-a-Claim. The text or link you submit and the report we generate, saved with your account. If you upload a screenshot, we keep only the text read from it, never the image.

Search. Your question is sent to our server so we can answer it. If our database doesn’t have a good answer yet, we save the question text, without linking it to your account, so we can add research on that topic.

Push notifications. If you turn them on, we store a subscription address and encryption keys for that device. Sending notifications is currently switched off.

Technical information. Our hosting provider, Vercel, keeps short-lived server logs for security and debugging. They can include technical request details such as the address requested, the time, your browser type, and your IP address. We’ve set up our code not to write your email address, search questions, claim text, or form entries into these logs. We use your IP address briefly to enforce fair-use limits; it isn’t stored in our database.

• To run your account and show research matched to your goals and profile.
• To answer your searches and produce Check-a-Claim reports.
• To keep the service secure and fair, for example by limiting abusive or automated use.
• To see which topics people ask about that we don’t yet cover, using unlinked search questions.
• To contact you about your account or these policies, if needed.
• To meet legal obligations.

We do not sell your personal information, we don’t use it for targeted advertising, and we don’t use advertising or analytics trackers. Community figures (for example, how many people tried an action) are shown only once at least 10 people have responded in a category, and never in a way that identifies you.

We use Anthropic’s Claude models to write summaries, generate your daily idea, answer search questions, and produce Check-a-Claim reports. Anthropic receives only what each feature needs: your selected goals and age range (for your daily idea), your search questions, and the claims, links, or screenshot text you submit for checking. Your name, email address, health conditions, supplements, biological sex, and fitness level are never sent to Anthropic. Anthropic processes this information for us as a service provider, and its commercial terms say it does not use it to train its models. Anything you type into search or Check-a-Claim is sent as written, so leave out personal details you don’t want processed.

We share information only with the service providers that run HealthIQ, and only what each needs:

• Clerk, for sign-in and account management.
• Google, only if you choose to sign in with Google.
• Vercel, which hosts our website and servers and keeps the short-lived logs described above.
• Our managed database provider, which stores your account and profile data for us.
• Anthropic, for AI processing as described above.
• NCBI/PubMed and Crossref, public research databases. They receive search terms derived from your question or claim, never your identity or profile.
• Websites you ask us to check. When you submit a link (for example a video, podcast, or article), our server fetches it. The site sees our server, not your device.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a sale or merger of HealthIQ or Atlanta Aerial Solutions LLC, in which case this policy continues to apply to your information.

We use only cookies and browser storage that are needed to sign you in and to remember choices you make, such as your research filters. No advertising or analytics cookies. Details are in the Cookie Policy.

You can edit or remove your goals and profile details at any time on your Profile page, including withdrawing consent for health conditions and supplements, which deletes them. You can also ask us to:

• confirm what information we hold about you and give you a copy;
• correct information that is wrong;
• delete your account and the information linked to it;
• stop any sale or targeted-advertising use of your data (we don’t do either).

To make a request, email help@davidcartiermedia.com from the address on your account (that’s how we confirm it’s you). We’ll respond within 45 days; if we need more time we’ll tell you why, and we’ll never need more than another 45 days. Requests are free, and using your rights won’t change how we treat you. If we decline a request, you can appeal by replying with “Appeal” in the subject line; we’ll answer within 60 days, and if you’re still not satisfied you can contact your state attorney general. We treat a Global Privacy Control signal from your browser as a request to opt out of sale and targeted advertising.

You can also delete your account from the account menu (your avatar, top right) where that option is shown. Either way, we delete your account data within 30 days. Server logs held by our hosting provider expire on their own short schedule.

HealthIQ is not a healthcare provider or health plan, so HIPAA doesn’t apply to it. Your health information is protected by this policy, the Consumer Health Data Privacy Policy, and the consumer privacy laws that apply to you.

HealthIQ is for adults 18 and older, and we ask you to confirm your age when you set up your account. We don’t knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we’ll delete it.

We keep your account information for as long as your account exists, and delete it within 30 days after you delete your account or ask us to. Unlinked search questions are kept to guide what research we add. Server logs are kept only briefly by our hosting provider.

Connections to HealthIQ are encrypted, sign-in is handled by Clerk, and access to stored data is limited to the person who operates the service. No system is perfectly secure. If a breach affects your information, we’ll notify you and the authorities as the law requires, including under the Federal Trade Commission’s Health Breach Notification Rule where it applies.

HealthIQ is operated from the United States and is intended for people in the United States. Your information is processed by the service providers listed above; Vercel, Clerk, and Anthropic are based in the United States.

When we change this policy we’ll post the new version here with a new date. If a change would let us use your health information in a new way, we’ll ask for your consent first.

Atlanta Aerial Solutions LLC, operator of HealthIQ. Email: help@davidcartiermedia.com. See also our Contact page.