Privacy Policy
This policy explains what information MediWell Insight collects, how we use it, and the choices you have. MediWell Insight provides general education only and is not a healthcare provider.
Who we are
MediWell Insight (the “Service”) is an educational medication and supplement information service provided by A&H NexusWorks LLC (“we”, “us”). We are the controller of the personal information described in this policy.
Contact: ahnexusworks@gmail.com · Mailing address: 4112 53rd Avenue East, P.O. Box 20211, Bradenton, FL 34203, USA
This policy applies to our website at https://app.mediwell-insight.com and our iOS and Android apps.
Information we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Email address, name (optional), password (stored only as a secure hash by our authentication provider) | You |
| Questions and conversation history | The questions you ask, the educational responses generated for you, and conversation titles. These may include health information you choose to share, such as medications, supplements, symptoms or lab values. | You |
| Attachments | Images, PDFs or text files you attach to a question (for example a medication label or lab report). The text or image is used to answer that question; the original file is not stored. | You |
| Preferences | Region, audience/role, language, detail level and output style | You |
| Subscription and usage | Your plan, subscription status and renewal dates, monthly question count, and billing identifiers from Stripe or, for purchases in our mobile apps, from Apple or Google (through RevenueCat). We do not receive or store your full card number. | You, Stripe, Apple, Google, RevenueCat |
| Technical data | IP address, browser or device type, and request logs kept by our servers for security and troubleshooting | Automatically |
We use only essential cookies and local storage needed to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies, and we do not use third-party analytics.
How we use your information
- To provide the Service — generate educational responses to your questions, keep your conversation history, and apply your preferences.
- To run subscriptions — process payments, apply your plan’s features and monthly limits, and handle cancellations.
- To keep the Service safe — detect abuse, enforce our safety rules, secure accounts, and troubleshoot problems.
- To communicate with you — account emails such as verification and password reset, and responses to support requests.
- To meet legal obligations — tax, accounting and lawful requests.
How AI is used
Your questions (and any attachment content) are sent to our AI provider, Anthropic, to generate a response. Under Anthropic’s commercial terms, content sent through its API is not used to train its models. Drug names mentioned in a question may be looked up in the U.S. Food & Drug Administration’s public openFDA database; no personal information is sent with that lookup.
AI-generated responses are educational and may be incomplete or inaccurate. They are not medical advice — see our Terms of Use.
Legal bases (EEA, UK and similar laws)
- Contract — to provide the Service and your subscription.
- Explicit consent — for health information you choose to include in questions or attachments. You can withdraw consent at any time by deleting the relevant conversations or your account.
- Legitimate interests — security, fraud prevention and improving reliability.
- Legal obligation — record-keeping required by law.
Who we share information with
We do not sell your personal information, and we do not share it for targeted advertising. We share it only with service providers that process it on our behalf:
| Provider | Purpose |
|---|---|
| Supabase | Database and account authentication |
| Amazon Web Services | Application hosting |
| Anthropic | Generating AI responses |
| Stripe | Web subscription payments |
| RevenueCat | Managing subscriptions bought in our iOS and Android apps |
| Resend | Account emails |
We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a merger or acquisition (with notice to you).
International transfers
We are based in the United States and our providers process data in the United States and other countries. Where the law requires, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK Addendum.
How long we keep information
- Account, preferences and conversations — until you delete them or delete your account.
- After account deletion — your account and conversations are deleted immediately from our live systems; residual copies in encrypted backups are overwritten within 30 days.
- Deletion record — when an account is deleted we send a confirmation to its email address and keep a short record (email address, account ID, date and billing outcome) with our support team, to show the request was completed and to answer questions about it.
- Billing records — kept by Stripe, Apple or Google as required for tax and accounting law.
- Server logs — kept for up to 30 days, then deleted.
Your rights and choices
Depending on where you live, you may have the right to:
- access or receive a copy of your information (portability);
- correct inaccurate information;
- delete your information — you can delete individual conversations, or your whole account from your account menu → Account & billing (or by emailing ahnexusworks@gmail.com);
- object to or restrict certain processing, and withdraw consent;
- not be discriminated against for exercising your rights.
To make a request, email ahnexusworks@gmail.com. We will verify your identity and respond within the time required by law (generally 30 days, or 45 days in some U.S. states). You may also complain to your local data protection authority.
U.S. consumer health data
Some U.S. state laws (such as Washington’s My Health My Data Act) give specific rights over consumer health data. We collect health-related information only when you choose to include it in a question or attachment, use it only to provide the Service, and never sell it. The rights above apply to this information.
Security
We use encryption in transit (HTTPS), access controls that limit each user to their own data, and least-privilege access for our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Age requirement
The Service is intended for people aged 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact ahnexusworks@gmail.com and we will delete it.
Changes to this policy
We will post any changes on this page and update the effective date. If changes are material, we will notify you in the app or by email before they take effect.
Contact
A&H NexusWorks LLC · ahnexusworks@gmail.com · 4112 53rd Avenue East, P.O. Box 20211, Bradenton, FL 34203, USA