Privacy Policy

1. Privacy First Philosophy

Pivot & Pulse is built with privacy as its primary design directive. We support client-side data sovereignty: your data belongs entirely to you, remains on your device, and is never compiled or traded.

2. What We Collect and Store

• No User Profiles: There are no signup pages, no sign-ins, and no cookies linking you to an account. We compile zero metadata about your identity.
• Local Browser Storage: Your bookmarks, settings, custom prompts, and synthesized care plans are stored exclusively inside your browser's local memory (localStorage). They are never sent to a database.
• Gemini API Key: The key you insert is held locally in your browser storage. Our server routes your requests as a stateless mediator and does not record your key.

3. Third-Party Data Handlers (Google Gemini)

Because the insights are computed by Google's generative models, your de-identified input queries are sent to Google via the Gemini API. Developer queries submitted through API key usage are generally not utilized by Google to train public models, but we advise verifying the latest information at Google's Developer Privacy Policy.

4. Clinical Privacy & HIPAA Compliance

In Care Mode, you are strictly prohibited from entering health goal descriptions that contain personally identifying information. Our server runs an automated PII detector to intercept and block transmissions containing emails, phone numbers, IP addresses, or SSNs. Always construct inputs in an abstract, anonymous manner.

5. Deleting Stored Information

Since your key and data exist solely on your browser, you can completely erase them by clicking the key icon (🔑) in the header to clean the key, or clearing cookies/site settings for Pivot & Pulse in your browser.