Privacy Policy
1 Overview
Zovio Health provides a mobile and web health-information service that helps users understand health reports, track family health records, set reminders, and receive educational explanations. Zovio is not a medical device and does not provide medical advice, diagnosis, treatment, emergency care, or a substitute for a qualified healthcare professional.
For medical decisions, urgent symptoms, pregnancy concerns, medication changes, diagnosis, or treatment, always consult a qualified healthcare professional.
2 Information We Collect
- Account and identity information: name, email address, phone number, Firebase user ID, login method, language, profile details, biological sex, age or date-related profile fields where provided.
- Health reports and documents: PDFs, photos, images, ultrasound reports, prescriptions, discharge summaries, consultation notes, referral documents, extracted lab values, report dates, units, reference ranges, and document metadata.
- Health profile data: medicines, medication reminders, manually entered lab values, manual weight and blood-pressure logs, pregnancy tracker details, family relationships, managed profiles, profile-sharing permissions, and saved risk/health insights.
- Apple Health and Health Connect data: only after you grant permission, Zovio may read selected signals such as steps, sleep, weight, heart rate, resting heart rate, oxygen saturation, blood glucose, blood pressure, respiratory rate, and VO2 max for educational smart health alerts and trend context.
- Voice and AI interactions: voice recordings you submit by tapping voice input, transcribed text, copilot questions, AI responses, language choice, and related usage metadata. Copilot history may be retained for continuity and safety, subject to periodic pruning.
- Family and sharing data: family invite codes, QR-link requests, relationships, accepted/rejected links, notification subscriptions, and permissions controlling what family members can view or receive.
- Notifications and device data: push tokens, notification preferences, delivery status, app version, platform, and device identifiers or hashes needed to operate notifications and sessions.
- Operational analytics: app opens, session duration, feature usage, upload funnel events, copilot usage counts, passive-vitals sync status, and error states. Analytics must not contain raw lab values, report text, OCR text, medicine names, copilot prompts or answers, pregnancy free text, or raw passive vital samples.
3 How We Use Information
- To create and secure your account, including email or mobile OTP sign-in.
- To extract, structure, and display health information from reports and documents you upload.
- To show health timelines, trends, reminders, family views, pregnancy summaries, and educational risk context.
- To provide bounded AI explanations using your saved context, while keeping medical-disclaimer guardrails.
- To send reminders, service notifications, passive health alerts, and family-request notifications based on your preferences.
- To maintain security, prevent abuse, debug failures, measure product reliability, and improve user experience.
- To train or improve internal models only where you have explicitly consented and only after de-identification. Names, email, phone numbers, and original files are not used for training.
4 AI, Voice, and Document Processing
Zovio may use AI service providers to transcribe voice, structure health documents, and generate educational explanations. Sarvam may be used for speech-to-text and text-to-speech. Gemini may be used for medical-language understanding and educational explanations. These services process the minimum information needed for the feature requested.
AI outputs are educational and may be incomplete or incorrect. They should be reviewed with a qualified healthcare professional and should not be used for diagnosis, treatment, medication changes, emergency decisions, or pregnancy risk decisions.
5 Health and Fitness Data
Health and fitness data is sensitive. Zovio uses it only to provide user-facing health-record, family-care, reminder, trend, pregnancy, and educational insight features that you choose to use.
- Health and fitness categories: lab values, report findings, medicines, medication schedules, pregnancy tracker details, manually entered vitals, body measurements, activity signals, sleep, heart-rate data, oxygen saturation, blood pressure, blood glucose, respiratory rate, VO2 max, and similar wellness signals where available and permitted.
- Purpose limitation: this data is used to organize records, show trends, support medicine reminders, help family monitoring where you permit sharing, provide passive health alerts, and generate educational explanations. It is not used to make emergency decisions or replace a clinician.
- No advertising or tracking: health and fitness data is not sold, used for advertising, used for cross-app tracking, shared with data brokers, or used for credit, employment, insurance, or eligibility decisions.
- Family sharing controls: accepted family members can access health or fitness information only according to in-app permissions, notification subscriptions, and sharing choices.
- Analytics limitation: operational analytics must not include raw lab values, raw report text, OCR text, medicine names, pregnancy free text, copilot prompts or answers, or raw passive vital samples.
- Training limitation: health and fitness data is not used for model training unless you explicitly consent where that feature is available. Names, email addresses, phone numbers, original files, and direct identifiers are not used for training.
6 Apple Health and Health Connect
Zovio reads Apple Health or Android Health Connect data only after you grant permission on your device. You choose what categories are shared and can revoke access at any time in Apple Health, iOS Settings, or Android Health Connect settings.
- HealthKit and Health Connect data is used for app functionality such as trends, smart health alerts, and family-vitals context where enabled.
- HealthKit and Health Connect data is not used for advertising, cross-app tracking, data brokerage, marketing profiling, or sale to third parties.
- HealthKit data is not used for model training unless a future feature asks for explicit consent and complies with applicable platform policies.
- Zovio does not write data back to Apple Health or Health Connect unless a future feature clearly asks for permission and explains what will be written.
7 Sharing and Service Providers
We do not sell your personal health data. We share information only as needed to provide requested features, operate infrastructure, comply with law, or support user-directed sharing.
- Infrastructure and authentication: AWS and Firebase/Google services.
- Notifications: Firebase Cloud Messaging and Apple Push Notification service.
- AI and voice processing: Gemini/Google and Sarvam where used for requested features.
- Platform health data: Apple Health and Google Health Connect, controlled by your device permissions.
- Family sharing: accepted family members may see profile/report/vitals information according to in-app permissions and sharing settings.
8 Retention and Deletion
Signed-in account data is retained while your account is active so Zovio can provide saved reports, history, reminders, family features, and educational context. Anonymous checks do not create an account. Some operational logs, security records, and legally required records may be retained for limited periods.
You can request account deletion at zovio.health/delete-account. When deletion is processed, we delete account profile data, uploaded/saved reports, extracted values, saved insights, family links, notification tokens, preferences, and app data associated with the account, subject to legal, security, fraud-prevention, or backup-retention limits.
9 Your Choices
- Update or correct profile information in the app.
- Enable or disable push notifications and family notification subscriptions.
- Grant, revoke, or limit Apple Health / Health Connect permissions from device settings.
- Grant or revoke model-training consent where available.
- Delete your account or request deletion by email.
10 Children and Family Profiles
Zovio may allow users to create or manage family profiles. If a profile relates to a minor or dependent, the person creating or managing it must have appropriate authority. Family links and managed profiles should be used only with consent and a legitimate family-care purpose.
11 Security
We use HTTPS/TLS, encrypted storage, access controls, token-based authentication, audit logging, and PHI-safe analytics rules. No system is completely secure, so please contact us promptly if you believe your account or data has been compromised.
12 Changes
We may update this Privacy Policy as Zovio changes. Material changes will be posted on this page and, where required, communicated in the app or by other appropriate means.