Consent to store and use your health information

Belly keeps your pregnancy and medical history so your own physicians can answer your questions with your whole story in front of them. This says what we collect, what we do with it, who sees it, and how to take it back. You can change your mind at any time.

What we collect

• Your account: your email, and your name if you give it.
• Your history: your answers about your health, past pregnancies, medications, allergies, family history and this pregnancy.
• Your questions: the questions you ask, the warning signs you check, and your conversations with your physicians.
• Your readings: blood pressure readings you log.
• Records you import: if you choose to connect your health system, the conditions, medications, allergies and vital signs in that record.
• Basic technical information needed to keep you signed in and the Service secure, such as session and sign-in records.

We don’t collect your location, contacts, or anything from other apps. Your health information is encrypted and never tracked. We do count how the app is used, like which pages are opened and which buttons are pressed, to make it better. Vercel, our host, does the counting. It uses no cookies and never sees your health information.

What we use it for

Only to run Belly for you:

• to show your information to you;
• to show it to the physicians you choose to add;
• to point out published guidelines that may apply to you, so you can ask your physician about them;
• to explain a lab result when you ask Belly about one. For that, Belly sends the test, your number, its range, your stage (trying, how many weeks pregnant, or after birth) and a few yes-or-no facts that bear on that result (for example, whether you have a thyroid condition) to an AI model made by Anthropic, which writes the answer. For a lab result, Belly never sends Anthropic your name, your birth date, your records or anything you typed;
• to work out what you are asking when you type a question. For that, Belly removes the names, email addresses, phone numbers, dates and places (a hospital or clinic by name, a street address) it can detect, then sends your words to an AI model made by TypeSafe AI. It can miss some, so there is no need to type your name. That model works out what you are asking: which test, your number, your stage, things you say about your health, the topic, and whether it sounds like something to call your doctor about now. When Belly answers a question you typed, the same model also picks the lines of Belly’s sources that bear on it and checks the answer against them. It writes no answer. Belly does not keep your words. TypeSafe may keep them for a time; we cannot yet say how long;
• to answer a question you type, when it is about a topic Belly has sources for. For that, Belly sends your words, after the same removal, with your stage (trying, how many weeks pregnant, or after birth) and passages from public health sources, to the AI model made by Anthropic, which writes the answer from those passages. The removal can miss some, so if you type something that says who you are, Anthropic may receive it. Belly sends Anthropic nothing from your account or your records, and does not keep your words or the answer. Anthropic may keep what it receives for a time; we cannot yet say how long;
• to let you and your physicians know something is waiting. These emails never contain health information;
• to keep the Service working and secure, and to meet legal obligations.

We don’t sell your information. We don’t use it for advertising. We don’t share it with employers, insurers or data brokers.

We don’t use your information to train AI models. If we ever want to use information to improve Belly’s own models, we will ask for your separate, specific permission first, and saying no will not change your use of Belly.

Who can see it

• You.
• Physicians you add. A physician sees your information only after you add them to your care team by email, and only while they stay on it. Adding a physician is your consent to share your history, questions and readings with them. You can remove a physician at any time, and they lose access at once. Anything they already saw, or copied into their own medical records, stays under their control and their legal duties.
• Companies that run Belly’s infrastructure, only as needed to provide the Service and under contracts that limit their use: database hosting (Supabase), app hosting (Vercel) and email delivery (Resend).
• Anthropic, the company that makes the AI model that explains a result you ask about and answers a question you type. For a result, it receives only the test, number, range, stage and yes-or-no facts listed above, never your words. For a question you type, it receives your words after Belly has removed the names, email addresses, phone numbers, dates and places it can detect, with your stage. It receives nothing from your account or your records.
• TypeSafe AI, the company that makes the AI model that reads a question you type. It receives your words after Belly has removed the names, email addresses, phone numbers, dates and places it can detect, and nothing from your account or your records.
• Anyone the law requires, for example under a valid court order. We’ll tell you unless the law forbids it.
• A buyer, if Belly is sold or merged. Your information would move only under this consent, and we’d tell you first so you could delete your account.

Belly staff do not read your health information except when you ask us for help, or to investigate a security problem.

How we protect it

Your history answers, messages, readings and imported records are encrypted before they’re stored, with a key held separately from the database, and all traffic is encrypted in transit. Every request is limited by database rules to what that person is allowed to see. Some details needed to route questions, such as whether a question is urgent and which warning signs were checked, are protected by the same rules but not separately encrypted.

No system is perfectly secure. If your information is ever exposed, we will tell you, and the authorities where required, as the law requires.

Belly and HIPAA

Belly is not your health care provider or health plan, so HIPAA may not apply to the information you put in Belly. We protect it as described here anyway, and state health privacy laws may give you additional rights.

Your choices

• Download everything you’ve given Belly, at any time, from Settings.
• Delete your account and everything in it, at any time, from Settings. Deletion is immediate and permanent in Belly.
• Withdraw this consent by deleting your account. We can’t run Belly for you without storing your information, so withdrawing ends your use of Belly.
• Remove a physician from your care team at any time.
• Ask us anything about your information at hello@bellyhealth.app. If you live in a state that gives you more rights, such as Washington, California, Connecticut or Nevada, you can use them by writing to the same address, and we won’t treat you differently for doing so.

How long we keep it

Until you delete it or your account, or until we stop the Service, and we’ll give you a chance to download it first. We keep a record of which version of this consent you accepted, and when, for as long as the law requires.

Changes

If we change how we collect, use or share your health information, we’ll ask for your consent again before the change applies to you. You’ll decide separately, each time, which physicians can see your information.