picardo.

Legal

Privacy Policy

Last updated: October 28, 2026

1. Scope and who we are

This Privacy Policy explains how ProcessPilot, Inc., doing business as Picardo ("Picardo," "we," "our," or "us"), handles personal information when you use our website, web dashboard, iOS app, AI health assistant, lab-ordering features, our app for AI assistants such as ChatGPT, and related support services (collectively, the "Service").

Picardo is intended for adults in the United States. Please read this policy together with our Terms of Service.

2. Information we collect

Depending on the features you use, we may collect:

  • Account and profile information: Name, email address, phone number, date of birth, biological sex, mailing address, profile details, account status, authentication records, and information from a sign-in provider you choose.
  • Health and medical information: Lab orders and results, uploaded medical documents and images, biomarker values, conditions, prescriptions, supplements, goals, protocols, symptoms or concerns you share, visit information, and other information you add to your health record.
  • Apple Health information: With your permission, the iOS app can read selected HealthKit data. The categories Picardo supports include cardiovascular and vital signs (heart rate, resting heart rate, heart-rate variability, blood pressure, blood oxygen saturation, and body temperature); activity and workouts (steps, walking and running distance, flights climbed, exercise time, active and resting energy burned, and workouts); sleep and respiratory data (sleep duration and stages, sleeping wrist temperature, and respiratory rate); body measurements (height, weight, body fat percentage, and lean body mass); glucose and nutrition (blood glucose, dietary energy, and water intake); and reproductive and sexual health (basal body temperature, menstrual flow, spotting, persistent spotting, infrequent or irregular menstrual cycles, prolonged periods, cervical-mucus quality, ovulation-test results, progesterone-test results, pregnancy-test results, pregnancy status, bleeding during or after pregnancy, contraception, lactation, and sexual activity). Picardo does not write data to Apple Health.
  • Content and communications: AI-assistant conversations, support requests, feedback, voice recordings or transcripts you choose to provide, telehealth audio/video, and photos, videos, PDFs, or other attachments you select.
  • Orders, appointments, and transactions: Tests or products ordered, collection or appointment details, fulfillment status, purchase history, and payment status. Stripe processes payment-card entry; Picardo may receive a payment-method token and limited card details such as brand and last four digits, but not the full card number.
  • Device, usage, and diagnostic information: IP address, approximate location derived from IP, device and operating-system type, browser or app version, identifiers, referring page, feature interactions, timestamps, security logs, performance information, and crash or error reports.

We collect information from you, from devices or services you choose to connect, and from partners involved in an order or service you request. Apple Health access is optional and controlled through Apple's permission interface.

3. How we use information

We use personal information to:

  • Create, authenticate, secure, and support your account.
  • Organize and display your health record, trends, goals, medications, supplements, protocols, and source documents.
  • Generate the AI-powered explanations, summaries, and responses you ask for and personalize them using the health context in your account.
  • Facilitate lab orders, collection appointments, results delivery, telehealth visits, prescriptions, refills, and physical-product orders where those features are available.
  • Process payments and provide transaction records.
  • Send account, security, order, appointment, result, and support communications and, where permitted, newsletters or product updates. We send SMS only when you have opted in.
  • Maintain reliability, troubleshoot errors, prevent fraud or abuse, and understand how non-advertising product features are used.
  • Review conversations with the health assistant to help keep you safe and to check the quality and accuracy of its replies, as described in section 4.
  • Comply with law and enforce our agreements.

We may create aggregated or de-identified information that is not reasonably linkable to you and use it for security, analytics, product improvement, and research. We do not attempt to re-identify that data.

4. AI processing

Picardo uses AI systems to read documents, organize health information, and power the health assistant. To do this, we send information to AI service providers. Depending on the feature, a provider may receive your messages, your voice, files you upload, and the parts of your account and health record the feature uses, including Apple Health data you share. Each provider receives only what its task needs, and we use their business or API services, not their consumer products.

Our AI service providers are OpenAI, Google (Gemini API), Perplexity, Deepgram, TypeSafe, and Anthropic. They process the information only on our instructions and to provide their services to Picardo, under terms that require them to protect it with the same or equal protection as this policy.

AI output may be inaccurate. It is informational and is not a substitute for medical advice, diagnosis, or treatment.

Review of conversations with the health assistant

We review conversations with the health assistant to help keep you safe and to check the quality of its replies.

  • An automated system reviews conversations after they take place. It may use the AI service providers described above. It looks for signs that you may be at risk of harm, and for replies that may be unsafe, inaccurate or unhelpful.
  • If the review flags a conversation, authorized Picardo personnel, including clinicians who work with Picardo, may read it. Only staff whose role requires it can read flagged conversations, and we log each time they do.
  • If a conversation suggests you may be at risk of serious harm, we may contact you using the contact details in your account.
  • This review is not real-time monitoring. No one watches conversations as they happen, and a flagged conversation may not be seen for a day or more. If you are in danger, call 911. If you are thinking about suicide or self-harm, call or text 988.

Picardo in ChatGPT and other AI assistants

Our apps for AI assistants, such as ChatGPT, let you do two things: browse our lab panels and tests, and combine the supplements you take into one custom supplement. Each gives you a link to review an order on picardo.health. The apps do not ask for or receive your name, contact details, health history, or conversation. When the assistant uses an app, the assistant's provider sends us only what the request needs: panel identifiers, Labcorp test codes, supplement ingredient names and amounts, or the words you search for. The apps cannot access Picardo accounts and do not link these requests to you.

  • Requests come from the assistant provider's servers, not your device. To prevent abuse, we keep a keyed hash of the requesting network address and a request count, and delete them within about an hour.
  • Our logs record which part of the app ran and whether it worked, not the panels, tests, ingredients, or words requested. Our hosting and error-monitoring providers keep standard request records, such as time and network address, for a limited period for security and troubleshooting.
  • A photo of your supplements that you share with the assistant stays with the assistant. We receive only the ingredient names and amounts it reads from the photo.
  • To show the price of a custom supplement, we send its ingredients and amounts, and nothing about you, to our manufacturing partner.
  • Order links contain only panel and test identifiers, or supplement ingredients and amounts. Anything you enter after opening one on picardo.health is handled as described in the rest of this policy.
  • Your conversation with the assistant is covered by its provider's privacy policy.

5. Apple Health and HealthKit

Picardo requests read-only HealthKit access solely to show the information in your dashboard and provide health features and personalized insights that you choose to use.

  • We do not use HealthKit data or metadata derived from it for advertising, marketing, determining eligibility for advertising, tracking across other companies' apps or websites, or sale to data brokers.
  • We do not sell HealthKit data or share it with third parties except service providers acting on our behalf to deliver a health feature you use, or where required by law.
  • We may use limited, account-linked metadata derived from HealthKit use—such as whether Apple Health is connected, whether a sync succeeded, and aggregate counts of synced records or health-feature use—in product analytics systems operated by Picardo or service providers acting on our behalf. We use this metadata solely to maintain reliability and safety and improve health-management features. These analytics events may be linked to your Picardo account, but do not contain raw HealthKit measurements or values. We prohibit analytics providers from using this information for advertising, marketing, or cross-company tracking.
  • You decide which categories to share and can change or revoke access at any time in the Apple Health app or iOS Settings. Revoking access stops future collection but does not automatically delete information already stored in your Picardo account; use Picardo's account-deletion control or contact us to request deletion.

6. When we disclose information

We do not sell personal information. We may disclose it to:

  • Infrastructure and security providers that host the Service, databases, encrypted files, authentication, email, monitoring, and diagnostics.
  • AI service providers listed in section 4, to provide the AI features described there.
  • Labs, clinicians, pharmacies, collection providers, telehealth providers, and fulfillment partners when necessary to provide an order, appointment, visit, prescription, or physical product you request.
  • Analytics and communication providers that process limited account, device, performance, product-use, and health-feature metadata on our behalf for product operations and communications, not targeted advertising or cross-company tracking.
  • Payment providers, including Stripe, that process transactions and limited payment-method details.
  • Professional advisers and authorities where reasonably necessary to comply with law, protect rights and safety, investigate fraud, or respond to valid legal process.
  • A successor organization in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not share SMS opt-in consent, mobile numbers, or text-message data with third parties or affiliates for their marketing or promotional purposes.

7. Advertising and tracking

Picardo does not run third-party targeted advertising in the Service. We do not use personal or health information to track you across unrelated companies' apps or websites for advertising, and we do not use HealthKit data for advertising or marketing. We may use first-party or service-provider analytics to measure product interactions, reliability, and performance.

8. Retention and deletion

We retain account and health information while your account is active and as needed to provide the Service. Different records may be kept for different periods based on their purpose. For example, security and diagnostic logs are generally kept for a shorter period, while transaction, laboratory, prescription, or clinical records may be retained where law, safety, fraud prevention, or professional obligations require it.

You can initiate account deletion in the Picardo app under Settings → Account. We will delete or de-identify personal information associated with your account, subject to records we must retain. Data in encrypted backups is removed through the ordinary backup-retention cycle. We may ask you to verify your identity or confirm the scope of a deletion request where needed to protect medical or transaction records.

9. Your choices and privacy rights

  • View and update available profile information in Settings.
  • Choose or revoke Apple Health permissions through Apple.
  • Opt out of SMS by replying STOP.
  • Initiate deletion in the app or contact us for assistance.
  • Request access, correction, deletion, or a copy of personal information, subject to applicable exceptions.

Depending on where you live, state privacy laws—including the California Consumer Privacy Act and Washington My Health My Data Act—may provide additional rights. To make a privacy request, email privacy@picardo.health. We may verify your identity before completing a request. You may use an authorized agent where permitted by law.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest for primary data stores, access controls, and security logging. No system is completely secure, and we cannot guarantee absolute security.

Whether HIPAA applies depends on the service and the parties involved. Regardless, we treat health information as sensitive and apply safeguards designed for that risk.

11. Children's privacy

Picardo is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.

12. Changes to this policy

We may update this policy as the Service or law changes. We will post the revised policy here, update the date above, and provide any additional notice required by law.

13. Contact us

For privacy questions or requests, email privacy@picardo.health. For product support, visit picardo.health/support or email support@picardo.health.

ProcessPilot, Inc. (DBA Picardo)
5900 Balcones Dr Ste 100
Austin, TX 78731-4298