Notice of Medical Data Practices
Effective 2026-04-30. This Notice describes how Fursan Core handles medical and health-related data you choose to upload, and your rights related to that data. This Notice is NOT a Notice of Privacy Practices under 45 CFR § 164.520. Fursan Core is not a HIPAA Covered Entity. This Notice describes our voluntary medical-data handling practices for informational purposes only.
What we mean by "medical data"
Lab reports, imaging reports, doctor notes, prescription information, diagnoses, treatment summaries, and any other clinical document you upload. Self-reported wellness metrics (weight, sleep duration, food logs, training sets, fasting windows) are NOT treated as medical data for this Notice; they are treated as User Content under our Terms of Use and Privacy Policy.
Your consent
The first time you upload medical data, we ask you to confirm consent in-product. You can withdraw that consent at any time from Settings → Privacy & Consent. Withdrawing consent stops new medical uploads, blocks the use of medical data in AI features, and lets you delete prior uploads.
How we store it
Medical documents are stored in the same encrypted-at-rest database as the rest of your account, scoped to your user record. Internal access is on a least-privilege basis. Every access to a medical document is logged in our security event log for audit purposes.
How we process it
If you choose to send medical context to AI features, the relevant text is transmitted to the configured AI provider for processing. Settings → Privacy & Consent displays the active provider and lets you opt out of AI processing of medical data at any time. Until Fursan Health has executed Business Associate Agreements with our AI providers, the AI provider's standard terms apply to that data; you should not include identifiable medical information in AI prompts unless you have read and accepted the active AI provider's terms.
How we share it
We do not sell medical data. We do not share medical data with advertisers, brokers, or marketers. We share medical data with subprocessors only as required to deliver a feature you have invoked (for example, transmitting an AI prompt to the configured AI provider). Disclosures required by law (subpoena, court order, regulatory request, safety emergency) are limited to the minimum necessary, and we will challenge overbroad requests where lawful and feasible.
Your rights
- Export — Settings → Privacy & Consent → Export my data includes any medical documents you have uploaded.
- Delete — Settings → Privacy & Consent → Delete account permanently erases medical documents alongside the rest of your User Content.
- Withdraw consent — Settings → Privacy & Consent → AI & PHI processing.
- Audit log — On request to
privacy@fursanhealth.com, we will provide a redacted summary of system accesses to your medical documents.
Limitations
Fursan Core is not a substitute for a qualified healthcare provider. AI Coach outputs are not medical advice, are not reviewed by a clinician before delivery, and may be inaccurate or incomplete. If you are managing a medical condition, work with your clinician. In an emergency, call your local emergency number or seek immediate medical care.
Changes
Material changes to this Notice will require your affirmative re-acceptance before continued use of medical-data features.
Contact
Fursan Health, LLC. privacy@fursanhealth.com.