Your health, your data.
We never sell your data. Ever. You control what's shared and with whom.
Last updated: April 16, 2026
We collect information you provide directly (name, email, age, health goals), data from connected devices and EHR systems (steps, workouts, sleep, lab results, conditions, medications), content you create (posts, comments, family tree entries), and technical data (IP address, device type, app usage).
To provide and improve bEHRconnect services, calculate your bEHR Score, deliver personalized insights, surface family-history risk patterns, send notifications you've opted into, and ensure security. We never sell your data to advertisers, data brokers, insurers, or employers.
Protected Health Information (PHI) imported from EHR systems like MyChart, Cerner, or athenahealth is handled in accordance with HIPAA. We maintain Business Associate Agreements with our infrastructure providers. PHI is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is logged and audited.
You control what's shared. By default, only your followers see posts you publish, only family members you've invited see your tree contributions, and your detailed health data is private. We may disclose information when legally required, to protect rights and safety, or with service providers under strict contracts.
Providing a mobile number for your account does not enroll you in marketing texts. You receive recurring bEHR Health texts about community events, wellness programs, and your account only after separately checking the optional SMS consent box. Consent is not required to create an account, use the service, or make a purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Phone numbers are disclosed only to the messaging service provider that transmits our text messages on our behalf, and that provider is contractually prohibited from using them for any other purpose. Questions: health@behrhs.com.
When you add family members manually, the conditions you log are visible to other app users you've connected as relatives. App-verified members control their own data and consent to sharing. You can revoke a family connection at any time, which removes shared visibility immediately.
You can access, export, correct, or delete your data at any time from Settings → Your Data. EU/UK users have additional rights under GDPR including data portability and the right to object. California residents have rights under CCPA including the right to know and the right to delete.
We keep your data while your account is active. When you delete your account, we remove personal data within 30 days, except where retention is legally required (e.g., financial records). Aggregated, de-identified data may be retained for product analytics.
bEHRconnect is not intended for users under 13. We do not knowingly collect data from children. Parents who believe a child has signed up should contact us at privacy@behrhealth.com.
We'll notify you of material changes by email and in-app notice at least 30 days before they take effect. Continued use after changes means you accept the updated policy.
Questions or requests? Email privacy@behrhealth.com or write to bEHRconnect, Privacy Office, 123 Wellness Ave, Austin, TX 78701.