Privacy Policy

Last updated: 1 November 2026

Show legal information for: International / GenericAfghanistanAlbaniaAlgeriaAndorraAngolaAntigua and BarbudaArgentinaArmeniaAustraliaAustriaAzerbaijanBahamasBahrainBangladeshBarbadosBelarusBelgiumBelizeBeninBhutanBoliviaBosnia and HerzegovinaBotswanaBrazilBruneiBulgariaBurkina FasoBurundiCambodiaCameroonCanadaCape VerdeCentral African RepublicChadChileChinaColombiaComorosCongo (Brazzaville)Congo (Kinshasa)Costa RicaCroatiaCubaCyprusCzechiaDenmarkDjiboutiDominicaDominican RepublicEcuadorEgyptEl SalvadorEquatorial GuineaEritreaEstoniaEswatiniEthiopiaFijiFinlandFranceGabonGambiaGeorgiaGermanyGhanaGreeceGrenadaGuatemalaGuineaGuinea-BissauGuyanaHaitiHondurasHungaryIcelandIndiaIndonesiaIranIraqIrelandIsraelItalyIvory CoastJamaicaJapanJordanKazakhstanKenyaKiribatiKosovoKuwaitKyrgyzstanLaosLatviaLebanonLesothoLiberiaLibyaLiechtensteinLithuaniaLuxembourgMadagascarMalawiMalaysiaMaldivesMaliMaltaMarshall IslandsMauritaniaMauritiusMexicoMicronesiaMoldovaMonacoMongoliaMontenegroMoroccoMozambiqueMyanmarNamibiaNauruNepalNetherlandsNew ZealandNicaraguaNigerNigeriaNorth KoreaNorth MacedoniaNorwayOmanPakistanPalauPalestinePanamaPapua New GuineaParaguayPeruPhilippinesPolandPortugalQatarRomaniaRussiaRwandaSaint Kitts and NevisSaint LuciaSaint Vincent and the GrenadinesSamoaSan MarinoSao Tome and PrincipeSaudi ArabiaSenegalSerbiaSeychellesSierra LeoneSingaporeSlovakiaSloveniaSolomon IslandsSomaliaSouth AfricaSouth KoreaSouth SudanSpainSri LankaSudanSurinameSwedenSwitzerlandSyriaTaiwanTajikistanTanzaniaThailandTimor-LesteTogoTongaTrinidad and TobagoTunisiaTurkeyTurkmenistanTuvaluUgandaUkraineUnited Arab EmiratesUnited KingdomUnited StatesUruguayUzbekistanVanuatuVatican CityVenezuelaVietnamYemenZambiaZimbabwe

This policy is presented for your country and is designed to comply with the data-protection and privacy laws applicable in your country of residence.

1. Introduction

This Privacy Policy explains how judemed.ai ("JudeMed.AI", "Jude", "we", "us") collects, uses, and safeguards your information. JudeMed.AI is operated by Vertex Catalyst Group LLC, a company in the United States. Because Jude handles sensitive health-related conversations, we treat your data with particular care and apply the protections required in your jurisdiction.

What JudeMed.AI is - and is not. JudeMed.AI is a wellness and personal health-record tool that you use for yourself and your family. It is not a doctor, hospital, clinic or health insurer, and we do not provide medical care. That means the U.S. health-privacy law HIPAA generally does not apply to us. Your health information is instead protected by the U.S. Federal Trade Commission's rules (including the Health Breach Notification Rule, see section 16), by state consumer-health-data and privacy laws (see section 15), by the law of your country, and by this policy.

2. Information We Collect

We collect: (a) information you provide when you register (name, email, country); (b) the health profile, logs, medicine-cabinet entries, and documents you choose to add; (c) the messages you exchange with Jude; (d) technical data (such as IP address, device/browser information, and cookies) necessary to operate and secure the Service, and the date and time you last signed in and last used the Service (seen only by our administrators, for support and to count how many people use the Service; they contain no health information); (e) if you use voice input, the short recording of your voice, which is converted to text and then deleted (see section 12); (f) if you use Family Mode, the information you add about your children (see section 17); (g) if you connect a NeraTex Controller, the session reports the device sends (date, plan, duration and how the session ended); and (h) if you buy a subscription, billing information such as your plan, payment dates, amounts, currency and billing country. Your card or bank details are entered on our payment provider's secure page and are never received or stored by us (see section 13).

3. Sensitive / Health Information

Health-related information you share is treated as a special/sensitive category of personal data under applicable data-protection law. We process it only to provide the Service to you and only with the appropriate legal basis described below.

Medical records you import. If you choose Import Medical Records, you sign in on your own health system's patient portal (for example MyChart) and approve read-only access for JudeMed.AI. We then copy the records that health system makes available to you (such as lab results, reports, conditions, medications, allergies, immunizations, procedures, visits and clinical notes) into your account, marked as imported at your request. We never see your patient-portal password, we never write anything back to your health system, and the access we receive is used only for that import and is not stored. Imported records are used like the documents you upload: Jude can refer to them in your conversations (you can switch this off per conversation), and you can delete them at any time (see section 8).

4. Legal Basis for Processing

We process your personal data on the basis of your consent and as necessary to provide the Service you request. Health information you provide is treated as sensitive and handled with heightened care.

5. Country and Regional Context

Your country is used both to help Jude apply the appropriate medical and privacy context to your conversations, and to present you with the version of this policy that matches the law where you are — currently the data-protection and privacy laws applicable in your country of residence.

6. How We Use Your Information

We use your information to provide the Service, maintain your conversation history, generate summaries and reports at your request, manage your subscription and billing, secure your account, comply with legal obligations, and improve reliability. We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

Medicine names. To recognise medicine names correctly for every user (for example that a local brand contains a particular active ingredient), we keep a shared list of medicines and supplements: their names, active ingredients and, where known, their scheduling status, registration and the country where they are registered, used or distributed. This list never uses or holds personal information. Our own software, on our own server, picks out the names of medicines and supplements mentioned in your conversations, logs and records and adds only the bare name with your country - never your name, account, doses, dates or anything you wrote. To check a name and its ingredients, only that bare name and the country are sent to official medicine registers (such as SAHPRA in South Africa and openFDA in the USA) or to our AI providers - never any text of yours. Jude and your reports use the registered name of a medicine (for example "Adco-Dol" when you write "adcodol"), and where a medicine in your medicine cabinet is on the list, we show its registered name and active ingredients there too; what you typed is always kept.

7. Storage and Security

Your data is stored using industry-standard safeguards, including hashed passwords and encrypted transport (TLS). Your conversations are visible only to you and, where you authorise it (for example, a practitioner you register under), to those integrations or professionals you enable.

8. Data Retention

We retain your account and conversation data for as long as your account is open. When you delete your account, everything is erased (see Deleting your account below); we do not keep your data after your account is closed.

Health summary reports. Each report you create with the Report button is stored in your account under Historical Reports, so you can open or download it again. Only you can see your reports. They are kept until you delete them and are included when you ask for a copy of your data. Deleting a report is permanent: unlike other content you delete (see below), no archived copy of a report is kept - it is erased from the Service completely and cannot be restored.

Sharing a report with your doctor. When you press Share on a report, we email the person you choose a private link that opens only that report. The email itself contains no health information. Before the report is shown, the recipient must enter the email address the link was sent to; the link stops working when it expires (7, 30 or 90 days, your choice) or when you press Stop sharing. We record when the link is opened so you can see it under Historical Reports. You can also share a report with yourself, or press Copy Link: you choose a PIN, the link (valid 90 days) is copied for you to pass on yourself, and it opens only after that PIN is entered. No email is sent for a Copy Link link, and we keep only a one-way hash of the PIN. The names and email addresses you save in your Sharing Address Book (Settings) are used only for sharing your reports. Once your doctor has opened or downloaded a report, their copy is handled under their own privacy obligations.

Sharing a conclusion. When you press Create shareable link on a chat's Detailed Informational Conclusion, we store a copy of that conclusion and make a private link to it. Jude is instructed to leave out your name and other identifying details, but the conclusion can include health information from that chat and your health profile (for example conditions and medicines). Anyone who has the link can read it without signing in, so share it only with people you trust. The link stops working when it expires (7, 30 or 90 days, your choice) or when you press Stop sharing; the page lists your active links and how often each was opened. The shared page is not indexed by search engines. Links made before 16 October 2026 expire 30 days after they were made. When you delete the chat, its conclusion links end at once (the archive copy of the deleted chat, described below, keeps the conclusion text but not the link); when you delete your account, everything is erased.

When you delete something yourself (a conversation, a document, a log entry, a medicine-cabinet item, a family member's profile or a PEMF session plan), it is removed from the Service for real: it no longer appears in your account, is no longer used by Jude, and is no longer visible to our administrators. Because the deletion is your choice, we keep a sealed copy only in a protected archive outside the Service, which is covered by our backups and used solely to restore data at your request, to answer a data-access request from you, or where the law requires it. This archived copy is kept for 24 months and then permanently erased. The archive exists only while your account is open: when you delete your account, it is erased together with everything else.

Deleting your account. You can delete your account yourself at any time under Settings → Delete my account (you confirm with your password). This permanently and immediately erases your account and all data in it: conversations, health logs, medicine cabinet, health profile, family members' profiles, uploaded documents, imported medical records, reports, shared report and conclusion links, your Sharing Address Book, consents, connected devices and settings, together with every archived copy of content you deleted earlier. It cannot be undone. An active subscription is cancelled first. You then receive a Certificate of Account Deletion (PDF) showing your details and when you asked for and when we carried out the deletion; it is emailed to you and offered as a download. We keep a copy of this certificate as our proof that the deletion was carried out; it contains only your name, email address, account number, the dates and times, and how many items were erased (no health information), and it is never used for anything else. Copies in our encrypted server backups are never used to restore a deleted account and disappear as those backups expire: our regular backups are kept for up to 30 days, and the extra safety copies we make before system changes for up to 75 days; after that they are deleted automatically.

Billing and payment records (dates, amounts, plan) are kept for as long as tax and accounting laws require, even after your account is deleted. Invoices and credit notes issued to you (with the name and e-mail address printed on them) are kept for 7 years after the end of the financial year in which they were issued, because tax law requires it; after that the customer details on them are deleted or anonymised. These records are no longer linked to an account and contain no health information. Our payment provider, Stripe, keeps its own records of your payments under its privacy policy.

9. Where Your Data Is Stored and International Transfers

Where it is stored. Your account, health information, documents and reports are stored on our own servers in the United States, and our encrypted backups are also kept in the United States. If you live outside the United States (for example in South Africa), your information is therefore transferred to and stored in the United States.

To generate responses and to convert voice to text, your messages and voice recordings may be processed by our AI providers (listed in section 14), which may operate servers outside your country. Payment information is processed by our payment provider, Stripe, which may also process it outside your country. Where your data leaves your jurisdiction, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) as required by applicable data-protection law.

10. Your Rights

Under the data-protection and privacy laws applicable in your country of residence, you have the following rights:

• Right to access the personal data we hold about you
• Right to request correction of inaccurate data
• Right to request deletion of your data
• Right to object to or restrict certain processing
• Right to withdraw consent
• Right to complain to your local data-protection authority

To exercise any of these rights, contact us through our contact form. Parents and guardians can exercise these rights for their children's profiles in the same way. To protect your information we confirm the request comes from the account holder (normally by replying from the email address on the account). We answer within 30 days, or sooner where your law requires it. A copy of your data is provided in a common electronic format. If we decline a request, we tell you why, and you can ask us to look at it again (an appeal) through the same contact form; we answer an appeal within 45 days. We never treat you differently for using your rights. You also have the right to complain to the data-protection or privacy authority in your jurisdiction.

11. Cookies

We use cookies as described in our Cookie Policy, which is also tailored to your country.

12. Voice Input and Read-Aloud

Voice features are optional. Nothing is recorded until you press the microphone button, and your browser asks for your permission to use the microphone the first time.

• Voice input: your recording (up to 60 seconds) is sent over an encrypted connection to our server and passed to our speech-recognition provider solely to turn it into text. We do not store the recording: it is deleted as soon as the text is returned. The text appears in the message box so you can check it; only the message you send is kept, like any typed message. Because your voice can reveal your identity and health information, we treat it as sensitive data.
• Browser speech recognition: if our service is unavailable, your browser's own speech recognition may be used instead; your browser's provider (for example Google or Apple) then processes the audio under its own privacy terms.
• Read-aloud: Jude's replies are read out by your own device's built-in voices. The text is spoken on your device and is not sent anywhere for this.
• Usage records: we record how many seconds of audio were converted (not the audio itself) to manage service limits and costs.
• You can stop using voice at any time and withdraw microphone access in your browser settings.

13. Payments and Subscriptions

Paid plans are billed through Stripe, our payment provider.

• Card and bank details: you enter them on Stripe's secure payment page. They go directly to Stripe; we never see, receive or store your full card number or security code.
• What we share with Stripe: only what is needed to bill you: your name, email address, the plan you chose, its price and currency, and an internal account number that links the payment to your Jude account. We never share your health information, conversations, documents or health profile with Stripe.
• What Stripe tells us: whether a payment succeeded, failed or was refunded, the amount, currency and fees, the card brand and last four digits, and your billing country. We use this to switch your plan on or off, to show your billing history and for our accounting.
• Local currency: to show prices in your currency (for example rand in South Africa and US dollars elsewhere), our server estimates your country from your IP address when you view or buy a plan. This check is done on our own server; your IP address is not sent to another company for it and is not stored for this purpose.
• Stripe's own use: Stripe also uses payment information to prevent fraud and to meet its own legal duties, as described in the Stripe Privacy Policy.
• Managing your plan: you can update your payment method, download receipts or cancel through the billing page linked from your profile.

14. Third-Party Processing

Your specific permission, service by service. Before your first chat we show you each AI service by name and you choose Allow or Don't allow for each one separately. A service you don't allow is never used for you; Jude then uses only the services you allowed (at least one is needed for Jude to reply; your logs, medicine cabinet, profile and saved reports keep working without any). We record each choice with its date. If we add or replace a service, we ask you again. You can change each choice at any time under Settings → AI processing. Only your message, that chat and the health information you switch on for that chat are sent, and only to produce the answer for you. Your data is never shared with anyone else unless you choose the recipient yourself (for example when you share a report with your doctor).

Support access. Our support staff can open your account (to help you, for example with a problem you report) only if you allow it under Settings → Support access. Every access is recorded.

Your messages are processed by our AI providers solely to produce Jude's replies and summaries: Anthropic (Claude) as the main provider, and Google (Gemini) and Groq as back-up providers when the main provider is unavailable. Voice recordings are converted to text by Groq. Payments are processed by Stripe (see section 13). For the shared medicine list (see section 6), bare medicine names with a country - without any information about you - are also checked with these providers. We do not permit your data to be used to train third-party models where we can prevent it.

Protection against automated sign-ups. The sign-up and contact forms use Cloudflare Turnstile to check that a person, not a program, is sending them. For that check Cloudflare receives technical information from your browser and your IP address, under the Cloudflare Privacy Policy. It never receives what you type into the form, and it is not used on any page with your health information.

15. Your Consumer Health Data (U.S. State Laws)

Some U.S. states, such as Washington (My Health My Data Act), Nevada and Connecticut, give you specific rights over "consumer health data". In plain terms:

• What we collect: the health information described in sections 2 and 3 - what you tell Jude, your logs and readings, medicines, documents, imported medical records, reports, Family Mode information and NeraTex Controller session reports.
• Where it comes from: from you, from the health system you import records from at your request, and from a NeraTex Controller you connect.
• Why: only to provide the Service to you - Jude's replies, your records and your reports.
• Your consent: you agree to us collecting this information when you create your account and each time you choose to add it. We share it only with the parties below, and only with your separate consent for each.
• Who we share it with: the AI services you allow one by one (section 14); the doctors or other people you choose to share a report with, and anyone you give a conclusion link to (section 8); and a NeraTex Controller you connect. We never share health information with our payment provider. We never sell it, and we do not use it for advertising.
• Your rights: to see which of your health data we hold and with whom we shared it, to have it deleted, and to withdraw your consent at any time (Settings, or our contact form; see section 10).
• We do not use location tracking or "geofencing" around health facilities.

16. If Something Goes Wrong (Security Breach)

If there is ever a breach of security that affects your health information or other personal information, we will tell you without unreasonable delay - and in any case within the time the law sets (for example no later than 60 days under the U.S. Health Breach Notification Rule) - and tell you what happened, what information was involved and what you can do. Where the law requires it, we also notify the U.S. Federal Trade Commission, state authorities, the South African Information Regulator or another regulator, and in some cases the media.

17. Children and Family Mode

You must be at least 18 (or the age of majority where you live) to have a JudeMed.AI account. Children do not have accounts and do not use JudeMed.AI themselves.

Family Mode lets a parent or legal guardian keep health information about their own children in the parent's account. When you add a child, you confirm that you are the child's parent or legal guardian and that you agree to us processing the child's information for you as described in this policy. Everything about the child - the profile (name, date of birth, sex, notes), the conversations you have with Jude about the child, logs, medicines and reports - comes from you, the parent, not from the child.

• A child's information is used only to help you look after that child; it is never sold and never used for advertising.
• It is handled with the same protections as your own information, including your choices about which AI services may be used.
• You can see, correct and delete your child's profile and information at any time. When you delete a child's profile you can also ask us to erase the archived copy (section 8) straight away, through our contact form.
• Deleting your account deletes your children's profiles and information too.

We do not knowingly collect personal information directly from children under 13 (or under the age set by your law). If we learn that a child has used JudeMed.AI directly, we delete that information.

18. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above shows when it last changed. If we make an important change - for example to what we collect or who we share it with - we tell you in the app or by email before it applies, and where the law requires your consent, we ask for it again.

19. Contact

JudeMed.AI is operated by Vertex Catalyst Group LLC. Questions or requests regarding your privacy can be submitted through our contact form. Complaints may be directed to the data-protection or privacy authority in your jurisdiction.