Our principles
- Your data is yours. You decide what to add, what to share, and when to delete it.
- No advertising use. We do not use health data for advertising and we do not sell personal data.
- Minimum access. Only the people and services that need data to run a feature can access it.
- Employers see aggregates only. Corporate programmes receive anonymised, aggregated reports — never an individual’s health data without that person’s explicit consent.
How data is protected
- Encryption: data is encrypted in transit over HTTPS/TLS and encrypted at rest.
- Access control: role-based access with the principle of least privilege; staff access to health data is restricted and logged.
- Account security: sign-in is protected with one-time passwords (OTP), and sessions can be ended by signing out.
- Payments: handled by PayU — card and bank details never reach our servers.
- Forms: website forms are protected against spam and abuse with Cloudflare Turnstile.
Apple Health
InfiniCare only reads the Apple Health data types you approve, uses them only to provide the features you turned on, and never uses them for advertising or sells them. You can revoke access at any time in iPhone Settings → Health → Data Access & Devices → InfiniCare.
AI Health Assistant
Questions you ask the Health Assistant — typed or spoken — are processed by our AI provider, OpenAI, to generate an answer. The microphone is used only while you are recording a question. Answers are general information, not a diagnosis.
Deleting your data
Delete your account and data at any time in the app under Profile → Delete Account, or email hello@infinicare.ai. Data is removed from active systems within 90 days and from backups within a further 180 days. Full steps are at https://infinicare.ai/support.
Report a security issue
If you believe you have found a security vulnerability or that your account has been accessed without permission, email hello@infinicare.ai with the subject “Security”. Please give us reasonable time to investigate before sharing details publicly. We will acknowledge your report and keep you updated.