Privacy Policy

Last updated: August 31, 2026

1. Introduction

AverCare ("we", "us", or "our") is an AI-powered personal health companion. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

  • Name, email address, and password when you create an account
  • Date of birth, biological sex, height, weight, and health goals provided during onboarding

Health & Wellness Data

  • Health documents you upload (lab results, medical records, prescriptions)
  • Vital signs from connected wearable devices (heart rate, blood oxygen, temperature, steps, sleep data)
  • Health-related conversations with our AI assistant
  • Calendar events related to health appointments and medication schedules

Usage Data

  • Device information (device type, operating system, unique device identifiers)
  • Log data (access times, pages viewed, app crashes)
  • Voice recordings when using speech-to-text features (processed in real-time and not permanently stored as audio)

Camera & Microphone

  • Camera access is used for licensed NuraLogix AverScan wellness estimates, video consultations with AI professionals, and HD video consultations with licensed human doctors via our telemedicine service
  • Microphone access is used for voice-based health consultations and speech-to-text input

AverScan Face Data & Camera Processing

  • AverScan uses the licensed NuraLogix Anura Core / DeepAffex service. While a scan is active, the front camera captures a live sequence on your device so the software can extract facial blood-flow signals and facial landmarks and features. This is signal analysis, not facial recognition: AverCare does not create or use a face template to identify you.
  • Raw camera images and video are not stored by AverCare, are not uploaded to AverCare, and are not transmitted to NuraLogix. An encrypted payload containing derived facial blood-flow and landmark data — but not the pictures or video — is transmitted directly to NuraLogix DeepAffex for processing.
  • When available, age, height, weight, and sex at birth are also sent to NuraLogix because the licensed study uses them to produce its estimates. AverCare receives and stores the returned measurements, wellness report, and measurement point pack so you can view history and reproduce the displayed score. These results are stored in AverCare's managed cloud database; AverCare does not receive or store the camera frames. If you separately allow third-party AI processing, returned wellness measurements — never camera frames or facial landmark data — may also be sent to the AI provider named in the permission screen to explain the report in plain language.
  • AverCare retains scan measurements and reports while your account is active and deletes them when you delete your account. NuraLogix processes and retains the encrypted signal payload, measurements, and service logs under its own retention policy, including periods needed to provide and secure the service, comply with law, resolve disputes, or anonymize data. NuraLogix states that DeepAffex cloud data may be processed in multiple jurisdictions and that data from the EEA, United Kingdom, and Switzerland is stored in Germany. You can request deletion or more information through privacy@avercare.global; we will coordinate any provider-side request that cannot be completed within AverCare directly.

NuraLogix's description of the same image, signal, storage, and retention practices is available in its Privacy Policy.

Telemedicine Consultation Data

  • When you book a telemedicine consultation, we share the data needed to provide the service with our telemedicine partner (DocGenie India): your name, email, date of birth, biological sex, Indian mobile number, and the reason for your visit.
  • E-prescriptions issued during the consult can be downloaded from DocGenie via AverCare after the visit. We do not receive or store structured SOAP consultation notes from DocGenie.
  • Where RecoMed (South Africa) is your telemedicine partner, we send provider-search requests to RecoMed — including, when you allow location access, your approximate coordinates — to find and rank nearby practitioners. Any booking is completed on RecoMed's own hosted page, where you enter your details directly with RecoMed under their privacy policy; AverCare keeps a tentative calendar entry and appointment record so you can track it.

Bluetooth

  • Bluetooth is used solely to connect to compatible wearable health devices to sync vital sign data

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Power AI-driven health insights, chat responses, and document analysis
  • Generate personalized health recommendations
  • Store and retrieve your health documents and chat history
  • Enable video consultations with AI health professionals
  • Sync and display health data from connected wearable devices
  • Send service-related notifications
  • Detect, prevent, and address technical issues

4. Data Storage & Security

Your data is stored on secure cloud infrastructure with encryption in transit (TLS) and at rest. We use PostgreSQL databases with connection pooling and query caching through Prisma Accelerate. Documents and generated images are stored in private cloud storage accessible only through authenticated API endpoints.

Health document embeddings (used for AI-powered search) are stored as mathematical vectors that cannot be reverse-engineered back into the original document content.

5. Third-Party Services

Before any personal data is sent to a third-party AI or analysis service, AverCare presents an in-app disclosure naming the recipients and data categories and asks for your affirmative permission. If you choose "Not now," those features remain unavailable and no personal data is sent to those providers. You can withdraw permission from your consent settings.

We use the following third-party services to operate the platform:

  • Vercel AI Gateway — Routes AI requests to the provider needed for the selected feature. Vercel also provides application hosting, document and image storage, and service analytics.
  • Anthropic, Google, and OpenAI — Process the messages, relevant health context, uploaded content, or derived results needed for AI chat, summaries, document and lab analysis, image analysis, embeddings, and generated images. The provider depends on the feature AverCare is performing.
  • Cohere — Reranks relevant document-search results before they are supplied to Aver.
  • Tavily and Google Places — Perform web searches and nearby-clinic searches. A nearby-clinic search can include your approximate coordinates when you grant location access.
  • ElevenLabs — Processes text and voice audio for speech-to-text and text-to-speech features.
  • Tavus — Provides real-time avatar calls. When you enable the camera or microphone for a call, the corresponding audio or video stream is processed to conduct that call.
  • NuraLogix (Anura Core / DeepAffex) — Processes the encrypted derived facial blood-flow and landmark payload, optional demographics, and service/device logs needed to return camera-based wellness estimates. Raw camera images and video are not sent. See AverScan Face Data & Camera Processingabove.
  • DocGenie India — Real human telemedicine consultations (HD video and e-prescriptions). DocGenie processes the data described in "Telemedicine Consultation Data" above solely to deliver the consult and any prescription. DocGenie's privacy policy is available at docgenie.in/privacy-policy.
  • RecoMed (South Africa) — Telemedicine practitioner discovery and booking. We send search parameters (and, when you allow location access, your approximate coordinates) to RecoMed to surface nearby practitioners; any booking is completed on RecoMed's own website under their privacy policy, available at recomed.co.za/privacy-policy.
  • Google Calendar — When you sign in with Google and grant calendar access, AverCare two-way syncs your health calendar (including telemedicine appointments) with your primary Google Calendar.

We do not sell your personal data to third parties. We require every third party that receives user data to provide the same or equivalent privacy and security protections described in this policy and to process that data only as necessary to provide its respective service. We do not authorize these providers to use personal or health data for advertising or unrelated profiling.

6. AI-Generated Content Disclaimer

AverCare uses artificial intelligence to provide health-related information and suggestions. AI-generated content is for informational purposes only and does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider for medical decisions.

7. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account at any time through the app or by visiting https://app.avercare.global/delete-account. An approved deletion request overrides our ordinary retention of live account data. When you delete your account, AverCare permanently removes operational account data, including:

  • Profile information and health records
  • Chat history and AI memories
  • Uploaded documents and their embeddings
  • Calendar events and vital sign data
  • AverScan reports and retained measurement point packs
  • AI professional configurations
  • Telemedicine appointments stored on AverCare. Records held by DocGenie India as the treating provider may be retained per their own clinical-record retention obligations; contact privacy@avercare.global to coordinate a deletion request that includes those records.

Database erasure is performed immediately and is irreversible. Private files are placed into a durable cleanup queue and retried until deletion is verified.

We retain only a metadata-only compliance receipt for seven years to document privacy requests and consent decisions. A receipt can include a random reference, request or consent type and version, status, and timestamps; it does not contain health data, chat content, uploaded files, or a request narrative. This receipt does not keep your account active. A specific legal hold may pause deletion of the receipt only; it never delays erasure of your account or health data. Expired receipts are removed automatically after the retention period and any hold end.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Request data portability
  • Withdraw consent at any time

Authenticated users can submit and track a request through the Data & Privacy Rights center. You can also contact us at the email address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@avercare.global