Your health, your data.
We never sell your data. Ever. You control what's shared and with whom.
Last updated: April 16, 2026
We collect information you provide directly (name, email, age, health goals), data from connected devices and EHR systems (steps, workouts, sleep, lab results, conditions, medications), content you create (posts, comments, family tree entries), and technical data (IP address, device type, app usage).
To provide and improve bEHRconnect services, calculate your bEHR Score, deliver personalized insights, surface family-history risk patterns, send notifications you've opted into, and ensure security. We never sell your data to advertisers, data brokers, insurers, or employers.
Protected Health Information (PHI) imported from EHR systems like MyChart, Cerner, or athenahealth is handled in accordance with HIPAA. We maintain Business Associate Agreements with our infrastructure providers. PHI is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is logged and audited.
You control what's shared. By default, only your followers see posts you publish, only family members you've invited see your tree contributions, and your detailed health data is private. We may disclose information when legally required, to protect rights and safety, or with service providers under strict contracts.
When you add family members manually, the conditions you log are visible to other app users you've connected as relatives. App-verified members control their own data and consent to sharing. You can revoke a family connection at any time, which removes shared visibility immediately.
You can access, export, correct, or delete your data at any time from Settings → Your Data. EU/UK users have additional rights under GDPR including data portability and the right to object. California residents have rights under CCPA including the right to know and the right to delete.
We keep your data while your account is active. When you delete your account, we remove personal data within 30 days, except where retention is legally required (e.g., financial records). Aggregated, de-identified data may be retained for product analytics.
bEHRconnect is not intended for users under 13. We do not knowingly collect data from children. Parents who believe a child has signed up should contact us at privacy@behrhealth.com.
We'll notify you of material changes by email and in-app notice at least 30 days before they take effect. Continued use after changes means you accept the updated policy.
Questions or requests? Email privacy@behrhealth.com or write to bEHRconnect, Privacy Office, 123 Wellness Ave, Austin, TX 78701.
This is sample legal copy for demonstration. Replace with policies reviewed by counsel before launch.