Privacy Policy

Draft v0.1 — last updated August 18, 2026

Draft — pre-launch. Porta Health is in development and not yet generally available. This policy is a working draft, published for transparency during our development and testing period, and will be finalized with legal review before public launch.

1. The short version

  • Your health information is yours. We store it to provide the service to you — nothing else.
  • We do not sell your data, and we do not share it with advertisers, data brokers, or employers.
  • Records are retrieved from your healthcare organizations only with your explicit, revocable authorization.
  • You can export your record and you can delete it.

2. What we collect

  • Account information: your name, email address, and authentication details.
  • Health information you provide: medications, conditions, allergies, providers, notes, and other records you enter or photograph.
  • Health information you connect: records retrieved from your healthcare organizations when you authorize a connection (for example, through your patient portal login).
  • Technical information: device and usage data needed to operate, secure, and improve the service.

3. How we use it

To provide the service to you: storing and organizing your record, syncing it across your devices, enabling sharing you explicitly set up, and securing your account. We do not use your health information for advertising, and we do not sell it.

4. Sharing

Your health information is shared only: (a) as you direct — for example, with a caregiver you invite or a provider you send it to; (b) with service providers who process it on our behalf under contractual confidentiality and security obligations (for example, cloud hosting); or (c) if required by law.

5. Security

Your data is encrypted in transit and at rest. Access is protected by authentication, and sensitive operations are logged. We design toward the security standards expected of regulated health systems, ahead of being required to.

6. Your choices and rights

  • Export your record at any time.
  • Delete your record and account at any time.
  • Revoke any external record connection; revocation stops future retrievals.
  • Depending on your state, you may have additional legal rights over your health data; we honor applicable state privacy laws.

7. Breach notification

If a breach affects your unsecured health information, we will notify you as required by applicable law, including the FTC Health Breach Notification Rule.

8. Children

Porta Health is not directed at children under 13, and we do not knowingly collect their information.

9. Changes

We will post updates here with a revised date; material changes will be called out in the app.

10. Contact

Privacy questions: hello@porta-health.com.