Privacy Policy

The short version

• We store your health data in the United States. Your records, documents, test results, voice recordings and conversations with our AI assistant are stored on servers in the United States, operated by DigitalOcean.
• We do not sell your data. Not to advertisers, not to data brokers, not to insurers, not to anyone. There is no version of KareGO where this changes. It is a permanent commitment, not a current policy.
• We do not show you advertising, and we do not use your health data to target you with anything.
• Our AI runs on our own servers. Your records are not sent to OpenAI, Google, Anthropic or any other external AI provider.
• You can delete everything, at any time, and it is gone. Deletion is immediate on our live systems and complete within seven days including backups.
• Your data is encrypted in transit and at rest. Our servers process your records to provide features such as AI summaries and the assistant. Access is limited to named staff, requires multi-factor authentication, and is logged. Security explains how that works, and what risks remain.
• KareGO does not diagnose, treat, or replace a doctor. It organises and explains information you already have.
• KareInsurance on this website answers coverage questions from published plan rules. It never asks for your name, date of birth or member ID. Section 12.

If anything below is unclear, write to privacy@karego.ai and a person will answer you.

1. Who we are

KareGO is operated by:

Lumivant LLC is the data controller for the personal data described in this policy. That means we decide what data is collected and why, and we are legally responsible for it.

In this policy, "KareGO", "we", "us" and "our" mean Lumivant LLC. "You" means the person using the KareGO app.

1.1 Who is responsible for data protection at KareGO

Data protection at KareGO is owned by named people, not an anonymous department. You can contact either of them directly.

1.2 General privacy contact

For any question, request or complaint about your data: privacy@karego.ai

We answer every message from a real person. You do not need to use a form.

2. Who can use KareGO

KareGO is available only to people aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that we hold data belonging to a person under 18, we delete it.

KareGO is currently offered to users in the United States, the United Kingdom and the European Economic Area. It is designed for you to manage your own health information. KareGO does not currently support managing another person's records, and you should not upload documents belonging to another person to your account.

3. What data we collect

KareGO collects a substantial amount of sensitive information, because that is what the product is for. We have listed it in full rather than summarising it, so that you can see exactly what we hold.

3.1 Account data

• Email address
• Password (stored only as a cryptographic hash — we never see or store your actual password)
• Account creation date, last login, and authentication session records

3.2 Health profile (anamnesis)

Everything in your health profile is optional. You choose what to enter. This may include:

• Identity and demographics: name, date of birth, biological sex, gender identity, ethnic origin
• Body measurements: height, weight, blood type
• Medical history: allergies, chronic illnesses, diagnoses, family medical history
• Vaccinations: vaccines received and the year of each dose
• Lifestyle: smoking, alcohol consumption, use of other substances
• Medications: names, doses, frequency, anticoagulant use and INR target values
• Surgical history and implants
• Functional and neurological status: cognitive status, mobility, communication, disabilities
• Contacts: your doctor, your insurer, your emergency contact
• Profile photograph

3.3 Medical documents and test results

• Medical documents, photographs and PDFs you upload
• AI-generated summaries of those documents
• Blood test results and structured biomarker values extracted from them by our AI
• The name appearing on uploaded documents, which we compare against your profile name to help ensure documents belong to you

3.4 Medications

• Medications you enter manually
• Medication details extracted from photographs of packaging using optical character recognition
• Your medication schedule, reminders, and records of doses marked as taken or missed

3.5 Vital signs and wearable data

If you grant permission, KareGO reads the following from Apple Health (HealthKit):

• Heart rate and heart rate variability
• Blood pressure
• Sleep data
• Steps and distance travelled

We read only. KareGO does not write data back into Apple Health. You can revoke this permission at any time in your device settings.

3.6 Photoplethysmography (PPG)

If you use this feature, the app captures a heart signal using your device camera. This produces a physiological measurement derived from your body.

3.7 Voice recordings and transcripts

• Audio recordings you make of consultations or personal notes
• Text transcripts generated from those recordings
• Any free-text notes you attach

3.8 AI assistant conversations

• The messages you send to the KareGO AI assistant and its replies
• References linking answers back to the source records in your account
• Notes about medication side effects that the assistant identifies from your conversations

3.9 Location data

When you search for a nearby pharmacy, laboratory, vaccination point or screening centre, the app uses your device location to find results. See section 7.4 for how this involves Google.

3.10 Technical and diagnostic data

• Device type, operating system version, app version
• Push notification token
• Crash reports and error diagnostics
• IP address and connection logs, retained for security purposes

3.11 Subscription data

• Your subscription status, plan, renewal date and transaction identifiers
• An anonymous customer identifier used to link your subscription to your account

We never receive your card details. Payments are handled entirely by Apple. See section 7.3.

3.12 Consent records

We maintain an audit log of the consents you have given and withdrawn, including what you agreed to and when. We are legally required to be able to demonstrate this.

Connected health records

If you are in the United States, you can choose to import your records directly from your health insurer, your doctors' and hospitals' record systems, and the national health information exchange (TEFCA).

What we import: insurance coverage and plan details, claims and explanations of benefits (including costs), diagnoses, procedures, medications, allergies, immunizations, lab results, and clinical documents and notes.

Who connects it: Flexpa (Flexpa USA Inc.) connects KareGO to these sources at your request. To connect through the national exchange, you verify your identity with CLEAR, ID.me or Persona, under their own privacy policies.

Updates: once connected, KareGO refreshes your records about once a month. You can also refresh them yourself.

Your control: you can disconnect any source at any time in the app. When you disconnect, we stop importing new records from that source, delete the access we held for it, and ask Flexpa to delete its copy. Records already imported stay in your account until you delete them or delete your account.

Family members: if your insurer returns records for other people on your plan, such as a spouse or children, KareGO keeps only your own records and discards the rest.

How we use it: imported records are used only to provide KareGO to you. We never sell them, never use them for advertising, and never share or use them for any other purpose, including in de-identified or aggregated form.

4. Why we process your data, and our legal basis

Under the GDPR we must have a lawful basis for every use of your data. Most of what KareGO does involves health data, which the law calls a "special category" and protects more strictly. For special category data we rely on your explicit consent under Article 9(2)(a).

4.1 Consent is real, and reversible

Where we rely on consent, you gave it freely and you can withdraw it at any time — in the app, or by writing to privacy@karego.ai. Withdrawal does not affect processing that already happened, but it stops future processing and, where you ask, results in deletion.

Some features cannot work without their consent. If you withdraw permission for Apple Health, we stop reading your vitals. That is a functional consequence, not a penalty.

4.2 What we never do

We do not use your health data for advertising, profiling for marketing, credit or insurance assessment, or resale in any form. We do not build shadow profiles. We do not enrich your data with information bought from third parties.

4.3 Marketing communications

If you subscribe to our newsletter, we use your email address for that purpose only, on the basis of your consent. Every email contains a working one-click unsubscribe link. We send at most one marketing email per week. Your health data is never used to decide what marketing you receive.

4.4 Third parties in your recordings and documents

Your uploads may contain other people's personal data — a doctor's name in a report, a relative's condition in a family history, a clinician's voice in a recording. You are responsible for having a proper basis to record or upload that information. We process it solely as part of storing your record and do not use it for any independent purpose. If a third party contacts us about data held in your account, we will handle it lawfully and, where appropriate, tell you.

5. Artificial intelligence in KareGO

5.1 Where our AI runs

KareGO's AI text model, vision model (used for reading documents and medication packaging) and speech recognition model are self-hosted on our own servers in the United States.

This means your medical records are not sent to OpenAI, Google, Anthropic, Microsoft or any other external AI provider. This is an unusual and deliberately expensive architectural choice, and it is one of the main reasons KareGO exists.

5.2 The AI's limits

Our AI produces summaries, explanations and structured data. It can be wrong. It does not diagnose conditions, prescribe treatment, or replace professional medical advice. Every output should be verified with a qualified healthcare professional. This is stated in the app and it is not boilerplate — AI systems make confident mistakes, and health is the wrong place to assume otherwise.

5.3 Automated decision-making

KareGO does not make automated decisions that produce legal effects or similarly significant effects on you within the meaning of Article 22 GDPR. The AI provides information; every decision about your health remains yours and your doctor's. Reminders and alerts are informational prompts, not determinations about you.

6. Where your data is stored

Your KareGO account and everything in it — profile, documents, test results, biomarkers, voice recordings, transcripts and AI conversations — are stored on servers operated by DigitalOcean in the United States.

Backups are encrypted and held in the same region.

7. Who else processes your data

We use a small number of external providers. Each one is bound by a data processing agreement, may only act on our instructions, and may not use your data for its own purposes. We do not add providers casually — every addition is a reduction in the control we can promise you.

7.1 Hosting and storage

DigitalOcean, LLC — servers and backups, United States. Processes all account and health data, at rest and in transit.

7.2 Transactional email

Resend, Inc. (United States) — sends account emails such as password resets and verification messages. Processes your email address and the content of those messages. Transferred under the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. No health data is sent by email.

7.3 Payments and subscriptions

Apple Inc. and Google LLC — On iPhone, Apple is the merchant of record through the App Store. On Android, Google is the merchant of record through Google Play. We never see or store your payment card details. Apple and Google process your payment data as independent controllers under their own privacy policies.

RevenueCat, Inc. (United States) — manages subscription status and entitlements. Processes an anonymous customer identifier, device and app information, subscription and transaction events, under Standard Contractual Clauses. No health data is shared with RevenueCat.

7.4 Maps and place search

Google LLC / Google Ireland Limited — used to find nearby pharmacies, laboratories and clinics. Processes the coordinates of your search and the search query, at the moment you perform it.

We do not send Google your identity, your account, or any health record. However, the nature of a search ("nearest vaccination centre") can itself be revealing. If you would rather not share this, do not use the location search feature; nothing else in KareGO depends on it. Google's own infrastructure includes the United States.

7.5 Crash reporting and usage analytics

Google Firebase (Google Ireland Limited / Google LLC) — collects crash reports and technical diagnostics so we can fix defects. Processes device model, operating system version, app version, crash traces, and a technical app instance identifier, including transfer to the United States under Standard Contractual Clauses.

Firebase does not receive your health records, documents, or AI conversations. It receives technical information about failures in the app.

If you opt in, Google Firebase Analytics records anonymous app usage events (for example, which screens are opened and whether a feature was used). It never receives health records, documents, AI conversations or anything you type. You can turn it off at any time in the app.

7.6 Push notifications

Apple Push Notification service (Apple Inc.) — delivers reminders to your device. Notification content is kept deliberately minimal and does not disclose diagnoses or test results.

7.7 Apple Health and Apple Wallet

Apple HealthKit data is read on your device with your permission. Apple Wallet stores your Medical ID card locally on your device. Neither involves us sending your health data to Apple's servers.

7.8 Other disclosures

We may disclose data where we are legally compelled to by a valid, binding legal order. Where we are permitted to tell you, we will. We will challenge orders we believe are unlawful or overbroad.

We may disclose data to professional advisers or, in the event of a merger or acquisition, to a successor entity — which would remain bound by this policy and by the commitment never to sell your data.

7.9 Connected records

Flexpa USA Inc. (United States) connects KareGO to your health insurer, healthcare providers and the national health information exchange when you choose to connect them. Processes the health records you choose to import. Identity verification for the national exchange is provided by CLEAR, ID.me or Persona.

8. Sharing you control

Some KareGO features let you share information deliberately:

• Medical ID card public link. You can generate a shareable link to your Medical ID card so that emergency responders or clinicians can see critical information. Anyone with the link can view it. You can revoke it at any time in the app. Only share it with people and services you intend to.
• Exported documents and summaries. Anything you export or print leaves KareGO's protection and becomes your responsibility.

9. How long we keep your data

9.1 Deleting your account

You can delete your account from within the app. When you do:

1. 1Your account and all associated health data are deleted from our live systems immediately.
2. 2Your data disappears from our backups within seven days as the backup window rolls forward.
3. 3Deletion is permanent. We cannot recover a deleted account, and we will not ask you to reconsider or make the process difficult.

If you would prefer to export your data before deleting, you can do so first — see Your rights.

10. Security

10.1 What we do

• Your health data is encrypted in transit (HTTPS/TLS) and at rest on our servers, including backups. Our servers process it to provide features such as AI summaries and the assistant.
• All communication between the app and our servers also uses encrypted HTTPS/TLS connections.
• Data is encrypted at rest on our servers, and backups are encrypted.
• Authentication uses signed JWT access tokens with limited lifetimes.
• Access to production systems is restricted to a small number of named personnel, requires multi-factor authentication, and is logged.
• Consent actions and access events are recorded in a server-side audit log.
• Device permissions (microphone, camera, photo library, location, health data, notifications) are requested individually and can be revoked by you at any time in your device settings.

10.2 What encryption does not remove

Encryption protects your data on the network and in storage. It does not protect an unlocked phone, a reused password, a Medical ID link you choose to share, or anything you export yourself. Those risks are set out on our Security page.

Infrastructure access for account operations and incident response is limited, logged, and subject to confidentiality obligations. It is never used for analysis, product research or any commercial purpose.

No system is perfectly secure. Anyone who tells you otherwise is selling something.

10.3 If something goes wrong

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours, and we will tell you directly and promptly where the risk to you is high. We will tell you what happened, what data was involved, and what we are doing about it — in plain language, without minimising it. If you are in the United States, we will notify affected users, and the Federal Trade Commission where required, in line with the FTC Health Breach Notification Rule and applicable state laws, without unreasonable delay and no later than 60 calendar days after discovery.

10.4 Reporting a vulnerability

If you believe you have found a security flaw in KareGO, please write to security@karego.ai. We will acknowledge your report, investigate, and we will not pursue legal action against researchers who act in good faith and give us reasonable time to fix the issue.

11. Your rights

Under the UK and EU GDPR you have the following rights. Exercising them is free and we will not make it difficult.

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct data that is inaccurate or incomplete.
• Erasure — have your data deleted.
• Restriction — require us to stop processing your data while a dispute is resolved.
• Portability — receive your data in a structured, commonly used, machine-readable format, or have it transmitted to another provider where technically feasible.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — at any time, for any processing based on consent.
• Not be subject to automated decision-making producing legal or similarly significant effects. As set out in section 5.3, we do not carry out such processing.

To exercise any right, use the controls in the app or write to privacy@karego.ai. We will respond within one month. If a request is unusually complex we may extend this by up to two further months, and we will tell you within the first month if so, with our reasons.

We may need to verify your identity before acting on a request. We will ask for the minimum necessary to do so.

11.1 Complaining to a regulator

If you are not satisfied with how we have handled your data, you have the right to complain to a data protection supervisory authority. You can complain to the authority in the EU country where you live or work, or where you believe the problem occurred. A list is published by the European Data Protection Board at edpb.europa.eu.

In the United Kingdom, the regulator is the Information Commissioner's Office (ico.org.uk).

You may complain to a regulator without contacting us first — but we would rather you gave us the chance to put it right, and we will take it seriously if you do.

12. KareInsurance

KareInsurance is a free web tool on karego.ai. It answers what a US health plan covers from published plan rules. It is part of KareGO, operated by Lumivant LLC.

What happens to your details

• We never ask for your name, date of birth or member ID, and we never contact your insurer or your doctor.
• A photo or file of your card or Summary of Benefits is read once to pull out your plan's costs, then deleted.
• We don't store your question, your answer or your plan numbers. If you sign up for updates, we keep your email until you unsubscribe.
• We never sell your data or use it for ads.
• We don't check whether your plan is active, what you've already paid toward your deductible, or approval status. Confirm these with your insurer.
• KareInsurance explains your plan's rules. It doesn't make coverage decisions; your plan does.

The tool quotes published policy text. It does not look up your insurer account.

13. Cookies and the website

This policy covers the KareGO app. Our use of cookies and similar technologies on karego.ai is described in our Cookies Policy.

We do not place tracking pixels in our emails and we do not measure whether you opened them.

14. Changes to this policy

We will update this policy when the product changes. When we make a change that materially affects your rights or how we use your data, we will:

1. 1Notify you in the app and by email before the change takes effect;
2. 2Explain what changed and why, in plain language, not just publish a new version;
3. 3Where the change requires it, ask for your consent again rather than assume it.

Previous versions of this policy remain available on karego.ai so you can see what changed and when.

15. Contact us

General privacy questions and rights requests: privacy@karego.ai

Security reports: security@karego.ai

Contact details for the people responsible for data protection at KareGO are set out in section 1.1 above.