Tender Health

Privacy

In development — not yet legally reviewed.

This page is a plain-language description of how Tender Health handles your information. It reflects our current intent and approach, but it has not yet been reviewed by a lawyer. Before Tender Health is opened to the wider public, this document will be reviewed by a qualified privacy/health-data lawyer for compliance with applicable laws, including Canada’s PIPEDA and Ontario’s PHIPA. Please do not rely on it as legal advice.

1. What Tender Health is (and isn’t)

Tender Health is not a place where you upload medical records, lab results, or health files. You are not sending us your chart. What you do is describe, in your own words, how you’re feeling — similar to how you might talk to a tool like ChatGPT. Tender Health helps you see and organize that information visually, so you can bring a clearer picture to your next appointment.

2. Our approach: privacy by default

Tender Health is built to need as little of your personal information as possible. You can use the entire tool without an account and without giving your name or email. When you use it this way, what you type or say about how you’re feeling is not stored — it exists only during your session and is gone when you close the tab.

3. What we collect

If you use Tender Health without an account:

  • What you type or say about how you’re feeling is processed during your session to build your health map.
  • Nothing is stored after your session ends. Nothing is tied to your identity.

If you choose to create an account (to save your health maps):

  • We collect your email (or Google sign-in) and the health maps you choose to save.
  • This lets you return to your saved health maps. You can request deletion at any time.

If you choose to stay connected:

  • We collect your email, used only to contact you about future features.

4. How AI processing works

To generate your health map, what you share is sent to third-party AI providers, currently Anthropic (Claude) and Google (Gemini), that process the text and return a structured result. These providers do not use your input to train their models. This processing is what makes the tool work. We do not sell your information.

See our current list of subprocessors.

5. Voice input

Tender Health uses voice in two places, and they work differently. When you use “Speak” to dictate your health map, your browser’s own built-in dictation converts your speech to text, so that audio isn’t sent to a separate transcription vendor by us. When you practice a conversation with Dr. Dean in the Practice Room, your live microphone audio streams directly to ElevenLabs, our voice AI provider, for the length of that call. In both cases, nothing is kept after your session unless you have an account and choose to save your health map. Practice sessions are never saved, transcript included.

6. Analytics

We use Plausible Analytics to understand how many people visit Tender Health and which pages they use. Plausible is privacy-friendly: it does not use cookies, does not track you across other websites, and does not collect personal information. Only aggregate data (page views, referrer, country, browser) is collected, and it is stored in the EU. You can read Plausible’s data policy at plausible.io/data-policy.

7. What we do NOT do

  • We do not email what you shared about how you’re feeling to you or anyone else.
  • We do not sell your information.
  • We do not attach what you share to your identity unless you create an account and choose to save it.

8. Your choices

  • Use the tool anonymously (no account).
  • Download or print your health map to keep it yourself, rather than saving it with us.
  • If you have an account, request deletion of your saved data.

You can also make a privacy request to access, correct, or delete your data.

9. Canadian context

Tender Health intends to comply with Canada’s PIPEDA and Ontario’s PHIPA. This pre-launch document has not yet been reviewed for that compliance. A qualified privacy/health-data lawyer will review this before any wider public launch.

10. Contact

For privacy questions, contact Ashley at ajones@tenderhealth.ca

This document describes our current intent and approach. It is not legal advice and has not yet been reviewed by a lawyer. Separate Terms of Use and a Privacy Policy — reviewed for PIPEDA/PHIPA compliance — will be published before Tender Health is opened to the wider public.