Privacy Policy — Guide Star Health

Guide Star Health, LLC ("Guide Star," "we," "us," "our") Effective date: 2026-07-27 Last updated: 2026-07-30

1. Who we are and what this covers

Guide Star Health provides a personalized, AI-assisted information service that helps people living with a chronic condition — currently Parkinson's disease and Celiac disease — and the family members and caregivers who support them, get answers tailored to their situation (the "Service"). You tell us about yourself once, and we use that context to make the answers you get more relevant. We expect to add additional conditions over time; this Policy applies regardless of which one applies to you.

This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to the Service at app.guidestarhealth.net and related apps.

Important health note. Guide Star provides general information and support. It is not a medical provider, does not provide medical advice, and is not a substitute for your doctor. See our Terms of Use.

2. Information we collect

a. Account information. Name, email address, and password when you create an account. We may also store a preferred name, time zone, display preferences, and an optional profile photo (or you can use a generated color-and-initials avatar instead).

b. Health and profile information you provide. To personalize answers, you may give us information such as your role (person with the condition, caregiver, or family member), diagnosis and diagnosis date, goals, ZIP code, and free-text notes you add about yourself, plus condition-specific details — for Parkinson's disease: disease stage, medications and dosing schedule, and symptoms; for Celiac disease: diagnosis method, food/gluten triggers, and symptoms. This is sensitive health information, and we treat it as such (see Security). Some of this information may be entered by an account owner (such as a caregiver) about another person — the person living with the condition — rather than about themselves; see Section 9 (Profiles created on behalf of another person).

c. Conversations. The questions you ask and the answers the Service generates. To produce a tailored answer, your question is combined with relevant profile context before it is processed (see "AI processing" below). We retain your conversation history so you don't have to re-explain yourself.

d. Feedback. When you rate an answer (thumbs up/down) and any optional note you add about what was helpful or not, plus anything you submit through the "Feedback" or "Tell us something good" features during our early-access period. Stories submitted through "Tell us something good" ask at the time of submission whether we may share the story publicly (e.g., as a testimonial) — we only do so with that consent, and never using your name without asking separately first.

e. Care Circle information. If you invite family members or friends into a shared "Care Circle," you give us their email address and we send the invitation email to them on your behalf. If they accept and register, we also collect their account information and their stated relationship to the person whose profile is shared. They get read-only access to that shared profile and their own private chat history, separate from yours and every other member's. If you share a specific chat answer with your Care Circle, that answer becomes visible only to the other active members of your Care Circle — not to any other Guide Star user, and not to anyone outside the Service.

f. Voice input (optional). If you use the microphone/"speak your question" feature, your spoken words are converted to text using your browser's or device's built-in speech recognition — not a Guide Star service. Depending on your browser and device, your audio may be sent to the browser or operating-system provider (for example, Google for Chrome, or Apple for Safari) to perform the transcription, subject to that provider's privacy policy. Guide Star receives only the resulting text, which is then treated like any other question you type. If you prefer not to use device-based speech recognition, simply type your questions instead.

g. Technical and usage information. Standard server and application logs (e.g., IP address, device/browser type, timestamps, error and performance data) used to operate and secure the Service.

We do not intentionally collect more sensitive categories than needed to run the Service, and we ask you to share only what you're comfortable sharing.

3. How we use your information

To provide the Service — to generate personalized answers by combining your question with your stored profile context.
To maintain your account and your conversation history.
To improve the Service — including reviewing answers you rate "thumbs down," together with the question and the context that produced them, so we can improve quality and accuracy. This review is limited to authorized personnel (see Security).
To communicate with you about your account, support requests, and important changes.
To keep the Service safe and reliable — security, fraud/abuse prevention, troubleshooting, and enforcing our Terms.
To comply with law and respond to lawful requests.

We do not use your health or conversation content for advertising, and we do not sell it.

4. AI processing and third-party providers

The Service uses a third-party large language model ("AI provider") — currently Anthropic's Claude models; we may add or change AI providers in the future — to generate answers. To do this, we send your question and the relevant profile context to the AI provider to produce a response.

We use these providers under their commercial/API terms.
We share with the AI provider only what is needed to answer your question.
The AI provider is a service provider/processor acting on our behalf, not an independent controller of your data, to the extent provided by our agreement with them.
Anthropic's data handling commitments. Under Anthropic's Commercial Terms of Service, Anthropic does not train its models on content submitted through its commercial API, and by default does not retain your questions or Claude's responses after generating an answer.

5. How we share information

We share personal information only as described here:

Service providers/processors who help us operate the Service under contract — cloud hosting and database (Microsoft Azure), the AI provider (Section 4), outbound account email such as confirmation, password reset, and notification messages (Microsoft Azure Communication Services), and similar infrastructure vendors. They may use the information only to provide services to us.
Care Circle members — if you (or an account owner) invite someone into a Care Circle, the shared profile is visible to them as described at the time of invitation. Inviting someone is a deliberate, consented sharing of health information. If you share a specific chat answer with your Care Circle, it becomes visible to every other active member of that same circle.
Care Circle invitations — when you invite someone into your Care Circle, we send the invitation email to the address you provide, on your behalf, using the email infrastructure described above.
Legal and safety — when we reasonably believe disclosure is required by law, or necessary to protect the rights, safety, or property of users, the public, or Guide Star.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Data security

We treat your profile and conversation content as sensitive and protect it with measures including:

Encryption in transit and at rest.
Access controls — health and conversation content is accessible only to authorized Guide Star personnel who need it to operate or improve the Service (for example, the limited review of thumbs-down feedback described in Section 3).
Authentication, logging, and other administrative and technical safeguards.

No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Data retention and minimization

We keep personal information for as long as your account is active or as needed to provide the Service, and thereafter only as needed for legitimate business or legal purposes. We aim to minimize what we collect and how long we keep it.

Monthly profile snapshots (a point-in-time copy of your symptoms, medications or food triggers, and goals, used to notice changes over time and remind you to keep your profile current) are kept for 13 months, then automatically deleted.
Deleting your account (Section 8) permanently removes your profile, conversation history, and other account data immediately — see Section 8 for what that includes.

8. Your choices and rights

Depending on where you live, you may have rights to:

Access the personal information we hold about you;
Correct inaccurate information (you can edit much of your profile directly);
Export/port a copy of your information — available any time from your account's "Data & Privacy" page as a downloadable file;
Delete your information and close your account — available any time from the same "Data & Privacy" page (you'll be asked to re-enter your password to confirm). This permanently deletes your account, profile, and conversation history — it is not a deactivation, and we cannot recover it afterward. If you are a Care Circle Owner, deleting your account also ends every other member's access to that shared profile; we email everyone affected (including you) to confirm. If you'd rather not do this yourself, contact us at privacy@guidestarhealth.net and we can do it for you;
Withdraw consent to optional sharing (e.g., a Care Circle invitation).

To make a request, contact us at privacy@guidestarhealth.net. We will verify your request and respond as required by applicable law.

State-specific note. Residents of certain states have additional rights regarding "sensitive" or "consumer health" data.

9. Profiles created on behalf of another person

Some accounts are set up by a caregiver or family member who creates and manages a profile about the person living with the condition (the "subject") rather than about themselves.

The account owner controls the profile and is responsible for the information they provide about the subject and for keeping it accurate.
Authority and consent. By entering another person's information, the account owner represents to us that they have that person's consent, or the legal authority (such as a power of attorney, healthcare proxy, or guardianship), to (a) provide that person's information to Guide Star, (b) use the Service on that person's behalf, and (c) share that person's information with anyone they later invite into a Care Circle.
We rely on those representations and are not able to independently verify family relationships or legal authority.
If you are the subject of a profile someone else created and manages, you may contact us at privacy@guidestarhealth.net to access, correct, or request deletion of information about you, or to object to its processing. We will handle such requests as required by applicable law; because the account owner manages the profile, we may need to coordinate with them to do so.

10. Children's privacy

The Service is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from children.

11. International users

The Service is operated in the United States and is intended only for U.S. residents. We do not currently support or knowingly offer the Service to individuals located outside the United States.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice as appropriate.

13. Contact us

Guide Star Health, LLC 3132 Falkland Rd, Carrollton, TX 75007 privacy@guidestarhealth.net