Privacy Policy

Breakthrough Health LLC ("Breakthrough Health," "we," "us," or "our") provides consumer health and wellness education, planning, tracking, reflection, and self-management tools. This Privacy Policy explains the information we collect, how we use it, and the choices available to you when you use mybreakthroughhealth.com and related Breakthrough Health services.

Information we collect

Depending on how you use Breakthrough Health, we may collect:

• Account and contact information, such as your name, email address, authentication identifiers, and account preferences.
• Health and wellness information you choose to provide, including assessment responses, nutrition goals, measurements, progress entries, lab values you enter, habits, reflections, care-team sharing selections, and other information used by the tools you choose.
• Purchase and subscription information. Stripe processes payment-card information. Breakthrough Health receives transaction, customer, product, subscription, and payment-status information needed to fulfill purchases and manage access.
• Product activity, such as progress, lesson completion, saved recipes, reminders, reports, generated plans, and feature usage associated with your account.
• Communications you send to us, including support requests.
• Technical information generated when the service operates, such as basic request, browser, security, deployment, and error information used to keep the service functioning and secure.

How we use information

We use information to provide and personalize the features you request; authenticate and secure accounts; create and deliver purchased products; maintain entitlements and subscriptions; generate requested educational content and reports; provide customer support; prevent fraud and abuse; troubleshoot and improve service reliability; and meet applicable legal obligations.

AI-assisted features

Some Breakthrough Health features use artificial intelligence to generate educational content, identify patterns, or help organize information. Information needed for an AI-assisted feature may be processed by our AI service providers. We design these workflows to use the information required for the requested function and do not intend AI output to diagnose, prescribe, or replace professional medical judgment. AI output can be incomplete or incorrect and should be reviewed in context.

Service providers

We use service providers to operate Breakthrough Health. These currently include Supabase for authentication and database infrastructure, Stripe for payment processing and subscription management, Resend for transactional email, OpenAI for AI-assisted functionality, GitHub for source-code and deployment workflow infrastructure, and Netlify for website hosting and application deployment. These providers process information under their own terms and privacy commitments as necessary to provide their services to us.

When we share information

We may disclose information to service providers that help us operate the service; when you intentionally use a sharing feature or direct us to share information; when reasonably necessary to protect users, the service, or others; to comply with valid legal process; or in connection with a business transaction such as a merger, financing, or acquisition. We do not sell sensitive health or wellness information.

Customer-controlled sharing

Features that prepare information for a care team or another person are intended to remain under your control. Breakthrough Health does not automatically transmit your health information to a clinician merely because you create a report or use a sharing feature. Review any document before you choose to share it.

Retention and deletion

We retain information for as long as reasonably necessary to provide the service, maintain transaction and security records, meet legal obligations, resolve disputes, and enforce agreements. Different categories may have different retention periods. You may request deletion of your account or personal information by contacting us. Some records may need to be retained where required for legal, financial, fraud-prevention, security, or legitimate business purposes.

Security

We use technical and organizational safeguards intended to protect information, including authenticated access controls, server-side authorization boundaries, encrypted HTTPS connections, and managed infrastructure. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Your choices and rights

You may update certain account information through the service, choose whether to enter optional health information, control customer-directed sharing, manage eligible subscriptions through your account, and request access, correction, or deletion by contacting us. Additional privacy rights may apply depending on where you live.

Children

Breakthrough Health is designed for adults and is not intended for children under 18. Please do not create an account for a child or submit a child's health information without appropriate legal authority and our express support for that use.

Consumer wellness information

Breakthrough Health is a consumer wellness service, not your healthcare provider. Do not assume information submitted to a consumer wellness service receives the same legal treatment as information held by your doctor, hospital, or health plan. We do not represent that using Breakthrough Health creates a provider-patient relationship or makes Breakthrough Health a HIPAA-covered healthcare provider.

Changes to this policy

We may update this Privacy Policy as the service changes. The "Last updated" date identifies the current version. Material changes may also be communicated through the service or by email when appropriate.

This policy is a baseline operational privacy notice and is not a representation that Breakthrough Health has received a professional legal or regulatory compliance certification.