Privacy policy

This policy explains what information Ann Schulte, doing business as Belly (“Belly”, “we”, “us”), collects through the Belly website and app, how we use it, who we share it with, and the choices you have.

Your health information is also covered by the Consent to Store and Use Your Health Information, which you accept before using the app. Where the two differ about health information, the consent applies.

Information we collect

From before Belly opened:

• If you joined the waitlist: your email, whether you joined as a patient or a physician, and, for physicians, the specialty if you gave one. Anyone can sign up now, so the waitlist is closed; we still keep the entries we have.

In the app:

• Your account: your email, and your name if you give it.
• If you sign in with Google: your email, your name, and that Google checked your email. Nothing else from Google.
• If you’re a physician: the NPI you enter, and the name, credential, specialty and license state the public NPI registry lists for it.
• Your health information: your history answers, and any records you choose to import from your health system. The consent describes this in full.
• What we never collect: whether a pregnancy was ended on purpose. We don’t ask, and we leave it out of the records we import, along with miscarriages and the medicines and procedures used to end a pregnancy.

Automatically:

• A cookie that keeps you signed in, and a short-lived cookie while you import records from your health system.
• Standard request logs kept by our hosting provider, such as IP address, browser type and the pages requested, used for security and reliability.

We count how the website and app are used, like which pages are opened and which buttons are pressed, with Vercel Web Analytics. It uses no cookies and never receives your health information. We don’t use advertising cookies or tracking pixels.

How we use it

• to run Belly for you, and show your information to you and the physicians you add;
• to send sign-in codes and the emails you expect, such as invitations and notices that something is waiting. Our emails never contain health information;
• to verify that physicians are who they say they are;
• to keep Belly secure, prevent abuse, and meet legal obligations.

We don’t sell personal information. We don’t share it for targeted advertising, and we don’t build advertising profiles. Because of that, there’s nothing to opt out of, and we honor Global Privacy Control signals all the same.

Who we share it with

• Physicians you add to your care team, and only after you add them.
• Companies that run Belly’s infrastructure, only to provide the Service and under contracts that limit their use: Supabase (database), Vercel (hosting) and Resend (email).
• Anthropic, the company that makes the AI model that explains a lab result when a patient asks about one, and that answers a question she types. For a lab result it receives the test, the number, its range, her stage and a few yes-or-no facts. For a typed question it receives her words after Belly has removed the names, email addresses, phone numbers, dates and places it can detect, with her stage and passages from public health sources. That removal can miss some. It receives nothing from her account or her records.
• TypeSafe AI, the company that makes the AI model that works out what a patient is asking when she types a question, picks the lines of Belly’s sources that bear on it, and checks the answer against them. It receives her words after Belly has removed the names, email addresses, phone numbers, dates and places it can detect, and nothing from her account or her records. Belly does not keep her words; TypeSafe may keep them for a time.
• Google, only if you choose to sign in with Google.
• The U.S. National Library of Medicine’s RxNav service, to tell that two medicine names are the same medicine. We send only the medicine’s name or code, never your name, email or anything else about you.
• The NPI registry run by the Centers for Medicare & Medicaid Services, when a physician verifies: we send the NPI she enters to look it up.
• Your health system, when you choose to import your records: you sign in with them, and we receive the records you authorize.
• Anyone the law requires, for example under a valid court order. We’ll tell you unless the law forbids it.
• A buyer, if Belly is sold or merged, under this policy and the consent. We’d tell you first.

Consumer health data

Some states, including Washington and Nevada, have laws about consumer health data. This section is our consumer health data privacy policy under those laws.

• What we collect: the health information listed above, meaning your history answers and imported records, and the fact that you use a pregnancy app.
• Why: only to provide Belly to you, as described in the consent.
• Where it comes from: you, and your health system if you import.
• Who receives it: the physicians you add, and the infrastructure companies named above.
• Your rights: to confirm whether we have your consumer health data and see it, to have it deleted, to withdraw your consent, and to know who received it. Use Settings, or write to us.

We collect and share consumer health data only with your consent, which you give in the app before we collect any, and again each time you add a physician. We never sell it.

Your choices and rights

• Download everything you’ve given Belly, at any time, from Settings.
• Correct your history by changing your answers in the app.
• Delete your account and everything in it, at any time, from Settings. Deletion is immediate and permanent in Belly.
• Have your waitlist entry removed, or ask about anything in this policy, by writing to hello@bellyhealth.app.

People in some states, such as California, Washington, Connecticut, Colorado, Virginia and Nevada, have legal rights over their information. We give the same rights to everyone. We confirm requests using the email on your account or waitlist entry, and we won’t treat you differently for making one.

If we decline a request, we’ll say why. You can appeal by replying to that email, and if you’re still not satisfied, you can contact your state attorney general.

Security

Health information is encrypted before it’s stored, with a key held separately from the database, and all traffic is encrypted in transit. Database rules limit every request to what that person is allowed to see. No system is perfectly secure; if your information is ever exposed, we’ll tell you as the law requires.

How long we keep it

• Your account and health information: until you delete them or your account, or until we stop the Service.
• Waitlist entries from before Belly opened: until you ask us to remove yours, or delete your Belly account.
• Request logs: for a short time, set by our hosting provider.
• Records of which terms and consent you accepted: as long as the law requires.

Children

Belly is for adults 18 and over. We don’t knowingly collect information from anyone younger. If we learn we have, we delete it.

Where your information is stored

In the United States.

Changes

If we change this policy in a way that matters, we’ll tell you by email or in the app before the change applies. For health information, we’ll ask for your consent again.

Contact

Ann Schulte, doing business as Belly. hello@bellyhealth.app.