Last updated: September 22, 2026
Privacy Policy
Hastova Health Privacy Policy
Last updated: 2026-09-22
Your privacy is the foundation of Hastova Health. This policy explains what we collect, how we use it, and what choices you have.
1. What we collect
- Account information. Your name, email address, role (patient / caregiver / provider / admin), and authentication details.
- Health data you enter. Medications, doses, lab results, scan reports, symptoms, emergency contacts, preferences. We never collect health data passively — only what you choose to enter.
- Usage data. Page loads, button taps, AI call counts, and error logs used to keep the service running and to improve it.
2. How we store data
- All data is stored in Supabase Postgres, encrypted at rest, on US-based infrastructure.
- All traffic between your device and Hastova Health is encrypted in transit via HTTPS.
- Access to the database is restricted to Hastova Health administrators and is row-level-secured: by default, every user can only read their own data.
3. Who can access your data
- You — always.
- Caregivers and doctors you explicitly invite — only the permissions you grant.
- Hastova Health administrators — only when troubleshooting a specific issue you have reported, and only for the duration needed.
- Nobody else.
4. What Hastova Health does NOT do
- We do not sell your data.
- We do not share your data with pharmaceutical companies, insurance companies, employers, or advertisers.
- We do not use your data to train AI models without your explicit consent.
5. AI data processing
When you use an AI feature, the data necessary to answer your question (a medication list, recent lab values, the question you asked) is sent to Anthropic via their API. Per Anthropic's API terms, that data is processed to generate the response and is not stored long-term or used to train their models.
6. Data retention
- We retain your data while your account is active.
- When you request deletion, all your data is removed within 30 days, including from backups within 90 days.
- Audit logs that do not contain health information (login times, AI call types and token counts) may be retained for up to 24 months for security and billing reconciliation.
7. Your rights
- Access — see all data we have about you in the More tab.
- Correction — edit any field in your profile, medications, or results.
- Deletion — delete your account and all data from Legal & Privacy.
- Portability — download a JSON export of everything we have about you, ready to import elsewhere.
8. Contact
For privacy questions or to exercise any right above: support@hastova.com.
Terms of Service
Hastova Health Terms of Service
Last updated: 2026-09-22
These Terms of Service ("Terms") govern your use of the Hastova Health platform ("Hastova Health", "we", "us"). By creating an account or using the service you agree to these Terms.
1. What Hastova Health is
Hastova Health is a personal health tracking tool that helps you organize your medications, lab results, and clinical reminders, and that uses AI to explain your results in plain English.
2. What Hastova Health is not
- Hastova Health is not a medical device. It is not FDA cleared or approved for diagnosis, prevention, or treatment.
- Hastova Health is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of a qualified healthcare provider with any questions about a medical condition.
- Hastova Health is not currently a HIPAA covered entity. We voluntarily adopt HIPAA-level security practices but the regulatory protections that apply to a covered entity do not apply to Hastova Health.
3. Your responsibilities
- Accuracy. You are responsible for the accuracy of every value you enter. Hastova Health's explanations only reflect what you have entered.
- Account security. Keep your login credentials confidential. Do not share your account with anyone else.
- Lawful use. Do not use Hastova Health to impersonate another person, to upload data that you do not have the right to upload, or to interfere with the service.
4. AI features
Some features call third-party AI providers (currently Anthropic). When you use those features your data is transmitted to those providers under their terms. AI explanations are educational only and may be incorrect or incomplete.
5. Intellectual property
- Hastova Health owns all rights in the platform, including software, design, and trademarks.
- You retain ownership of the health information you enter. You grant Hastova Health a limited license to process that information solely to provide the service to you.
6. Limitation of liability
TO THE FULLEST EXTENT PERMITTED BY LAW, HASTOVA HEALTH AND ITS OPERATORS ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, INCLUDING ANY HEALTH DECISIONS YOU MAKE BASED ON AI EXPLANATIONS OR OTHER OUTPUT FROM THE SERVICE. OUR TOTAL LIABILITY FOR ANY CLAIM IS LIMITED TO THE AMOUNT YOU PAID US IN THE TWELVE MONTHS BEFORE THE CLAIM.
7. Termination
You may delete your account and all your data at any time from the Legal & Privacy section in the More tab. We may suspend or terminate accounts that violate these Terms.
8. Governing law and disputes
These Terms are governed by the laws of the State of Florida, United States, without regard to conflict-of-law principles. You agree that any dispute will be brought in the state or federal courts located in Miami-Dade County, Florida.
9. Changes
We will notify you at least 30 days before any material change to these Terms takes effect.
10. Contact
support@hastova.com
HIPAA Notice of Privacy Practices
Notice on HIPAA
Last updated: 2026-09-22
The Health Insurance Portability and Accountability Act (HIPAA) applies to covered entities — healthcare providers, health plans, healthcare clearinghouses, and their business associates.
Hastova Health is not currently a HIPAA covered entity. Hastova Health is a patient-directed personal health tool. You choose to enter information, you control who sees it, and you can delete it at any time.
That said, your privacy is the entire reason Hastova Health exists. We voluntarily follow HIPAA-level practices:
- Encryption of data at rest and in transit.
- Access controls that restrict the database to row-level access by default.
- Audit logging of administrative access and AI calls (without storing health content).
- Breach notification within 72 hours if we ever discover unauthorized access to your account.
When Hastova Health adds clinical partners (e.g., direct lab feeds) we will sign Business Associate Agreements and update this notice accordingly.
AI Features & Consent
AI Consent Notice
Last updated: 2026-09-22
When you use an AI feature in Hastova Health (Daily Insight, Lab Explanation, Ask AI, Drug Interaction check, etc.), the following happens:
1. The minimum data needed to answer your question (e.g., a medication list, the question itself, recent lab values) is sent over HTTPS to Anthropic, the maker of Claude.
2. Anthropic processes that data to generate a response and returns it to Hastova Health, which displays it to you.
3. Anthropic does not store or train on this data per their API terms.
AI explanations are educational and may be incomplete or wrong. They are not a medical diagnosis. Always confirm important findings with your healthcare provider before changing your medication, your routine, or seeking emergency care.
By using AI features in Hastova Health you consent to this processing. You can disable AI features at any time by avoiding the AI buttons, or you can request that no AI calls be made on your behalf by emailing support@hastova.com.
Product Updates and Support
Product Updates and Support
Last updated: 2026-09-22
Hastova Health is actively developed. That means:
- Features are added and refined regularly.
- The interface is updated based on patient and clinical feedback.
- New data fields, charts, and notifications arrive over time.
For medical decisions always consult your healthcare provider. Hastova Health is a tool that supports — but does not replace — your care team.
If something does not work the way you expect, please use the 💬 feedback button on any screen, or write to support@hastova.com. Thank you for being a Hastova Health member.
Contact
Questions about your privacy or these terms? Email us at support@hastova.com
© 2026 Hastova Health LLC. All rights reserved.