What we keep, and what we don't.

• Your account: the name you give us, your email address, and your password, stored as a one-way hash we can't read.
• Your sign-ins: when each session started and ends, and the IP address and browser details sent when you signed in. We use these to keep you signed in and to spot misuse.
• Your setup: what you'd like us to call you, and when you confirmed the notices during setup.
• Your connections: for each health system you connect, its name and address, the access it grants us (a list of permissions, plus the access and refresh tokens that carry them), and your patient ID there. The tokens and patient ID are encrypted before they're saved.
• Your health records: a copy of the records each connected health system shares with us, and when we last checked for new ones. See below.

When you connect a health system, we import the records it shares and keep a copy in our database, so your dashboard loads quickly and shows your full history. That includes the text of your notes, and your name and date of birth as that health system has them, which we keep to recognise your record. We check for new and changed records when you press Refresh, and once a day in the background while a health system is connected. When a record changes, we keep the earlier version too, marked as replaced. We don't write your records to our logs.

Wild Hearts shows the parts of your record your health systems share through MyChart: conditions, visit diagnoses and health concerns, medications and pharmacy fills, allergies, lab results and reports (including imaging reports), vital signs, assessments such as questionnaire scores, immunizations, visits and their notes, appointments, procedures, orders, your care team, care plans, goals, social and family history, implanted devices and insurance, along with the details those records point to, such as a medication's strength, a clinician's name or where a visit took place. We only request those.

Wild Hearts Health is not a medical provider and does not give medical advice. Records appear as your health systems recorded them.

We don't sell your information, show ads, or use analytics or advertising trackers. We don't share your information with anyone except the services below, which we use to run Wild Hearts.

• Vercel hosts the site and keeps short-lived request logs.
• Inngest schedules the background work that imports your records. It only receives internal ID numbers, never your records or your health-system access.
• Neon hosts our database.
• Google Workspace sends our emails, such as confirming your address or resetting your password.
• Epic and your health systems provide your records when you connect them and when you refresh, using the access you approved in MyChart.

We use one cookie to keep you signed in, and a second that lasts 10 minutes while you connect a health system. We don't use tracking cookies.

Everything travels over encrypted connections. Health-system tokens and patient IDs are encrypted in our database. Your health records are encrypted with a key that belongs to your account alone, so records can't be read without it, and deleting your account deletes the key. Passwords are stored only as hashes, and new accounts confirm their email address before they can sign in.

You can disconnect a health system at any time from Connections. That deletes the tokens and patient ID we stored for it and keeps the records already imported, so your history stays in one place. You can delete those records from Connections too. You can also remove Wild Hearts from the list of apps in your MyChart account.

To delete your account, email us from the address on your account and we'll delete it along with your setup, connections and every record we imported.

If we change what we collect or how we use it, we'll update this page and ask you to confirm again before you continue.

Email teo@wildheartsai.com. Please don't email medical records or other private health information.