Privacy notice
Your data, minimised.
Last updated 2026-11-04.
| Controller | The Knowledge Formula - FZCO, Dubai Silicon Oasis, UAE |
|---|---|
| Health records stored | None |
| Account data | E-mail (encrypted), password hash, encrypted two-step secret |
| Cookies | 1 strictly necessary session cookie |
| Session lifetime | 15 minutes idle, 8 hours maximum |
| Security log retention | 400 days, pseudonymous |
| Trackers and ads | None |
| Price | 0 EUR during the pilot |
Who is responsible for my data?
The Knowledge Formula - FZCO (DSO-FZCO-36765), IFZA Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, contact me@karllillrud.com, is the controller for HealthIntelligence. Where the EU or UK GDPR applies, it applies to this service in full.
What do you process and why?
- Account: your e-mail address (encrypted), a password hash, an encrypted authenticator secret and hashed recovery codes. Purpose: running your account securely. Legal basis: contract (Art. 6(1)(b) GDPR).
- Optional profile: birth year, sex used in equations, country and optional answers such as smoking status, all encrypted. Purpose: calculations you ask for. Legal basis: your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw by clearing the fields.
- Health records: read from HealthVault only when you run an analysis, only within the scope you set there, and only after you approve, for that analysis, the exact list of records and values it would use. To build that list HealthIntelligence reads HealthVault's catalogue of your connected records (titles, dates, kinds of documents and which values they hold, no text and no values). Processed in memory and not stored; dropped after at most 10 minutes, at sign-out or when you withdraw the consent. Legal basis: your explicit consent (Art. 9(2)(a) GDPR), given twice: by connecting HealthVault and by approving each analysis.
- Consents: when you approved which records an analysis may read, which topics, and a fingerprint of the catalogue entries you saw. No titles, text or values. Purpose: proving that nothing was read without your approval. Legal basis: legal obligation to demonstrate consent (Art. 7(1) GDPR).
- Security events: sign-ins, failures and connection changes with a pseudonymous reference, kept for up to 400 days or until you delete your account. Purpose: protecting accounts. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and security of processing (Art. 32).
What do you never do with my data?
No advertising, no analytics, no tracking cookies, no sale, rental or trade of data, no sharing with advertisers, insurers or employers, no profiling, no automated decisions with legal or similar effects, and no use of your data to train any AI model. No health content is sent to any AI language model. These promises are checked by automated tests on every release: the code contains no AI training, no analytics or tracking libraries and no network connection to anyone other than HealthVault and the breached-password check.
How do I know what is shared before it happens?
When you choose topics, HealthIntelligence first shows what it would read: how many records, exactly which ones (open the list to see each title, date and value), which profile answers, where it is processed, how long it is kept and what we promise. Sensitive records such as mental health, genetic or reproductive health documents are never ticked in advance. You can untick any record. Nothing is read until you press approve. If a record changes in HealthVault after you approved, you are asked again.
Which cookies are used?
One strictly necessary cookie, __Host-hi_session, keeps you signed in. It expires after 15 minutes of inactivity and at most after 8 hours. The appearance setting in the app is stored only in your browser.
Where is my data processed?
The service runs on a dedicated server in the European Union operated by our hosting provider under a data processing agreement. HealthVault, which holds your records, is a separate service you control. No other recipients.
How long is data kept, and how do I erase it?
Account data is kept until you delete the account. The right to be forgotten (Art. 17 GDPR) is a button in your account: three separate warnings and your authenticator code protect you from deleting by mistake, and then the account, profile, consents, sessions, security log and connection code are erased at once, and the connection is ended inside HealthVault. HealthIntelligence never held a copy of your records. Your records in HealthVault are a separate service you control; erase them there with HealthVault's own delete button. Server backups of account data are deleted within 30 days.
What are my rights?
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21) and withdrawal of consent at any time (Art. 7(3)), without affecting what was lawful before. Use Account settings to export, withdraw consents and delete, or write to us. You can complain to your data protection authority, for example IMY in Sweden, AEPD in Spain or your local authority.
How is my data protected?
See the security architecture of HealthIntelligence and how the HealthVault connection limits what can be read.