Privacy and your health data

We keep the reports you add, so you can come back to them and our care team can help. We never sell your health data, we use no advertising trackers, and you can see or delete everything whenever you want.

What we collect

The reports you add: photos and PDFs as you sent them, and the text we read from them with names, phone numbers and ID numbers removed.
Health information in the reports: the cancer, its stage, test results, treatments so far, age and city.
The patient's name as printed on the reports, so your records are easy to find. You can change it in Settings.
Each plan we made for you, and what you tell us is hardest right now.
The words you saw beside each button and box, and what you chose, with the date.
Your email, and your Google account if you sign in with it.

All of it comes from you. We do not buy data about you or collect your precise location; if you tap "use my location" to find doctors near you, that stays in your browser.

Why we collect it

To make the plan you ask for, keep it, and let you add new reports as treatment goes on.
To send you the link to your plan, and so our care team can write or call to help with next steps: tests, doctors, paying for treatment and trials.
Only if you ticked it: for cancer research, with your name, phone and ID numbers removed. Research partners may include hospitals, universities and drug companies working on better treatments.
Only if you ticked it: to tell you when a new clinical trial might fit.

Your plan never depends on saying yes to research or trial alerts.

Who we share it with

Nobody sees anything with your name on it except you and OpenCare's care team, unless you ask us to share it, for example with your doctor. We never sell health data, and we never use it for advertising.

These companies process your data for us, under contracts that let them use it only to provide their service:

Supabase stores your reports and plans, on servers in the United States.
Google (Gmail) carries the emails we send you.
OpenAI reads the text and photos of your reports to make your plan. Under its terms for businesses it does not use them to train its models, and it may keep them for up to 30 days to check for misuse.
Render runs our website; your reports pass through it but are not kept there.

HIPAA

OpenCare is not your doctor, your hospital or your health plan, so the federal HIPAA law does not cover the reports you give us. We protect them anyway, as this page describes. If your health data is ever exposed without your permission, we will tell you, as the Federal Trade Commission's Health Breach Notification Rule requires.

How long we keep it

Until you delete it. If you stop research or trial alerts, or delete everything, we stop using your reports for those purposes. Research results that are already published, such as counts of patients, never show a single person and cannot be withdrawn.

Your rights

See everything we keep about you, and download your plans, from My record.
Delete everything, with one button in My record. We also delete it if you write to us, within 30 days.
Withdraw your consent to research or trial alerts at any time, in Settings in My record or by writing to us.
Ask us to correct anything that is wrong, or for a list of the companies we have shared your data with.
Name someone to act for you if you cannot.

These rights are for everyone, wherever you live. If we turn down a request, write back to appeal and someone new will look at it within 45 days. If you are still not satisfied, you can contact your state's attorney general.

If you add reports for a child under 18, you do so as their parent or guardian.

Questions

Write to us at rohan.manchanda28@gmail.com.

Effective October 22, 2026. Consent version 2026-10-22-us.