Privacy Policy

Effective date: September 2026  |  App: Tensor Health

Tensor Health helps you understand your medication and supplement stack: interaction checks, nutrient gaps and upper-limit warnings, drug-induced nutrient depletions, and bloodwork (lab result) tracking with trends. It is informational only and is not medical advice — always discuss your stack and lab results with your clinician.

1. What We Collect

Tensor Health collects only the data you provide directly:

• Account credentials – your email address or phone number, or your Google/Apple sign-in identity, used to authenticate you via Firebase Authentication.
• Stack items – the medications, supplements, foods, and alcohol you add: name, category, dose, and servings.
• Allergies – allergen names and severity ratings you enter.
• Chronic conditions, implants, and surgical history – conditions (e.g. gout, hypothyroidism), implants (e.g. pacemaker, joint replacement), surgical history, and pregnancy or breastfeeding status you enter, either by picking from our catalog or typing your own text. This includes conditions you choose to confirm from a suggestion our system makes based on your medications (see Section 2).
• Supplement label photos – photos of supplement bottles and Supplement Facts panels you scan to identify and add products.
• Lab reports and results – photos or PDFs of lab reports you upload, and the lab results you confirm (marker, value, unit, reference range, draw date, and lab name).
• Symptom, check-in, and as-needed intake logs – symptoms you log (e.g. migraine, heartburn) with time, severity, duration, and optional triggers and notes; daily “no symptoms” check-ins; and as-needed medications, alcohol, and caffeine you log, with amounts.
• AI chat questions – questions you ask the Insight assistant.

We do not collect: precise location, contacts, browsing history, or advertising identifiers. Tensor Health does not read Apple Health data.

2. How We Use Your Data

• To detect potential interactions across your medications, supplements, food, and alcohol using our knowledge graph.
• To check your confirmed chronic conditions, implants, and surgical history against your stack for known conflicts, using FDA label data, clinical guidelines, and research citations.
• To suggest conditions that commonly go with a medication you've added (for example, suggesting gout after you add allopurinol). These suggestions are only ever based on your medications, are shown to you for review, and are added to your profile only when you confirm them — we never add a condition to your profile automatically.
• To calculate nutrient gaps, upper-limit warnings, and drug-induced nutrient depletions for your stack.
• To extract and track your lab results over time, and show trends against reference and optimal ranges.
• To answer your questions via the Tensor Health Insight chat.
• To show your symptom history and calendar, flag dosing limits for as-needed medications (for example, the daily acetaminophen maximum), and, for Pro subscribers, describe patterns in your own logs (for example, symptom days before and after a stack change). Patterns are associations in your logs, not medical conclusions.
• To surface general supplement suggestions, which may include Amazon Associates affiliate links (see Section 3).

3. Third-Party Services

• Google Cloud Run (backend, us-central1) – runs the Tensor Health API.
• Firebase Authentication (Google) – manages sign-in and stores your email, phone number, or Google/Apple sign-in identity.
• Google Firestore – stores your lab report metadata, confirmed lab results, symptom, check-in, and intake logs, and subscription status under your account.
• Google Cloud Storage – stores lab report images. Images from unconfirmed uploads are automatically deleted after 1 day. Images you confirm are kept with your account until you delete them.
• Neo4j AuraDB, hosted on Google Cloud – stores your stack, allergies, confirmed conditions/implants/surgical history, and the product links associated with your account.
• Anthropic (Claude) – processes the questions you ask the AI assistant, together with the parts of your stack, allergies, conditions and lab results needed to answer them, and the supplement label photos and lab report images you scan, to extract text and generate answers. Anthropic does not use this data to train its models, and under its standard commercial terms deletes it from its systems within 30 days.
• U.S. National Institutes of Health Dietary Supplement Label Database (DSLD) – product name and brand search terms you enter are sent to find matching products. No account identifiers are sent.
• U.S. National Library of Medicine RxNorm – drug names you search are sent to look up standardized drug information.
• Amazon Associates – general supplement suggestions may include affiliate links (affiliate disclosure: Tensor Health may earn a commission on qualifying purchases). Tapping a link opens Amazon in your browser; we log that the link was tapped, together with your account ID, the associated product, and the nutrient it addressed, for our own analytics.
• Apple App Store – handles subscription purchases and payment. We don't receive your card details.

We do not use analytics SDKs, crash-reporting SDKs, or advertising networks. We do not sell your personal data.

4. Data Stored on Your Device

The app keeps a local database on your device that mirrors your stack and caches your lab results so the app works offline. This local data is wiped if a different account signs in on the same device. If you turn on the optional daily check-in, the app schedules a local reminder on your device; answering it from the lock screen logs your check-in.

5. Data Retention & Deletion

Your data is retained while your account is active. From Profile → Delete Account in the app, you can permanently delete your account, which removes your stack, allergies, conditions/implants/surgical history, symptom, check-in, and intake logs, lab reports and results (including images), product links, and related records. You can also delete individual lab results or reports without deleting your account. Deletion is permanent and irreversible.

6. Security

Data in transit is encrypted (HTTPS). Data at rest is encrypted using our cloud providers' managed encryption (Google Cloud, Neo4j AuraDB).

Our logs are designed to avoid recording lab values and substance names in plain text; substance names you enter are hashed before appearing in backend logs.

7. Breach Notification

Because Tensor Health acts as a vendor of personal health records, we follow the FTC Health Breach Notification Rule. If a breach of unsecured personal health record data occurs, we will notify affected users without unreasonable delay and within 60 days of discovery, and will notify the FTC and, where required by the Rule, the media.

8. Children

Tensor Health is not directed at children under 13 and we do not knowingly collect personal information from children.

9. Changes to This Policy

We will update the effective date and notify you in-app if we make material changes.

10. Contact

Questions? Email us at support@tensorhealthapp.com.