Privacy policy

Last updated October 1, 2026

This policy explains what Pocket Provider collects, why, and the choices you have. Health information is sensitive, so we try to collect only what the app needs.

What we collect

Account information: your email and sign-in details, handled through Firebase Authentication.
Health information you provide: messages, medical profile details (such as conditions, medications and allergies) and documents or lab results you upload.
Payment information: subscriptions are processed by Stripe. We do not store your card number.
Usage and device data: basic technical data used to keep the service working and secure.

How we use it

To provide the service, including generating AI responses to your questions.
To save your conversations and profile so you can return to them.
To maintain security, prevent abuse and improve reliability.

AI processing

To answer your questions, the content you submit is sent to a third-party AI provider (Google Gemini) for processing. Do not enter information you are not comfortable sharing for this purpose.

Who we share it with

We do not sell your health information. We share data only with service providers that operate the app on our behalf (for example Google Firebase and Cloud for hosting, storage and authentication; Google for AI processing; Stripe for payments), when required by law, or when you direct us to. We will not share your health conversations with healthcare providers unless you choose to.

HIPAA

Pocket Provider is a consumer application and is not a healthcare provider, health plan or healthcare clearinghouse. HIPAA generally does not apply to information you give us directly. We still protect it using the safeguards described here, and your health data is also covered by applicable state consumer health privacy laws.

Your choices

You can access, correct or delete your information, and delete your account, by contacting us at [email protected]. Residents of certain states have additional rights under state privacy laws, and we honor those requests.

Retention and security

We keep your information while your account is active and delete it within a reasonable period after you ask us to. We use encryption in transit and at rest and restrict access, but no system is perfectly secure.

Children

Pocket Provider is not intended for children under 18.

Changes and contact

We will post updates here and change the date above. Questions? Email [email protected].