Consumer Health Data Privacy Policy

Categories of consumer health data we collect

Because Family Stork is a family health record, health data is the product, collected only because you put it there: health conditions, diagnoses as recorded in your documents or notes, medications and dose logs, allergies, vaccination records, lab results, vital signs and body measurements (weight, height, heart rate, blood pressure), nutrition and exercise logs, care notes and symptoms you write down, reproductive or gender-affirming care information only if your records contain it, insurance details you save, photos and videos you upload, information from health apps you import (Apple Health, Samsung Health, Fitbit exports, hospital-portal downloads), and messages you exchange with the record's AI. We do not collect biometric identifiers, and we do not collect precise geolocation.

Sources

You and the family members or caregivers you authorize; documents emailed to the record's private inbox address (mail from unknown senders is held for your approval before anything enters the record — receipt itself happens on arrival); files you upload or import; and, if you connect a device sync (such as Fitbit), readings pulled automatically from that service until you disconnect it. We do not buy data, and we do not collect health data from advertisers, data brokers, or trackers.

Why we collect it, and what we never do

One purpose: to provide the service you signed up for — building timelines, answering your questions from your own record, reminders you turn on, emergency and caregiver cards, and the sharing you direct. We do not sell consumer health data. We do not share it with advertisers, employers, insurers, or data brokers. We do not use it for advertising or model training. No third party receives it except the service providers below acting at our instruction, people you yourself authorize, or where the law compels disclosure — in which case we will tell you unless legally prohibited from doing so.

Service providers that process health data for us

Cloud infrastructure (Amazon Web Services, hosting, with encrypted backups), Anthropic (AI processing of the documents, photos, and text you submit, to build your timeline and answer your questions), email delivery (for the messages the product sends), and SMS delivery (for text updates you turn on). Payment processing (Stripe) receives billing details only, never health records. Each acts under contract, on our instructions. We have no affiliates; our sibling pet-health product (Voocie) never receives human health data.

Sharing you control

Health data leaves Family Stork only at your direction: inviting family or caregivers (with the share level you pick — note that every member, at every level, can open the emergency card: a safety summary of current medicines, allergies, and conditions, disclosed at invite time), share links you create (emergency, caregiver, insurance, moments — each revocable), the record's inbox address you hand out, or an export. Record access is logged, including document downloads through share links.

Your rights

You may: access your health data (it is your record; export everything free — and on request we will list the third parties your data has been shared with, with a way to contact each); correct it (every timeline entry and document is editable; AI chat transcripts can be removed by request or by deleting the record); delete it (delete entries, documents, or whole records in the product; delete your entire account by emailing us — deletion is immediate in the live system, propagated to our processors, and residual copies in encrypted backups expire on rotation, within six months); withdraw consent for any sharing you set up (change share levels or revoke links, effective immediately); and not be discriminated against for exercising any of these.

To exercise any right, use the controls in the product or email info@familystork.com. We respond without undue delay, within 45 days (extendable once by a further 45 days where reasonably necessary, and we will tell you if so). If we decline a request, you may appeal by replying to our response with the word "appeal"; a person will review it and answer within 45 days. If your appeal is denied, Washington residents may file a complaint with the Washington Attorney General.

A note on HIPAA

Family Stork is a consumer tool you choose, not a healthcare provider or insurer, so it is generally not covered by HIPAA. Your protections here come from this policy, our contracts, and consumer-protection and state health-privacy laws — including the FTC's Health Breach Notification Rule, under which we would notify you of any breach of unsecured records.

Where we operate

Family Stork is operated from, and directed to, the United States. We are currently below the applicability thresholds of the California Consumer Privacy Act; the rights on this page are available to everyone regardless of state.