Trust Center

Hale is designed to meet HIPAA requirements for protecting health information and implements administrative, physical, and technical safeguards to ensure confidentiality, integrity, and availability. We execute Business Associate Agreements (BAAs) where necessary.

Health records, medications, appointments, vitals, provider information, and AI conversations — all entered by you. We only store data that you explicitly provide to manage your health. We do not access external health systems unless you explicitly connect them.

Passwords (managed by our authentication provider), payment card numbers (managed by our payment processor), browsing history, location data, contacts, or any other data from your phone. We do not sell, rent, or monetize your health data in any form.

All data is encrypted with AES-256 at rest and protected by TLS 1.2 or higher in transit. Row-level security in the database ensures your data is fully isolated from other users. All access to health data is logged and auditable.

AI conversations are used only to assist you and are never used to train AI models. Your data is never sold to third parties or shared with advertisers. AI processing occurs securely and is not retained beyond assisting your request.

You can request a full export or deletion of your data at any time by contacting support. Your health data belongs to you.