Medical Wizard

Medical Wizard Privacy Policy

Effective August 17, 2026 · Version 2026-08-17

This policy applies to the Medical Wizard iPhone app provided by Human Renaissance Corporation (“Human Renaissance,” “we,” “us,” or “our”).

The short version

Medical Wizard keeps its case-file database on your iPhone. We do not offer user accounts, advertising, or cross-app tracking. If you affirmatively enable AI analysis, the records, images, documents, prompts, and related context needed for your request leave the device and are processed by our Cloudflare relay and the AI provider selected for the task. Our relay does not persist request or response content, but an AI provider may retain it under the schedule below.

Data processed

• Clinical records you authorize the app to read from Apple Health, including labs, medications, conditions, allergies, immunizations, procedures, vitals, and clinical notes.
• Files and content you choose to import, scan, photograph, or enter, including PDFs, images, FHIR/C-CDA data, ZIP archives, prompts, and corrections.
• AI inputs, model outputs, citations, and processing status.
• A pseudonymous App Attest device key and short-lived token used to protect the relay.
• A signed App Store transaction used to verify subscription access. We do not receive your Apple Account password or full payment-card details.
• If you contact support, the contact information and message you choose to send.
• Optional content-free diagnostics only if you turn the setting on and the server-side diagnostics switch is enabled. The initial release has that server switch off.

The local case file uses iOS data protection and is excluded from iCloud and device backups. Content-free consent and legal-agreement receipts may remain in local preferences or the Keychain.

Purposes and use

We process data to provide requested features, organize the local case file, perform AI analysis, secure and authenticate the relay, verify subscription access, prevent abuse, answer support, comply with law, and enforce our Terms. Where consent is the legal basis, you may withdraw it in Settings.

We do not sell personal data, use health data for advertising or marketing, build advertising profiles, or permit AI providers to train general models on API content unless we separately disclose and obtain any consent required by law. The app contains no advertising or third-party analytics SDK.

Processors and retention

• Human Renaissance relay on Cloudflare: forwards requests, verifies device and subscription status, and returns results. It has no content database and does not intentionally log request or response bodies. Short-lived tokens expire automatically.
• Anthropic API: standard API inputs and outputs are deleted from Anthropic’s backend within 30 days. Anthropic may keep content longer when required by law or to investigate or enforce its usage policy; flagged content and safety classifications may have longer provider-published periods.
• OpenAI API: abuse-monitoring logs may contain prompts and responses and are retained for up to 30 days by default, longer if legally required. Some API features retain application state; Medical Wizard requests non-persistent operation where supported, but background processing may require temporary provider state.
• Apple: processes HealthKit permissions, App Attest, App Store transactions, subscriptions, and payments under Apple’s policies.
• Support email provider: retains messages under the mailbox practices we apply to support correspondence.

Exceptional legal, fraud, safety, or abuse cases can extend retention. Medical Wizard is not represented as a HIPAA-covered service; do not use it on behalf of a covered entity or business associate unless an authorized written agreement and configuration expressly permit that use.

Your choices and deletion

• Choose specific Apple Health record types or decline access, and use the fictional demo without importing your own data.
• Turn AI analysis off in Settings to stop new sends. This cannot pull back content already within a provider retention window.
• Settings > Delete everything removes the local case file, consent receipts, and locally tracked jobs. Deleting the app removes its local container.
• Request applicable access, correction, deletion, or other rights at justin@humanr.ai.

Consumer health rights, sources, sharing categories, and appeals are detailed in the Consumer Health Data Privacy Policy.

Children, international processing, and security

Medical Wizard is for adults and is not directed to children. Processing may occur in the United States and other processor locations, using contractual or legal transfer mechanisms where required. We use safeguards designed for sensitive data, but no device, network, or processor is perfectly secure.

Changes and contact

Material changes receive a new version and may require acceptance again in the app. Contact Human Renaissance Corporation, Los Angeles, California, United States, at justin@humanr.ai.