Privacy

Perfect Human holds health information you choose to give it, so that a team of AI specialists can give you advice that accounts for your actual situation. We do not sell it, we do not advertise against it, and we do not share it with employers, insurers, or data brokers.

We are not a healthcare provider. Perfect Human is not a substitute for a doctor, and nothing in it is a medical record.

Only what you enter or connect. Specifically:

• Account — email, name, country, timezone, and optionally date of birth and sex, which the lab-result features need to interpret ranges.
• Your questionnaire answers — goals, symptoms, history, lifestyle, and preferences.
• Your conversations with specialists and in group rooms.
• Health data you add — blood work you upload, supplements you track, workouts you log, experiments you run, plans you make, documents you upload, and GLP-1 details if you use that feature.
• Apple Health data you import — if you choose to, resting heart rate, heart-rate variability, sleep, and respiratory rate. The export file is read in your own browser; only the summarised daily numbers are sent to us.
• Usage — pages visited and features used, for analytics (see below).

We are a very small team and we run on other people’s infrastructure. Your data is processed by:

• Supabase — the database, login, and file storage. Hosted in Sydney, Australia.
• Vercel — application hosting.
• Anthropic — the AI models behind every specialist. Your message and the relevant context are sent to generate each reply.
• OpenAI — converts text into the numeric form used for memory search. Text is sent; no replies are generated.
• Qdrant — stores that numeric form so specialists can recall earlier conversations.
• Stripe — payments, if and when we charge. Card details never touch our servers.
• Google Analytics and Microsoft Clarity — usage analytics.

If you connect your own AI provider key, your conversations run on your key and your account with that provider instead of ours.

• Health screens are hidden from session analytics. Clarity records how people move around the app, but the parts showing your labs, supplements, GLP-1 details, and conversations are masked out before recording.
• Messages that trip our safety check are stored like any other. This changed on 8 September 2026. Before that, a message at the most serious level was discarded — not saved, not indexed, not added to any specialist’s memory. It is now kept, because throwing it away meant the app forgot the most significant thing you had told it and your specialist could not refer back to it. Alongside it we keep a note that the check fired, when, and which resources you were shown, so we can tell whether the safety system is working. If you want a conversation to leave no trace at all, use a private chat — tap the ghost in any conversation. Nothing said in one is recorded, and it is deleted when you close it.
• Dictation: your recording is used to write the words, then discarded. You can speak to your specialists instead of typing. When you tap the microphone, the recording is sent over an encrypted connection to our server and passed to a transcription service (Deepgram, or OpenAI if that is unavailable) to turn it into text. It is held in memory for that one request and is never written to storage — not by us, and not kept by them for training. You see the text before anything is sent, and can edit or delete it. If your browser can transcribe on its own and our service is unavailable, it falls back to that instead, and the audio never leaves your device. Feedback you speak works the same way: we keep the words you send, never the recording.
• Voice notes you choose to send are kept. Sending a message as a voice note stores that recording, so you and your specialists can play it back later. It is kept in storage only your account can read, and deleting the message deletes the recording with it. Your specialists read the transcript, not the audio.
• Words we learn from you stay with you. So that names, dishes and supplements come out right, we keep a short list of words you use — some added by you, some learned when you correct a word before sending. It is stored with your account, used only to transcribe you more accurately, and you can see and remove any of it under “Words I use”.
• Spoken replies are generated from text. When a specialist reads a reply aloud, we send that reply’s text to OpenAI to synthesize the audio. Nothing about you is sent that isn’t already in the reply, the audio is played once and not stored, and you can turn reading aloud off at any time.
• We do not record video.

You, and the AI specialists you talk to. Every specialist in your team shares one picture of you — that is the point of the product, and it is why the nutritionist knows what your labs said. No other user can see any of it; the database enforces this per row, not just in the app.

Nothing is sent to your doctor, your insurer, or any clinician. Nothing in Perfect Human is filed as a medical record anywhere. If you want your clinician to see something, you export or print it and take it yourself.

A named administrator can see account-level information for support and abuse handling.

• Delete any conversation, and the memories drawn from it, from within the app.
• Delete uploaded documents and lab reports at any time.
• Opt out of usage analytics in your account settings.
• Ask us to delete your account and everything in it, by emailing the address below. We will do it.

Perfect Human is for adults. It is not designed or intended for anyone under 18, and the specialists are instructed to stop and refer if they learn a user is a minor.

If we change how any of this works, we will update this page and the date at the top. For anything privacy-related, including deletion requests, contact privacy@perfecthuman.io.