Privacy
Private by design.
Personal by nature.
Your record belongs to you, your photos stay on your phone, sharing is invitation-only, and there are no ads, trackers, or third-party analytics — in the app or on this website.
The short version
- You only put in what you choose to — check-ins, meds, appointments, notes. No diagnosis or staging required.
- Your photos never leave your phone. Not uploaded, not backed up by us, not seen by anyone unless you hand them your phone.
- Sensitive fields are encrypted at rest, and hǣlan runs on HIPAA-eligible AWS infrastructure under a signed Business Associate Agreement, in our own isolated account.
- Sharing with your circle is invitation-only, per-person, revocable anytime, and enforced by the server — not just the app.
- No ads, no trackers, no third-party analytics SDKs, no selling your data. Ever.
- Export your record whenever you want it. Ask us to delete it and we will.
What hǣlan collects
Only what you choose to put in it: check-ins in your own words, medications you record, appointments, questions for your care team, water and nourishment notes, sleep and movement signals from HealthKit (if you connect it), and the moments you decide to keep. hǣlan never requires a diagnosis, staging, or treatment details to work, and never asks for more than the surface you are using needs.
Where it lives
hǣlan runs in its own isolated AWS account, built on HIPAA-eligible AWS services under a signed Business Associate Agreement. We do not share infrastructure with other products, and we do not use general-purpose analytics or logging tools that were not built for health data. We publish what we operate, and nothing more.
Encryption
Sensitive fields — medication names and doses, notes, check-in text — are encrypted at rest with field-level encryption using AWS Key Management Service (KMS). Data in transit is encrypted as well. Access to the underlying keys and infrastructure is limited to the people who operate the service.
HealthKit
If you choose to connect Apple Health, hǣlan can read water, sleep, resting heart rate, and step data to inform your reflections and hydration count, and can read clinical records to help import your medication list. Each of these is a permission you grant in iOS and can revoke at any time in Settings. hǣlan does not write health data back to Apple Health except where you explicitly ask it to (for example, an optional calendar write-back for appointments), and does not share HealthKit data with any third party.
Photos stay on your device
Meal photos and pinned memories never leave your phone. They are not uploaded to our servers, not backed up by us, and not visible to anyone you have not physically handed your phone to. If you get a new phone, everything else in your record restores from our servers — photos do not, because we never had them.
AI features
Meal recognition, daily reflections, and "ask your record" run on AWS Bedrock inside our own AWS account. Your data is sent to the model to generate a response and is not used to train any model, ours or anyone else's. Ask your record answers only from your own recorded history and never offers medical advice.
One small exception worth naming plainly: when you search for a doctor while adding a provider, the letters you type in that field are sent from our servers to the NPI Registry — the U.S. government's public directory of licensed providers — to find matches. Nothing about you travels with that search: no name, no account, no health information. Just the characters you typed into that one field.
Sharing with your circle
Sharing is invitation-only. You choose who joins your circle, and what each person can see ("Can see") or help with ("Can help"), permission by permission. Every permission is enforced on the server, not just in the app, and every action a circle member takes is attributed to them and audited. You can revoke anyone's access at any time. Private check-ins, reflections, kept moments, notes, and photos are never shared with your circle, regardless of permissions.
What we never do
No ads, no trackers, no third-party analytics SDKs, and no data brokers — in the app or on this website. We do not sell your data, to anyone, for any reason. We do not use your data to train AI models. That is also why there is no cookie banner here: there is nothing to consent to.
Retention, deletion, and export
You can export your record whenever you want it. If you ask us to delete your account, your record is deleted — not archived for marketing, not sold, not repurposed. Write to hello@haelan.app and we will help with either, typically within [BRACKET: deletion turnaround window — for counsel] days.
Children
hǣlan is intended for adults 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact hello@haelan.app and we will remove it.
Changes to this policy
If this policy changes in a way that matters, we will let you know inside the app or by email before the change takes effect. The date at the foot of this page tells you when it was last drafted.
Contact
Questions about any of this — plain or technical — are welcome at hello@haelan.app. hǣlan is operated by hǣlan [BRACKET: legal entity name being finalized — for counsel]. Governing law is described in our terms of use.
hǣlan is beta software and does not provide medical advice or replace your care team. In an emergency, call 911, or 988 for mental health crisis support.
Drafted for counsel review — July 2026.