Privacy Policy

Policy version 2026-09-16. A plain-language explanation of what KanouHealth collects, why, how it's protected, and the choices you have.

What we collect

Account information

Email address and phone number, provided when you register.

Profile details

Gender, height, date of birth, blood group, and language preference, if you choose to add them from Account settings.

Health assessment answers

Age, gender, height, and weight, plus your answers to a set of optional lifestyle questions, such as physical activity, diet, sleep, tobacco and alcohol use, family history, and self-reported (not measured) blood pressure, cholesterol, and blood sugar status, entered when you complete an assessment.

Guest assessments

If you skip account creation, the same assessment answers are still kept afterward, with no name, account, phone number, or other identifying information attached, for research and to improve KanouHealth over time.

Health Journal entries

If you choose to use the Health Journal, glucose, HbA1c, height, weight, blood pressure, and cholesterol readings you log, plus any medications you record, are stored the same way as assessment data. These readings are also sent to our AI provider to generate the Health Journal's personalized note, described under AI-generated content below.

If you set up a reminder for a medication, its name may appear in the reminder email we send to your own inbox.

Technical data

Standard server logs (IP address, browser type, request timestamps) kept briefly for security and abuse prevention, not for tracking you across the web.

Why we collect it

Health information is used to calculate your diabetes risk result, generate personalized lifestyle recommendations, and, if you use the Health Journal, generate a personalized note about your logged readings. If you save a result, we keep it so you can track changes over time. We never sell your data, and we never use it for advertising, profiling, or any purpose you haven't reasonably anticipated from using a health screening and tracking tool.

We keep anonymous, aggregate counts, such as the total number of assessments performed or overall risk trends, to understand and improve public health awareness. If you complete an assessment without creating an account, we also keep your individual answers and result (with no name, account, or other identifying information attached) so an administrator can study them for research and to improve KanouHealth over time, and download them in that same de-identified form. Neither the aggregate counts nor these individual answers can be traced back to you.

AI-generated content

Two things you'll see on KanouHealth are written by an AI model rather than a person: the general recommendation paragraph shown after an assessment, and the personalized note shown on your Health Journal. Both are generated by Anthropic's Claude models.

What's sent to generate your assessment recommendation

Your age, gender, BMI, computed risk level, diagnosis status, reported symptoms, and lifestyle answers, described above. Never your name, email address, phone number, or account details.

What's sent to generate your Health Journal note

Your age, gender, height, blood group, diagnosis status, and your most recently logged readings. Never your name, email address, phone number, or account details.

When AI isn't available

If the AI provider is unreachable, times out, or declines to respond, KanouHealth shows a rule-based message built from the same underlying logic instead, so you always get a result. Either way, this text is general information, not reviewed by a clinician, and not a diagnosis.

How the provider handles it

Anthropic processes this information only to generate the response, under its own security commitments, and, under Anthropic's standard API terms, this information is not used to train their AI models.

How it's protected

Encrypted in transit

Connections to KanouHealth are secured with HTTPS, so data sent between your device and our servers can't be read in transit.

Passwords are never stored in plain text

Passwords are cryptographically hashed. No one, including us, can read your actual password.

Restricted access

Only the platform's operator can access identifiable data, and only when needed to run, secure, or support the service.

Backups

We keep a routine backup of the database for disaster recovery. Backups are retained for 90 days and are accessible only to the small number of people who help operate the platform.

No ads, no data sales

KanouHealth has no advertising network and no data broker relationships. Your data is not a product here.

Cookies & local storage

KanouHealth uses a small session cookie to keep you signed in, a security cookie (CSRF) to protect forms from cross-site attacks, and a language cookie that remembers whether you're reading in English, French, or Arabic. All three are strictly necessary for the platform to function and are not used to track you elsewhere.

Your device also stores one small preference locally in your browser: your light/dark theme choice. It stays on your device and is never sent to us. We don't use advertising or third-party tracking cookies.

Who we share it with

We use a small number of service providers strictly to operate KanouHealth: Render and Neon, who host our servers and database; Brevo, who delivers account verification, password reset, and reminder emails; and Anthropic, whose AI models generate the personalized text described under AI-generated content above. These providers process data only on our behalf and don't have independent rights to use it.

We don't share your personal or health information with anyone else, except where required by law, to protect someone's safety, or to enforce our Terms of Service.

We may also use the health information you provide, including your assessments and Health Journal entries, to review and refine how KanouHealth's own screening logic works over time. This stays entirely internal to the platform: it is never sold, and never handed to the service providers above beyond what's needed to operate the service.

Where it's processed

Our servers and database run on infrastructure located in Frankfurt, Germany, operated by Render and Neon. Brevo, our email provider, is based in the European Union, and Anthropic, our AI provider, is based in the United States. Wherever you access KanouHealth from, your information may be processed in these locations by these providers, under their own security and privacy commitments, only to provide the service described here.

This kind of international transfer is covered by contractual safeguards for handling personal data across borders.

How long we keep it

Anonymous assessments

Kept indefinitely in a form with no name, account, or other identifying information attached, for research and to improve KanouHealth over time.

Accounts & saved assessments

Kept for as long as your account exists, including your saved assessments and Health Journal entries. Delete your account at any time from Account settings to remove everything tied to it.

Unverified accounts

Automatically deleted 30 days after signup if the email is never confirmed.

Consent records

Kept alongside your account as a history of which policy version you agreed to, and deleted when your account is deleted.

Aggregate statistics

Contain no personal data, so they're kept indefinitely to support public health reporting.

Your rights

You're in control of your data. At any time, you can:

Access it

View every saved assessment and your account details from your dashboard.

Correct it

Update your account details, or submit a new assessment if your health details change.

Export it

Download your saved assessment history from the assessment history page, or a full copy of your account, profile, assessments, and Health Journal entries as a file, from Account settings.

Delete it

Permanently delete individual assessments, or your entire account and everything tied to it, from Account settings.

Control communications

Turn reminder emails on or off at any time from Account settings; the reminder digest email also explains how.

Not satisfied?

If we can't resolve a request to your satisfaction, you can also contact your local data protection authority.

Children's privacy

Creating an account requires you to be old enough to enter into this agreement under the law that applies to you (typically 18). The anonymous screening tool itself may be used on behalf of someone else, for example a parent checking a family member's risk or a health worker supporting a patient, without creating an account. We do not knowingly collect account registrations from children.

Changes to this policy

We may update this policy as the platform grows. Meaningful changes will update the policy version above and show a notice the next time you sign in, linking back here so you can review what changed.

If KanouHealth is ever discontinued or transferred to a new operator, we'll notify users in advance and give you the chance to export or delete your data first.

Reminder: This platform provides an informational risk estimate and AI-assisted general information only. It is not a substitute for professional medical advice, diagnosis, or treatment.

Questions about your data

KanouHealth is built and operated by Mahamat Maina Oumar Adam. Reach out any time by email. Requests to access, correct, export, or delete your data are handled personally and promptly.