Privacy Policy

Gia is a digital health advocate built by Neem Health ("Neem Health", "we", "us", "our"). This policy explains what information we collect through the Gia website, the Gia waitlist and the Gia app, how we collect it, how we use it, who we share it with, and how it is protected.

Waitlist and website. When you join the waitlist, we collect what you give us directly (your name and email address), plus basic usage data like the pages you visit and the device and browser you're using, so we can keep the site working properly.

Account information. When you use the Gia app, we collect your name, your email address, and the identifiers needed to sign you in (for example, when you use Sign in with Apple).

Health information you give us. Your goals, conditions, medications, cycle and symptom logs, notes, and the answers you give during onboarding.

Documents and lab results you add. Files and photos you upload, such as lab reports, and the results read from them.

Visit recordings and transcripts. When you choose to record a doctor's appointment, the audio, its transcript, the notes you take and the summary Gia writes. Recording only happens when you start it.

Messages to Gia. What you type or say to Gia in Ask Gia and Call Gia, and Gia's replies.

Connected health data. Only from sources you choose to connect: Apple Health (the sleep, heart rate, activity and cycle data you allow in Apple's permission screen) and wearables such as Oura. If you connect them, we also collect upcoming appointments from your calendar and your electronic health records. Each connection is optional and only happens with your active consent; Gia never reaches into a source you haven't explicitly connected.

App usage. Which screens and features you use, which we collect ourselves to keep the app working and improve it. We do not use it for advertising.

Gia's answers, insights, visit preparation, visit transcripts and summaries, and the reading of your documents are produced by AI services operated by other companies. Gia asks for your permission in the app before any of your information is sent to them. You can withdraw that permission at any time in the app under Profile › Settings › Privacy and data › AI data sharing; nothing further is sent after you withdraw, and Gia's AI features stop working until you allow it again.

With your permission, the following is sent to those services (only the parts a given request needs): what you type or say to Gia; relevant parts of your health profile, logs, notes and connected health data; lab results and documents you add; and visit recordings, transcripts and notes.

Microsoft Azure OpenAI Service (OpenAI GPT models hosted by Microsoft) writes Gia's answers, insights, visit preparation and summaries, runs voice calls with Gia, and reads your documents. Anthropic (Claude models) handles the same kinds of requests where a Claude model answers them better; Gia chooses between these model providers per feature, and both may see the categories of information listed above. Microsoft Azure AI Speech turns visit recordings into transcripts. Microsoft Azure AI Document Intelligence reads the text in lab reports and documents you upload.

Search services (such as Brave, Exa or Tavily) and public medical libraries (such as MedlinePlus, Europe PMC and openFDA) may receive a short search phrase, with your name and personal details removed first, to find the published sources Gia cites. They never receive your records.

Under Microsoft's Azure OpenAI terms, the information Gia sends is not used to train AI models and is not made available to OpenAI; Microsoft may retain it for a limited period solely to detect and prevent abuse. Under Anthropic's commercial terms, what Gia sends is not used to train Anthropic's models, and is retained only for the limited period needed to run the service and enforce Anthropic's usage policies. Each of these providers processes your information only to provide these features to Gia, under agreements that require it to protect your information to at least the standard described in this policy. We do not allow any of them to use it for their own purposes or for advertising, or to sell it.

We may add or change AI providers as the technology moves. If we do, we will name the new provider here before it receives anything about you, and the app's AI data sharing screen will name it too.

Live captions while you record a visit use Apple's speech recognition, which Apple handles under its own privacy policy.

AI output can be wrong. Gia shows the sources behind its health information so you can check them, and it does not diagnose or replace your clinician.

We use your information to provide Gia to you: to keep your health information in one place, help you prepare for, record and follow through on doctor's visits, answer your health questions with sources, and show patterns in the data you connect. We also use it to keep our systems secure, to understand how people use Gia so we can improve it, and to communicate with you about your account.

If you've joined the waitlist, we'll email you about early access and important updates. You can unsubscribe from non-essential emails at any time.

We do not sell your personal or health information to anyone, for any reason. We do not share it with data brokers, and we do not use it for advertising or third-party ad networks.

Health data from Apple Health is never used for advertising or marketing, and is never shared with third parties for those purposes.

Data is encrypted in transit and at rest, and access is restricted to what's needed to provide Gia to you.

Health records you connect to Gia, including electronic health records, are stored separately from your general account and wearable data, in a more heavily access-controlled store, and are only ever retrieved after your active, explicit consent for that connection. Every access to your health records is logged before it happens, and that log can't be edited or deleted through normal use.

Gia is a tool to help you organize and communicate your own health information. It does not provide medical advice, diagnosis, or treatment, and it is not a substitute for care from a licensed professional.

We share information only with service providers that help us run Gia, under agreements that require them to protect it and use it only to provide services to us: the AI service providers described in How Gia uses AI, only after you allow it in the app; hosting and storage (Microsoft Azure); email delivery, for sign-in codes and account messages; our health-data connectivity partner, for wearables and devices you connect; and our EHR connectivity partner, for health records you connect.

We do not share your data with other companies building on our infrastructure, and we do not sell it to third parties. We may disclose information if required by law, or to protect the rights and safety of our users.

We keep your information for as long as your account is active or as needed to provide Gia, respond to you, and meet legal obligations. Audio recordings of visits are deleted after 7 days; the transcript and summary stay in your record until you delete them or your account.

You can delete your account in the app under Profile › Settings › Privacy and data › Delete my account, or by contacting us. Deletion is scheduled for 30 days later, so you can restore the account by signing in again during that time; after that, your account, health, wearable, calendar and health-record data are permanently deleted.

One exception: records of who accessed your health records, and when, are kept even after the underlying data is deleted, since that audit trail is what lets us account for and secure access to health records. Those records contain only identifiers, actions, and timestamps, not your clinical content itself.

You can ask us to access, correct, export, or delete the information we hold about you, and you can disconnect any source (wearable, calendar, EHR) at any time, which stops future syncing. Disconnecting a source does not automatically delete what's already been collected; request deletion separately if you want that too.

You can allow or withdraw Gia's use of AI services at any time in Profile › Settings › Privacy and data › AI data sharing. You can change which Apple Health data Gia may read at any time in your iPhone's Settings › Health › Data Access & Devices › Gia.

To exercise any of these rights, contact us at admin@neemhealth.ai.

Gia is intended for adults and is not directed at children. We do not knowingly collect information from anyone under 18.

Gia is based in the United States and our systems are located here. If you use Gia from outside the U.S., your information will be processed in the U.S., which may have different data protection laws than your home country.

We may update this policy as Gia evolves. If we make material changes, we'll update the effective date above and, where appropriate, let you know directly.

Questions about this policy or your information? Reach us at admin@neemhealth.ai.