Privacy Policy

What we collect

Only what you give us: your email (for your account); your profile (name, branch, service dates, job code — all optional); the locations you log and the years; the exposures and health conditions you record; files you upload (such as a DD-214); the answers you type or speak into the intake; and basic, privacy-respecting usage information to keep the app working.

How your data is protected

Your records live in a database with row-level security, which means each person can read and write only their own data — no other user can see your record. Data is encrypted in transit and at rest, and uploaded files are kept in private storage.

How we use it

Strictly to provide the service to you: to build your timeline, your education pages, and your claim-support packet. We never sell or rent your data, and we never use it for advertising.

AI processing

Some text — the voice-guided intake and the base-history summaries — is processed by Anthropic's Claude API to generate responses. That content is used only to answer you in the moment; it is not used to train AI models, and we send only what's needed.

Service providers

We rely on a small set of vendors to run the app: Supabase (database, authentication, file storage), Anthropic (the AI features above), OpenStreetMap and BigDataCloud (to turn place names into map points), and Vercel (hosting). We do not sell data to data brokers.

Contributing to the collective record (opt-in)

Exposure patterns across many veterans can help get new conditions recognized and support research and legislation like the Breaking the Cascade Act. You can choose to contribute your record to that collective picture in Account → "Help prove what happened to all of us." This is off by default — nothing is ever included unless you turn it on, and you can turn it back off at any time, which removes you from future updates.

When you do opt in, only coarse patterns are used — exposure type, a general place, a year, a condition, and whether it was corroborated. Your name, email, exact coordinates, exact dates, free-text notes, and uploaded documents are never included. Counts are only shown or shared once enough people are included that no individual can be identified. This data is never sold; any research use is under a signed data-use agreement.

Your rights and control

You can view your full record anytime, remove any location you've logged, and request a copy of your data or full deletion of your account by emailing michael@operationwholehealth.org.

A few important notes

Operation Whole Health is not a healthcare provider, and this app is not medical care — so it is not a HIPAA-covered entity. The app is for adults (18+). If we make material changes to this policy, we'll update this page and the date above.