Privacy Policy
Effective October 27, 2026· NOW HEALTH is a product of 5th Echelon
NOW HEALTH, a 5th Echelon product, provides health education and care-preparation tools. This page distinguishes the information used by your account, the information sent for an AI answer, and the optional copies kept in your browser. It does not promise that only you can access every piece of data.
1. Shared account and profile
Email and password authentication is handled by Supabase. Optional profile information includes your name, username, bio, avatar URL, and social links. The account and profile are shared with 5th Echelon; edits can affect that shared profile. Do not place health information in these fields. External avatar URLs make requests to the image host.
2. What happens when you ask AI
The question and conversation context you submit travel through the app server directly to OpenAI using a server-side API key. The app disables Responses storage in its API requests; this is not a zero-retention guarantee. This processing is necessary to generate the answer; we cannot truthfully call it a no-sharing service. Provider processing, retention, and training terms are governed by the applicable provider agreements and configuration; this page does not assert zero retention or a blanket no-training guarantee. Avoid identifiers and highly sensitive information.
The app does not automatically include health notes or visit-preparation text in an AI request. If you paste or type that information into a conversation, it is then part of the submitted prompt.
3. Optional data on this device
Conversations, notes, preparation, and the supported model preference use session memory by default. Refreshing the page or signing out loses session-only work. Device saving is an explicit choice. If enabled, a versioned account-specific copy is stored in this browser; it is not a cloud health-record backup and does not sync between devices.
Browser storage and downloaded exports are not an encrypted medical vault. Someone controlling the browser or device may access them. Clearing browser data removes the saved copies. Account namespaces help avoid accidental account mixing, not unauthorized access by someone controlling the browser.
4. Older unattributed history
An older version used a browser-global conversation key with no account owner. We do not automatically assign it to a signed-in person. Profile offers explicit export, import, and discard controls. Import only if the history is yours. Importing copies it without deleting the original; discarding the original is a separate action that affects the shared browser.
5. Technical and support information
Hosting, authentication, analytics, and AI providers may process technical request information to operate their services. The site includes Vercel Analytics. Support submissions store the name, email, topic, and message you provide in the support inbox. Do not include medical records, passwords, or urgent health requests in support messages.
6. Your controls and their limits
Use Profile to export selected or all local conversations, notes, and preparation, disable device saving, or remove local data for your account. These controls do not erase provider logs, remove data from a downloaded file, or delete your shared Supabase/5th Echelon account. No self-service account-deletion feature is offered here. Contact support with questions about account-level information.
7. Sensitive information and children
This service is not designed as a clinical record system and is not directed to children under 13. We do not claim HIPAA certification, end-to-end encryption of browser data, continuous monitoring, or a comprehensive emergency detector. See our health-data limitations.
8. Changes and contact
Product changes may require updated disclosures; the effective date is shown above. For privacy or security concerns, use the Contact page. For urgent human help, use emergency and crisis resources, not this app’s support form.