Privacy Policy
Last updated: November 5, 2026
Clarifyz (the "app") helps you organize and understand your medical information. That is the most sensitive information there is, so this page says plainly what is collected, why, who can see it, and how to delete it.
In short
- Your information is used only to provide the service. We don't sell it, use it for advertising, or build marketing profiles from it.
- Only you, and the people you choose, can see your file. For each person you choose exactly which areas they see.
- Your personal journal is completely private: even our servers can't read it.
- An AI model reads documents and questions to extract values and answer. Our AI providers don't use your information to train models.
- You can download all your information or delete your account entirely, at any time, from Settings.
Who is responsible for your information
The service is operated by Or Tomer Toker, P.O. Box 1366, Bat Hefer, Israel ("we"). For any privacy question: info@clarifyz.app.
What we collect
Account: email address, password (stored only as an encrypted hash), the two-step sign-in method you set up, language, time zone and reminder preferences.
Your medical file: documents you upload or that are sent to the file's email address, and what is extracted from them (test results, findings, treatments, medications, appointments). Also what you enter yourself: diagnosis, symptoms, questions for your care team, care team contacts, and conversations with the in-app assistant.
Personal journal and personal conversations: what you write in the journal. It is stored so that only you can see it. A person you choose as a "trusted person" can see entries only under the rules you set, and never the entries you marked "only mine, forever".
Mail with your care team: messages sent from or to the file, including sender and recipient addresses and attachments.
People you invite: when you invite a family member, the label you gave the invite and the permissions you chose.
Technical information: an activity log for the file (who did what and when, such as uploading a document or changing permissions), a device identifier for notifications, and a daily count of AI actions to prevent misuse. Our infrastructure providers keep technical access logs (such as IP addresses) for security.
On your device: journal drafts not yet saved, files waiting to upload without a connection, and the inactivity lock state. They are removed from the device when you sign out.
Why we use it
- To provide the service: read documents, show trends, answer questions and prepare you for appointments.
- To recognize situations that need a call to your care team (for example fever with low blood counts) and show a safety alert.
- To send reminders you asked for. Notifications are generic ("You have a reminder in your file") and contain no medical information.
- To keep your account secure and prevent misuse.
- To comply with the law.
We process your information based on the explicit consent you give when you start using the app, and to provide the service you asked for. You can withdraw consent at any time by deleting your account.
Artificial intelligence
To read documents and answer questions, relevant content from your file is sent for processing to an AI provider:
- Anthropic (USA): the Claude model reads documents, extracts values and answers in the chat. Under Anthropic's commercial terms the information is not used to train models and is deleted from their systems within 30 days, except where needed to enforce their usage policy or required by law.
AI can make mistakes. It is not a doctor, does not diagnose and does not recommend treatment. Values extracted from documents are shown for your confirmation, and every medical decision is made with your care team.
Who we share it with
People you choose: family members or friends you invited, according to the permissions you gave each of them, and the care team members you sent mail to from the file.
Providers that run the service for us, only as needed and under agreements that require them to protect the information:
- Supabase: database, file storage, sign-in and server functions. Servers in Frankfurt, Germany.
- Vercel: website hosting. Requests are processed in Frankfurt, Germany; the site's own files (not your information) are served from a global network.
- Anthropic: AI processing, as described above.
- Resend: sending and receiving mail with your care team, and account emails (sign-up confirmation, password reset).
- Google: only if you choose to import files from Google Drive. The app gets access only to the files you pick; they are downloaded and the access is revoked right after.
- Apple and Google: delivering notifications to your phone. The content is generic and contains no medical information.
When the law requires it: if we receive a court order or a legal demand. Where possible, we will tell you first.
We don't sell information, share it with advertisers, insurers or employers, or use it for research without your separate, explicit consent.
International transfers
Your information is stored in the European Union (Germany). Some processing, mainly AI processing, takes place in the United States. These transfers follow Israel's privacy regulations and the providers' agreements, which require them to protect the information to an adequate level.
Security
- Information is encrypted in transit and at rest.
- Access rules in the database itself decide who sees what, so a fault in a screen can't expose information.
- Two-step sign-in is required for file owners and anyone who can change the file.
- Automatic lock after 15 minutes without activity, and sign-out after a period of no use.
- Mail from unknown senders is held for your review and doesn't enter the file without your approval.
- An activity log shows you who accessed the file and what they changed.
No system is completely immune. If a security incident affects your information, we will notify you and the authorities as the law requires.
How long we keep it
Your information is kept while your account is active. When you delete your account, the whole file is deleted immediately: documents, files, journal and conversations. Database backups are deleted automatically within 7 days. Technical access logs at our infrastructure providers are kept for a limited time under their policies.
If you joined someone else's file, the information in it belongs to the file's owner. Leaving the file removes your access but doesn't delete the file.
Your rights
- See your information: everything is shown to you in the app.
- Correct it: most information can be edited directly; contact us about the rest.
- Get a copy: Settings → Download all information.
- Delete it: Settings → Delete account.
- Withdraw consent at any time by deleting your account.
For a request or question: info@clarifyz.app. We reply within 30 days. You may also contact Israel's Privacy Protection Authority. If you live in the European Union, you also have your rights under the GDPR, including the right to complain to your country's supervisory authority.
Age
The service is intended for people aged 18 and over.
Cookies and on-device storage
We use only the cookies and local storage the app needs to work: keeping you signed in, the interface language, the inactivity lock and unsaved drafts. There are no advertising cookies and no third-party tracking or analytics.
Changes to this policy
If we change anything material, we will tell you in the app and ask for your consent again before you continue.
Contact
Or Tomer Toker
P.O. Box 1366, Bat Hefer, Israel
info@clarifyz.app