Privacy Policy

What we collect

Account information

Username, email address, and phone number, provided when you register.

Health assessment data

Age, gender, height, weight, hypertension status, HbA1c level, and blood glucose level, entered when you complete an assessment.

Guest assessments

If you skip account creation, the same health fields are still kept afterward — with no name, account, or other identifying information attached — for research and to improve KanouHealth over time.

Health Journal entries

If you choose to use the Health Journal, glucose, HbA1c, weight, and blood pressure readings you log, plus any medications you record, are stored the same way as assessment data and are never shared with third parties.

Technical data

Standard server logs (IP address, browser type, request timestamps) kept briefly for security and abuse prevention, not for tracking you across the web.

Why we collect it

Health information is used only to calculate your diabetes risk result and generate personalized, general lifestyle recommendations. If you save a result, we keep it so you can track changes over time. We never sell your data, and we never use it for advertising, profiling, or any purpose you haven't reasonably anticipated from using a health screening tool.

We keep anonymous, aggregate counts, such as the total number of assessments performed or overall risk trends, to understand and improve public health awareness. If you complete an assessment without creating an account, we also keep your individual answers and result — with no name, account, or other identifying information attached — so an administrator can study them for research and to improve KanouHealth over time, and download them in that same de-identified form. Neither the aggregate counts nor these individual answers can be traced back to you.

How it's protected

Encrypted in transit

Connections to KanouHealth are secured with HTTPS, so data sent between your device and our servers can't be read in transit.

Passwords are never stored in plain text

Passwords are cryptographically hashed. No one, including us, can read your actual password.

Restricted access

Only the platform's operator can access identifiable data, and only when needed to run, secure, or support the service.

No ads, no data sales

KanouHealth has no advertising network and no data broker relationships. Your data is not a product here.

Cookies & local storage

KanouHealth uses a small session cookie to keep you signed in and a security cookie (CSRF) to protect forms from cross-site attacks. Both are strictly necessary for the platform to function and are not used to track you elsewhere.

Your device also stores a couple of small preferences locally in your browser, such as your light/dark theme choice. These stay on your device and are never sent to us. We don't use advertising or third-party tracking cookies.

Who we share it with

We use a small number of service providers strictly to operate KanouHealth: a hosting provider to run the servers, an email delivery provider to send account verification, password reset, and reminder emails you've requested, and Anthropic, whose AI model generates the personalized recommendation paragraph shown after your assessment. These providers process data only on our behalf and don't have independent rights to use it.

We don't share your personal or health information with anyone else, except where required by law, to protect someone's safety, or to enforce our Terms of Service.

We may also use the health information you provide — including your assessments and Health Journal entries — to develop, evaluate, and improve KanouHealth's own risk-assessment models over time. This stays entirely internal to the platform: it is never sold, and never handed to the service providers above beyond what's needed to operate the service.

How long we keep it

Anonymous assessments

Kept indefinitely in a form with no name, account, or other identifying information attached, for research and to improve KanouHealth over time.

Accounts & saved assessments

Kept for as long as your account exists. Delete your account at any time from Account settings to remove everything tied to it.

Unverified accounts

Automatically deleted 30 days after signup if the email is never confirmed.

Consent records

Kept alongside your account as a history of which policy version you agreed to, and deleted when your account is deleted.

Aggregate statistics

Contain no personal data, so they're kept indefinitely to support public health reporting.

Your rights

You're in control of your data. At any time, you can:

Access it

View every saved assessment and your account details from your dashboard.

Correct it

Update your account details, or submit a new assessment if your health details change.

Export it

Download your saved assessment history as a file from the assessment history page.

Delete it

Permanently delete individual assessments, or your entire account and everything tied to it, from Account settings.

Children's privacy

Creating an account requires you to be old enough to enter into this agreement under the law that applies to you (typically 18). The anonymous screening tool itself may be used on behalf of someone else, for example a parent checking a family member's risk or a health worker supporting a patient, without creating an account. We do not knowingly collect account registrations from children.

Changes to this policy

We may update this policy as the platform grows. Meaningful changes will update the policy version above, and, where required, you'll be asked to review and re-confirm your consent the next time you sign in.

Questions about your data

Reach out any time by email. Requests to access, correct, export, or delete your data are handled personally and promptly.