hellawell.Effective 2026-06-13

Privacy policy

What Hellawell is

Hellawell is a private, invite-only health hub operated by one family, for that family. It is not a commercial product: there are no advertisements, no analytics trackers, and no sale or sharing of data for marketing — ever. Only invited family members can create accounts.

What we store

  • Account basics — your name and email address, used for sign-in.
  • Health information you add — lab documents you upload, medications, symptoms, and notes.
  • Health data you choose to sync — metrics from Apple Health (such as sleep, activity, heart, body, and other measurements) sent by the Hub Companion iOS app, only after you explicitly pair your device and grant Health access.
  • Clinical records you choose to sync — lab results, conditions, medications, allergies, and immunizations you have connected to Apple Health from your own healthcare providers (for example Quest, Labcorp, or an Epic/MyChart system), read through Apple Health Records only after you explicitly grant clinical-records access in iOS.

How it's used

Your data is used for exactly one purpose: showing you and the family members you explicitly share with a clear picture of your health. The built-in assistant processes your data to answer your questions about it. Nothing is used for advertising, profiling, or training third-party models.

Apple Health (HealthKit) and clinical records

Health data synced by Hub Companion comes only from devices you pair yourself, with permissions you grant in iOS — including clinical records (labs, conditions, medications, allergies, immunizations) that you have linked to Apple Health from your own providers and explicitly authorize us to read. This data is never used for advertising or other use-based data mining, never sold, and never disclosed to third parties except the service providers below acting on our behalf. You can stop syncing at any time by revoking the device from your Wearables page or removing Health access in iOS Settings.

Where it lives

Data is stored in a private database and processed by a small set of infrastructure providers acting as processors: Vercel (hosting), Neon (database), Clerk (authentication), and Vercel Blob (document storage). The built-in assistant sends your questions and the relevant health context to large-language-model providers (such as Anthropic, OpenAI, Google, and xAI) through the Vercel AI Gateway, which we run under Zero Data Retention: those providers do not retain your prompts or responses and do not use them to train their models. Data is encrypted in transit and at rest. No other third parties receive your data.

Sharing inside the family

Each profile is private to its owner unless its owner explicitly shares it with another family member, at a chosen access level. Sharing can be revoked at any time.

Retention and deletion

Data is kept until you ask for it to be removed. To delete your data or your account, email the address below and it will be done promptly and completely.

Contact

Questions or deletion requests: nick@typoz.co

Not medical advice

Hellawell provides educational information only. It is not a medical device and does not provide medical advice; decisions about treatment belong with your clinician.