Privacy Policy
TensorHealthWell™ ("THW", "we") is building the Personal Health Vault ("PHV") — an application that helps you gather, organize, and protect your own health records. Incorporation as a Delaware Public Benefit Company is planned. This policy covers both this website and the PHV application in its current development phase. Contact: privacy@tensorhealthwell.com.
The short version
- This website collects no personal information. No accounts, no forms, no analytics, no advertising trackers, no cookies set by us.
- The PHV application is not yet available to the public. The only personal health data it touches today is the founder's own, used to build and test the product, plus synthetic (fake) test records.
- When the PHV launches, your data will be yours. Collected only at your direction, used only to provide the service to you, never sold, never used for advertising. We will publish a complete, plain-language policy before any external user can create an account.
1. This website
We host a static informational site. Our hosting provider processes basic technical request data (such as IP address and browser type) to serve and secure the pages; we do not use it to identify or profile visitors, and we add no analytics or tracking of any kind.
2. The PHV application (development phase)
Your right to obtain your own medical records electronically is established by federal law — including the HIPAA right of access, the 21st Century Cures Act's information-blocking rules, and the CMS Patient Access API requirements — and the PHV exists to help you exercise it. The PHV connects to health-data sources — such as patient-access APIs offered by health systems and insurance plans — only at the direction of the individual whose records they are, using read-only access. During development:
- The only live personal data processed is the founder's own health records, retrieved with his own credentials and consent, alongside synthetic test data.
- Retrieved data is stored on infrastructure under our control, encrypted in transit and at rest, and is not shared with anyone.
- No third-party advertising or analytics code exists anywhere in the application. We enforce this with an automated audit in our build process.
3. Commitments that carry into every future version
- We will never sell your personal data — in any form, to anyone.
- We will never share your data without your informed consent and a clear, articulable benefit back to you.
- We will never use your health data for advertising.
- The PHV gathers, organizes, and protects your records. It does not analyze, interpret, or diagnose — and we will never present it as doing so.
- We make no automated decisions about you that carry legal or similarly significant effects, and we never profile you for anyone else's purposes. The PHV's automation exists strictly to organize your records for you, and nothing else.
- We will never attempt to re-identify de-identified data, and we will require the same of anyone who works with us.
4. Your rights
Write to privacy@tensorhealthwell.com with any privacy question or request. Full data export (free, in standard formats) and verifiable deletion are designed into the product from the first version — when the PHV launches, you will be able to leave, with everything, at any time. Dormant accounts get the same care: if your account goes unused for an extended period after launch, we will attempt to notify you and offer a full export before taking any action on the account — and dormant data is never repurposed.
5. Where HIPAA fits
THW is not a health-care provider or insurer. When you direct your provider or health plan to transmit your records to your PHV (for example, under your HIPAA right of access or the 21st Century Cures Act API programs), the copy you receive through the app is governed by this policy and by consumer-protection law — including the FTC Act and the FTC Health Breach Notification Rule — rather than by HIPAA. We consider that a responsibility, not a loophole, and the commitments in §3 are written to exceed what those laws require.
6. If TensorHealthWell changes ownership or ceases operating
Your data is never a sellable business asset. If TensorHealthWell is ever acquired, merges, reorganizes, or winds down, your records remain governed by the commitments in this policy: you will be notified before any transition takes effect, you will be given a clear opportunity to export everything and to delete your data entirely, and no data passes to any successor except under these same commitments.
7. Security incidents
If a security incident affects personal data, we will notify affected individuals and regulators as applicable law requires, without unreasonable delay.
8. Children
Neither the site nor the application is directed at children under 18 during the development phase.
9. Changes
Material changes will be posted here with a new effective date. No external user will be onboarded before a complete, user-tested privacy policy is published.