AI Data Processing

In short

Your insights and your protocol are produced by an AI model reading your own record. To do that, we send parts of your record to Google. Before anything leaves us, we remove the details that identify you, and we never send your name, your contact details or any identification number. Google cannot train its models on what we send. This processing is how the product works, so agreeing to it is required to use Octo Health.

1. What AI does here

Two things, and they work differently.

• Your insights and your protocol. A Google Gemini model reads the values on your record and writes what they mean and what may be worth tracking or testing next. This is the part that leaves our systems.
• Reading the documents you upload. Text extraction and an AI model run on our own servers, inside infrastructure we control.

2. Who receives your data

Google, through its Gemini API under commercial terms, acting as our processor under Google's data processing terms. The specific model may change as Google releases new ones. The provider does not change silently: if we ever move this processing to a different company, we will ask for your consent again before we do.

3. What we send

• Your lab report, as a document or an image, with identifying details removed.
• The values read from it: the test, the result, the unit, and the reference range.
• Your age and your sex.
• The medications, symptoms and habits you log, as chosen from our lists.

4. What we never send

Your name, email address, phone number, date of birth, home address, or any identification number.

We also send no account identifier of any kind, not even a hashed or random one. What reaches Google is not linked to you by any reference we hold.

5. How we remove the identifying details

The removal runs on our own servers, before any external call.

• In documents that carry text, the identifying text is deleted and replaced with an image of the page, so it cannot be recovered by selecting or copying it.
• In scans and photographs, the pixels carrying the name, the letterhead and other identifying marks are covered.

The approach is deliberately conservative: where we are unsure, we remove, even at the cost of losing information that might have been useful.

6. What Google may do with it

Under the commercial terms that apply to us, Google does not use what we send to improve its own products or to train its models.

Google logs prompts and responses for a limited period, to detect abuse and to meet its own legal obligations, and may hold them transiently in any country where it operates facilities. Google's terms do not fix that period as a number of days, and we will not state one here that we cannot stand behind. International transfers rely on the mechanisms the law provides for them, as described in our privacy policy.

7. Your consent

You give this consent when you create your account. It is separate from the Terms of Service and the Privacy Policy, it is off until you turn it on, and you cannot finish signing up without it, because the product does not work without it.

We record which version of this page you agreed to and when. You can see both in the app, under Account, then Privacy and Legal. Our systems check your consent before every call described here, and the call does not happen without it.

8. Withdrawing your consent

You can withdraw it at any time. Because your insights and your protocol cannot be produced without this processing, withdrawing means closing your account.

Write to members@octohealth.com from the email address on your account. We stop sending your data for this purpose, your account becomes read-only, and you have 30 days to export your record before it is deleted.

9. Contact

Questions about anything on this page: members@octohealth.com.