Privacy Policy

At Infinity Global Solutions LLC ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal health information. This Privacy Policy explains how HealthSync AI ("the App") collects, uses, stores, and protects your data.

1. Information We Collect

We collect information to provide you with a personalized and intelligent health tracking experience. This includes:

• Personal Information: Name, date of birth, email address, phone number, and physical address.
• Health Information: Biometrics (height, weight, blood type), medical history, chronic conditions, medications, allergies, and lab results.
• Activity Data: Step count, exercise logs, nutrition inputs, and sleep patterns.
• Device & Usage Data: IP address, device type, operating system, and interaction metrics within the App.

2. How We Use Your Data

Your data is strictly used to improve your health journey and provide the services you requested. We use your information to:

• Generate your personalized HealthSync AI ID and health scores.
• Provide AI-driven insights, recommendations, and health coaching.
• Send medication reminders, appointment alerts, and hydration notifications.
• Enable telehealth connections and location-based nearby care searches.

3. Data Storage & Security

Security is our highest priority. We use bank-grade AES-256 encryption for data at rest and TLS 1.3 for data in transit. Your health information is stored securely on servers located in the United States that are routinely audited for compliance.

4. Data Retention

HealthSync AI stores and retains user data to provide our services. We are not a no-retention service. Because the app's purpose is to act as a longitudinal personal health record, personal, health, activity, and device data is retained for as long as your account remains active. Historical entries are kept so that trends, scores, and AI insights work over time.

• Account Deletion: When you delete your account from your Profile settings, your profile and all associated records (health logs, vitals, medications, nutrition, activity and route data, appointments, notifications, promo redemptions, sessions, etc.) are permanently erased from our production database immediately, and your login sessions are revoked. The account record itself is anonymized into a tombstone (identifiers removed) rather than the row being dropped, precisely because the legally-required security-log and billing entries must stay unlinkable to a person. Deletion is irreversible.
• Deactivation vs Deletion: You may instead deactivate your account, which ends all active sessions and hides the account from use, while preserving the data so it can be restored if you return.
• Encrypted Backups: Residual copies of your data may persist in encrypted operational backups for a limited period (up to 30 days) after deletion, after which they are overwritten.
• Security, Access, and Audit Logs: Authentication events, consent records, and sensitive-record access logs are retained separately for security, abuse-prevention, and compliance purposes for up to 6 years, even after account deletion, and are not used for marketing or profiling.
• Billing and Transaction Records: Payment and subscription records are retained as required by tax and accounting law (generally 7 years) and are held by our payment processor as well.
• Synced Data: HealthSync AI keeps only the readings it has synced into your HealthSync record from Apple Health or Android Health Connect. Revoking permission in iOS/Android settings stops future syncing, and deleting your account removes the synced copies. The originals remain under your control in Apple Health or Health Connect.
• Anonymous/Aggregated Analytics: Data that has been de-identified and aggregated so it can no longer be linked to an individual may be retained indefinitely for product improvement.
• Enterprise/Employer Accounts: For members provisioned through an employer, school, or care organization, the organization's own contract or retention schedule may require records to be kept for a defined period; those records are governed by that agreement, and the organization is notified before bulk deletion.
• Shared Content: Content created in shared spaces (for example, group challenges the user started) may be retained in de-identified form so other participants' records stay intact.

If you wish to request deletion or have questions about our retention policies, please contact us at info@infinityslns.com.

5. Third-Party Sharing

We never sell your personal or health data to advertisers or data brokers. We only share information with third parties when absolutely necessary, such as:

• Healthcare providers, only when explicitly authorized by you.
• Secure cloud infrastructure providers hosting the App's database.
• Legal authorities if required by a valid subpoena or court order.

6. Cookies and Tracking Technologies

We use essential cookies to maintain your logged-in session securely. We may also use anonymous analytics tracking to understand app performance and resolve crashes. You can manage your cookie preferences in your device settings.

7. Your User Rights

You have full control over your health data. You possess the right to:

• Access: Request a copy of all data we hold about you.
• Export: Download your records and HealthSync ID anytime.
• Deletion: Permanently delete your account and all associated health data.

8. HIPAA Awareness

While HealthSync AI acts as a personal health record (PHR) and may not be fully subject to the Health Insurance Portability and Accountability Act (HIPAA) as a covered entity in all use cases, we voluntarily adhere to HIPAA-aware security protocols and best practices to ensure your data remains confidential and secure.

9. Children's Privacy

HealthSync AI is not intended for use by individuals under the age of 18 without parental consent. We do not knowingly collect personal information from children.

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect new features or legal requirements. We will notify you of any material changes via email or an in-app alert.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact our privacy team:

Email: info@infinityslns.com
Infinity Global Solutions LLC