Privacy Policy

The short version

Your health information belongs to you. Serenzio LLC ("Serenzio," "we") stores it only so the app can show it back to you, we never sell it, we show no ads, and we use no advertising trackers or analytics. You can permanently delete everything at any time from Settings.

What we collect

Your account: the name, email address, and profile photo from the Google account you sign in with — nothing else from Google.

Your health information: the conditions, medications, dose check-offs, appointments, providers, documents, notes, and emergency-contact details you choose to enter. You control all of it, and you can edit or delete any of it.

How it's stored

Your information is stored in the United States and is encrypted both while traveling between your device and our servers and while stored. Access requires your Google sign-in, and each account's information is kept strictly separate.

Medication label scanning

When you choose to add a medication by photo, the picture you take is sent over an encrypted connection to Anthropic's Claude AI service, which reads only the medication details (name, strength, form, and directions). Your photo is analyzed and immediately discarded — it is never stored on our servers or in our database. Location and device information embedded in photos is removed before processing. Anthropic does not use data sent through its API to train its AI models by default. Nothing is added to your medication list until you review the details and tap Save.

Health documents

When you save a document (a photo or PDF of lab results, an insurance card, a visit summary, and so on), it is stored encrypted in the same protected database as the rest of your information, and included in our daily backups. Location and device information embedded in photos is removed before storage.

If automatic naming is available, the first page is sent over an encrypted connection to Anthropic's Claude AI service, which suggests only a name, type, and date for the document — it is instructed never to return the document's contents or any personal identifiers, and the image is discarded immediately after. Nothing is saved until you review and tap Save.

Each document has a "Just me" switch. When it's on, that document is never shown to Family & Friends viewers — even though they can see the rest of your information. Deleting a document permanently removes both its record and its files.

Family & Friends sharing

Sharing happens only when you invite someone, and it is read-only — invited people can see your information but never change it. You can remove someone's access at any time from Settings, effective immediately.

Services we rely on

Google (sign-in only) · Anthropic Claude (label and document scanning, as described above) · Resend (sending your invitation emails) · the National Library of Medicine's RxNorm service (matching medication names — only the name you type or scan is sent, never your identity) · MongoDB Atlas and Render (encrypted hosting of the app's database and server, in the United States). None of these are permitted to use your information for their own purposes.

Notifications

Medication and appointment reminders are created on your device, and their text is deliberately generic — a reminder never shows a medication name on your lock screen.

Deleting your data

Settings → Delete account permanently removes your account and every piece of health information connected to it — conditions, medications, dose history, appointments, providers, documents, notes, sharing connections, and sign-in sessions. This is immediate and cannot be undone.

Questions

Serenzio is made by Serenzio LLC. Contact us at privacy@serenzio.org. If we ever make meaningful changes to this policy, we'll update this page and note the date at the top.