picardo.

Legal

Privacy Policy

Last updated: July 17, 2026

1. Scope and who we are

This Privacy Policy explains how ProcessPilot, Inc., doing business as Picardo ("Picardo," "we," "our," or "us"), handles personal information when you use our website, web dashboard, iOS app, AI health assistant, lab-ordering features, and related support services (collectively, the "Service").

Picardo is intended for adults in the United States. Please read this policy together with our Terms of Service.

2. Information we collect

Depending on the features you use, we may collect:

  • Account and profile information: Name, email address, phone number, date of birth, biological sex, mailing address, profile details, account status, authentication records, and information from a sign-in provider you choose.
  • Health and medical information: Lab orders and results, uploaded medical documents and images, biomarker values, conditions, prescriptions, supplements, goals, protocols, symptoms or concerns you share, visit information, and other information you add to your health record.
  • Apple Health information: With your permission, the iOS app can read selected HealthKit data. The categories Picardo supports include body measurements and composition; heart rate, resting heart rate, heart-rate variability, blood pressure, and VO2 max; blood oxygen, respiratory rate, peak expiratory flow, and inhaler use; activity, workouts, distance, flights climbed, and energy burned; sleep; body and basal temperature; water intake; blood glucose and insulin delivery; and menstrual flow, spotting, ovulation-test results, cervical-mucus quality, and sexual activity. Picardo does not write data to Apple Health.
  • Content and communications: AI-assistant conversations, support requests, feedback, voice recordings or transcripts you choose to provide, telehealth audio/video, and photos, videos, PDFs, or other attachments you select.
  • Orders, appointments, and transactions: Tests or products ordered, collection or appointment details, fulfillment status, purchase history, and payment status. Stripe processes payment-card entry; Picardo may receive a payment-method token and limited card details such as brand and last four digits, but not the full card number.
  • Device, usage, and diagnostic information: IP address, approximate location derived from IP, device and operating-system type, browser or app version, identifiers, referring page, feature interactions, timestamps, security logs, performance information, and crash or error reports.

We collect information from you, from devices or services you choose to connect, and from partners involved in an order or service you request. Apple Health access is optional and controlled through Apple's permission interface.

3. How we use information

We use personal information to:

  • Create, authenticate, secure, and support your account.
  • Organize and display your health record, trends, goals, medications, supplements, protocols, and source documents.
  • Generate the AI-powered explanations, summaries, and responses you ask for and personalize them using the health context in your account.
  • Facilitate lab orders, collection appointments, results delivery, telehealth visits, prescriptions, refills, and physical-product orders where those features are available.
  • Process payments and provide transaction records.
  • Send account, security, order, appointment, result, and support communications and, where permitted, newsletters or product updates. We send SMS only when you have opted in.
  • Maintain reliability, troubleshoot errors, prevent fraud or abuse, and understand how non-advertising product features are used.
  • Comply with law and enforce our agreements.

We may create aggregated or de-identified information that is not reasonably linkable to you and use it for security, analytics, product improvement, and research. We do not attempt to re-identify that data.

4. AI processing

Picardo uses AI systems to parse documents, organize health information, and power the health assistant. Relevant prompts, conversations, files, and account health context may be processed by AI service providers such as Google, OpenAI, or Anthropic to provide the feature you request.

  • We contract for business or API services and do not authorize providers to use your health information to train their general public models.
  • AI output may be inaccurate. It is informational and is not a substitute for medical advice, diagnosis, or treatment.

5. Apple Health and HealthKit

Picardo requests read-only HealthKit access solely to show the information in your dashboard and provide health features and personalized insights that you choose to use.

  • We do not use HealthKit data or metadata derived from it for advertising, marketing, determining eligibility for advertising, tracking across other companies' apps or websites, or sale to data brokers.
  • We do not sell HealthKit data or share it with third parties except service providers acting on our behalf to deliver a health feature you use, or where required by law.
  • We may use limited, account-linked metadata derived from HealthKit use—such as whether Apple Health is connected, whether a sync succeeded, and aggregate counts of synced records or health-feature use—in product analytics systems operated by Picardo or service providers acting on our behalf. We use this metadata solely to maintain reliability and safety and improve health-management features. These analytics events may be linked to your Picardo account, but do not contain raw HealthKit measurements or values. We prohibit analytics providers from using this information for advertising, marketing, or cross-company tracking.
  • You decide which categories to share and can change or revoke access at any time in the Apple Health app or iOS Settings. Revoking access stops future collection but does not automatically delete information already stored in your Picardo account; use Picardo's account-deletion control or contact us to request deletion.

6. When we disclose information

We do not sell personal information. We may disclose it to:

  • Infrastructure and security providers that host the Service, databases, encrypted files, authentication, email, monitoring, and diagnostics.
  • AI service providers as described above, to provide the document-processing and assistant features you request.
  • Labs, clinicians, pharmacies, collection providers, telehealth providers, and fulfillment partners when necessary to provide an order, appointment, visit, prescription, or physical product you request.
  • Analytics and communication providers that process limited account, device, performance, product-use, and health-feature metadata on our behalf for product operations and communications, not targeted advertising or cross-company tracking.
  • Payment providers, including Stripe, that process transactions and limited payment-method details.
  • Professional advisers and authorities where reasonably necessary to comply with law, protect rights and safety, investigate fraud, or respond to valid legal process.
  • A successor organization in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not share SMS opt-in consent, mobile numbers, or text-message data with third parties or affiliates for their marketing or promotional purposes.

7. Advertising and tracking

Picardo does not run third-party targeted advertising in the Service. We do not use personal or health information to track you across unrelated companies' apps or websites for advertising, and we do not use HealthKit data for advertising or marketing. We may use first-party or service-provider analytics to measure product interactions, reliability, and performance.

8. Retention and deletion

We retain account and health information while your account is active and as needed to provide the Service. Different records may be kept for different periods based on their purpose. For example, security and diagnostic logs are generally kept for a shorter period, while transaction, laboratory, prescription, or clinical records may be retained where law, safety, fraud prevention, or professional obligations require it.

You can initiate account deletion in the Picardo app under Settings → Account. We will delete or de-identify personal information associated with your account, subject to records we must retain. Data in encrypted backups is removed through the ordinary backup-retention cycle. We may ask you to verify your identity or confirm the scope of a deletion request where needed to protect medical or transaction records.

9. Your choices and privacy rights

  • View and update available profile information in Settings.
  • Choose or revoke Apple Health permissions through Apple.
  • Opt out of SMS by replying STOP.
  • Initiate deletion in the app or contact us for assistance.
  • Request access, correction, deletion, or a copy of personal information, subject to applicable exceptions.

Depending on where you live, state privacy laws—including the California Consumer Privacy Act and Washington My Health My Data Act—may provide additional rights. To make a privacy request, email privacy@picardo.health. We may verify your identity before completing a request. You may use an authorized agent where permitted by law.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest for primary data stores, access controls, and security logging. No system is completely secure, and we cannot guarantee absolute security.

Whether HIPAA applies depends on the service and the parties involved. Regardless, we treat health information as sensitive and apply safeguards designed for that risk.

11. Children's privacy

Picardo is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.

12. Changes to this policy

We may update this policy as the Service or law changes. We will post the revised policy here, update the date above, and provide any additional notice required by law.

13. Contact us

For privacy questions or requests, email privacy@picardo.health. For product support, visit picardo.health/support or email support@picardo.health.

ProcessPilot, Inc. (DBA Picardo)
5900 Balcones Dr Ste 100
Austin, TX 78731-4298