Privacy Policy

Kairos provides longitudinal health tracking and intelligence for midlife health. We take the privacy and security of your health information seriously. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to the Kairos application and related services (collectively, the “Service”).

Information We Collect

To deliver personalized health intelligence, Kairos collects the information you provide and the data the Service generates on your behalf, including:

• Symptoms. Daily and periodic symptom entries across vasomotor, sleep, mood, cognitive, genitourinary, and musculoskeletal domains.
• Cycle data. Menstrual bleeding patterns, cycle dates, and related reproductive history you record.
• Sleep. Sleep duration, quality, and disturbance information you enter or that is imported from a connected device.
• Vitals & measurements. Weight, body composition, blood pressure, and other vitals you log.
• Device data. Wearable and connected-device metrics (for example Oura, Apple Watch, WHOOP, or Garmin) where you choose to connect them.
• Labs & imaging. Laboratory results and bone-density (DEXA) values you upload or enter.
• Account information. Your name, email address, phone number, and authentication credentials.

Protected Health Information (PHI)

Much of the information you provide is Protected Health Information under the U.S. Health Insurance Portability and Accountability Act (HIPAA). Kairos handles PHI in accordance with applicable HIPAA requirements, including administrative, physical, and technical safeguards. Data is encrypted in transit and at rest, access is restricted on a need-to-know basis, and we maintain audit logging of access to health records. Where Kairos relies on third-party service providers that process PHI on our behalf, we enter into Business Associate Agreements (BAAs) requiring equivalent protections.

How We Use Your Information

We use your information to operate and personalize the Service: computing your domain scores, reproductive-stage estimates, and health-trajectory insights; surfacing clinically significant changes; generating provider-ready summaries at your request; and communicating with you about your account and check-ins. We do not sell your personal or health information, and we do not use your health information for third-party advertising.

Your Care Team and The Bone Health Clinic

Kairos may be offered to you in connection with care provided by The Bone Health Clinic (TBHC) or another participating clinical partner. If you join through an invitation from your care team, your Kairos account is linked to that clinical relationship so your care team can receive the summaries and signals you choose to share. Where the Service connects to a clinical practice-management system through a secure integration (the “PTA bridge”), the information shared is limited to what is necessary to support your care, and the sharing is governed by the same HIPAA safeguards described above. You control which provider summaries are generated and shared.

Data Sharing

We share your information only as described in this policy: with your care team where you have chosen to share; with service providers (such as cloud hosting, email, and messaging vendors) bound by confidentiality and, where applicable, BAA obligations; and where required by law or to protect the safety of you or others. Any provider-summary share link you generate is time-limited and may be revoked.

Data Retention

We retain your health information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal and health data, except where retention is required by law. Provider share links and their frozen payloads expire automatically.

Your Rights

You have the right to access the health information we hold about you, to request corrections, to export your data in a portable format, and to delete your account and associated data. You can export or delete your data at any time from Settings, or by contacting us. Depending on where you live, you may have additional rights under applicable privacy laws.

Security

We use industry-standard safeguards to protect your information, including encryption, access controls, and continuous monitoring. No method of transmission or storage is perfectly secure, but we work continuously to protect your data and to promptly address any incident in accordance with applicable law.

Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at info@kairos-health.ai.