Do Not Sell or Share My Personal Information

We Do Not Sell Your Data

Panora Health AI does not sell your personal information to third parties — ever. We do not participate in data brokerage, data marketplaces, or any arrangement where your information is exchanged for monetary or other valuable consideration.

Advertising and Your Health Data

We do not share your health data for targeted advertising, cross-context behavioral advertising, or any form of ad personalization. Your health data is used solely to provide you with wellness insights.

We use a pixel from an advertising measurement partner on our marketing, legal and informational pages so we can measure how our advertising performs. The advertising measurement partner receives the address of the marketing page you viewed, the page you came from, your IP address, your browser and screen information, and a cookie identifier that lets the partner recognise the same browser on later visits. California law treats that as sharing personal information for cross-context behavioral advertising, so we disclose it plainly rather than claim otherwise. The pixel does not run on the signed-in application, on the sign-in and account-recovery pages, or on checkout, so the pages where you view or enter health information are never reported to the advertising measurement partner, and the pixel is not present in our mobile app.

To opt out, email us at the address below, or send a Global Privacy Control signal. We honor that signal by not running the pixel at all in that browser.

Sharing Only With Your Explicit Consent

The only time your data would be shared with another person is when you explicitly choose to do so. Panora is designing a future doctor-sharing workflow that would let you prepare and share a wellness summary with a provider you select, with explicit per-instance consent and revocation at any time; that workflow is not yet enabled. No such sharing happens today.

Service Providers That Process Data for Us

To operate Panora Health AI, we use service-provider categories including cloud database and authentication, hosting and server compute, AI inference, research retrieval, wearable connections, payments, email and push delivery, product analytics, error and security monitoring, and advertising measurement. These providers receive only the data needed to perform their function. Where applicable, they operate under data-processing terms or agreements that limit use of your data to providing the service.

• Cloud database and authentication — Encrypted database hosting, authentication, and file storage
• AI inference — After you give permission for AI processing, a third-party AI processing provider receives the selected health and wellness information needed to generate AI-powered features, scheduled insights, and conversational responses on our behalf. This may include submitted text; selected lab values; nutrition, supplement, medication, workout, wearable, cycle, symptom, demographic, and lifestyle information; and photos you choose to upload for analysis. Panora does not use or sell personal data to train large language models. Our AI inference provider is contractually restricted from using Panora customer content to train its models. Panora is continuing to expand its data-processing and retention terms with the AI processing provider.
• Wearable connections — A wearable-data connection provider is used on some product surfaces to relay metrics from wearable devices that you choose to connect
• AI-powered research retrieval — A third-party AI-powered research retrieval provider retrieves published research that enriches your wellness insights. Panora sends research queries derived from your health observations. Before sending a query, Panora attempts to remove obvious identifiers, but automated removal is not guaranteed and the query may still contain identifying information. The query may include markers, values, or trends, but not your full stored health record.
• Hosting and server compute — Application hosting, server functions, edge networking, and infrastructure delivery
• Payment processing — Subscription payments and billing. Payment card details are entered directly with the payment processor; Panora never sees raw card data.
• Error and security monitoring — Crash, error, and operational telemetry. Configured with default PII collection disabled and outbound-event redaction callbacks for request bodies, cookies, and IP/user context. Web and server tiers may also collect performance traces and request context for debugging.
• Rate limiting and request deduplication — Per-user and per-request rate-limit tracking and payment-webhook idempotency. Receives identifiers such as your user ID or request IP and limit/idempotency-key metadata, not your wellness data.
• Product analytics — Web product analytics. Used on the web application only; the native mobile app does not include a third-party product analytics SDK.
• Advertising measurement — An advertising measurement partner receives the address of the marketing page you viewed, the page you came from, your IP address, your browser and screen information, and a cookie identifier that lets the partner recognise the same browser on later visits. This occurs on our marketing, legal and informational pages only. The pixel is not present in the signed-in application, the sign-in and account-recovery pages, checkout, or the mobile app, and the partner does not receive health data.
• Push delivery — Push notification routing for mobile and web. Panora stores a push token linked to your account so notifications can be delivered.
• Email delivery — Email delivery providers send account, security, sharing-related, and notification emails. Panora does not include your personal health data in the emails it sends to you; the provider receives only your email address and the account or notification message needed to deliver them.

How to Exercise Your Rights

If you have questions about how your data is handled, or if you would like to exercise your rights under the California Consumer Privacy Act (CCPA/CPRA), the Washington My Health My Data Act, the Colorado Privacy Act, or any other applicable privacy law, please contact us at:

admin@panorahealth.ai

For our full privacy practices, please see our Privacy Policy.