Privacy Policy

Effective date: October 6, 2026

Ami is a personal health assistant. It gathers your health records into one place and helps with the admin around your care. Your health information is some of the most sensitive information you have, so this policy explains in plain language what we collect, what we do with it, who else touches it, and how to take it back.

1. The short version

We use your information to run Ami for you. We do not sell it.
We never use your health information for advertising, and nothing from your Ami account, chats, or records is sent to advertising platforms.
We do not use your information to train AI models, and our AI provider, Anthropic, does not train its models on it under the commercial terms we use.
Ami only connects to the accounts you choose, and you can disconnect any of them, remove what Ami saved, or delete your account.
Ami is not a doctor and generally not a HIPAA-covered entity, but we voluntarily follow HIPAA-style safeguards. We explain below what that means.

2. Who we are and what this covers

Ami is operated by Lightshift Health, Co., a Delaware corporation (“Lightshift Health,” “we,” “us”). This policy covers our website at amihealth.app, the Ami web app at secure.amihealth.app, and Ami when you talk to it by iMessage or WhatsApp (together, “Ami”). Our Terms of Service also apply.

3. Ami, HIPAA, and medical care

HIPAA is the US law that governs how doctors, hospitals, health plans, and their contractors handle health information. Ami is a service you use for yourself. We are not a health care provider or a health plan, and we do not work for one, so we are generally not a “covered entity” or “business associate” under HIPAA. That means the information you keep in Ami is generally not protected by HIPAA once it leaves your doctor or insurer and reaches us.

We still choose to follow HIPAA-style safeguards. When we say Ami is “HIPAA aligned,” we mean that we voluntarily model how we handle your information on HIPAA's security and privacy practices, not that HIPAA legally applies to us or that we have been certified. In practice, that means we encrypt information in transit and encrypt saved logins, limit access to production systems to the people who need it to run Ami, and collect and use only the minimum information needed to do what you ask. We are also working toward Business Associate Agreements with the vendors that handle your health information on our behalf.

Instead, it is protected by this policy, by the security measures described below, and by consumer-protection and state privacy laws, including the FTC's Health Breach Notification Rule. If there were ever a breach of your health information, we would tell you as those laws require.

Ami is not a medical provider and does not give medical advice, diagnosis, or treatment. Always talk with your clinicians about your care. Ami is not for emergencies: if you think you may have a medical emergency, call 911.

4. What we collect

Information you give us

Early-access requests. Your name, email, what you would like help with, and which page you came from. If you book a call, the details you enter on our booking page.
Your account. The phone number or messaging account you use to talk to Ami. You sign in to the web app with a one-time code Ami sends you in that same conversation.
Your conversations. What you send Ami and what Ami sends back, including facts you tell it about yourself, such as your address, your insurance, or your doctors.
Photos. When you send a photo in chat, Ami looks at it once, writes a short description of it into your message (for example, the name and dates on a lab report), and then discards the image. We keep the description, not the photo.
Logins you save. If you save a login for a patient portal, insurer, pharmacy, or similar site, we store it encrypted (see “Saved logins and acting for you”). You may also pass along sign-in codes those sites send you.

Information from accounts you connect

Gmail (read-only). If you connect Gmail, Ami searches it for health-related email, such as messages from insurers, patient portals, labs, pharmacies, and appointment reminders, and reads those messages and their PDF attachments to find your records. With your separate permission, Ami also reads a small number of recent order and account emails to learn your address and phone number, and keeps only those details. Ami cannot send, delete, or change your email.
Google Drive and Docs. If you connect Drive, Ami searches the files already in your Drive and reads them to find your existing health documents, such as lab results, visit summaries, and insurance and billing records. Ami does not change, delete, or share your existing files, and documents that are not health-related are not imported. Ami also files copies of the health documents it finds, and letters it drafts for you, in a folder it creates in your own Drive. Ami can create and edit only the files it created itself.
Google Calendar (read-only). If you connect Calendar, Ami reads your events to know when you're free and to spot health appointments. Ami cannot create, change, or delete events.
Portals you save a login for. The records, claims, statements, and other pages and documents Ami retrieves when it signs in for you.
Health information networks. In the future, with your authorization, we may request your records from health information networks and patient-access programs. We will ask before we do.

Information Ami creates for you

From the sources above, Ami builds your Health Vault: your records, a timeline, a summary of your health picture with the evidence behind each line, and a memory of facts about you and your care. It also drafts letters, such as requests for your medical records, for you to review. To fill in details, Ami may look up public information, such as a doctor's specialty in the federal NPI registry or an office's records-request fax number on the web.

Information collected automatically

On our website (amihealth.app). Pages you view, clicks, device and browser details, and how you arrived (for example, an ad or search link), using the analytics and advertising tools described below. We also keep a note in your browser of how you first arrived, which is sent with your early-access request.
In the Ami app. A sign-in cookie that keeps you signed in, and technical logs we use to keep the service running. We design those logs to leave out the content of your messages and records. The Ami app does not use advertising or analytics trackers.

5. How we use it

To run Ami for you: gather and organize your records, answer your questions, and do the tasks you ask for.
To sign you in, verify it is you before sensitive actions, and keep your account secure.
To send you messages about your account and the tasks Ami is doing for you.
To fix problems and improve Ami. When we need to look at a specific conversation or record to fix a problem or look into misuse, only the people who need to will see it.
To follow up on early-access requests and understand whether Ami is a fit for you.
To measure our website and our ads (website only, never your Ami account).
To comply with law and protect Ami, our users, and others.

We do not sell your personal information. We do not use your health information for advertising or to build advertising profiles. We do not use your information to train AI models.

6. How Ami uses AI

Ami runs on Claude, an AI model made by Anthropic. To answer you, read a record, or draft a letter, we send the relevant information (your message, recent conversation, and the parts of your records needed for the task) to Anthropic for processing. Anthropic's built-in web search is used for tasks like finding an office's contact details.

We use Anthropic under its commercial terms, which do not allow Anthropic to train its models on the information we send. Anthropic may keep that information for a limited time under its own retention terms, for example to detect misuse. Information already sent to Anthropic cannot be recalled by deleting it from Ami.

AI can be wrong. Ami shows you the evidence behind what it tells you so you can check it, and you can correct or remove anything it gets wrong.

7. Saved logins and acting for you

When you save a login for a portal, you give Ami standing permission to sign in to that account for you, retrieve your records and related information, and bring them back to your Health Vault, until you remove the login. Ami uses a secure remote browser, run by Browserbase, to sign in the way you would. If a site asks for a sign-in code or a “prove you're human” check, Ami asks you rather than getting around it.

Saved logins are encrypted using public-key encryption before they are stored. The part of Ami you type them into can only lock them; only the service that signs in for you can unlock them, and no one, including you, can read a saved password back from Ami. We keep a log of every time a saved login is used. You can remove a saved login at any time.

When Ami drafts a letter for you, such as a request for your medical records, you review it, sign it, and send it yourself. Ami does not send letters, share your records, or take other sensitive actions without your approval.

8. Google user data

Ami's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Ami connects to your Google account directly, using Google sign-in (OAuth), and only with your permission. No other company sits between Ami and Google. Ami's access tokens are stored encrypted, and information from Google is used only for the features described below.

What Ami accesses

Gmail (read-only). Ami can read your mail. It cannot send, delete, or change it.
Google Drive. Ami can search and read the files already in your Drive (read-only). It does not change, delete, or share them. Ami can also create and edit files in the folder it creates in your Drive, and only files it created itself.
Google Calendar (read-only). Ami can read your calendar. It cannot create, change, or delete events.

How Ami uses it

Gmail: with your permission, Ami reads your mail to find health records (insurance, lab results, visit summaries) and files them in your Vault.
Google Drive: with your permission, Ami searches and reads the files already in your Drive to find your existing health documents (lab results, visit summaries, insurance and billing records) and files them in your Vault. Ami uses what it reads only to build your health record, and documents that are not health-related are not imported. Ami also saves copies of your records, and letters it drafts for you, to an ‘Ami Health Records’ folder in your Drive.
Google Calendar: Ami reads your calendar to know when you're free and to spot health appointments.

Ami uses information from Google only to provide these features to you. It is not sold, and it is not used for advertising.

How long it is kept

The connection and Ami's access token are removed when you disconnect. Records Ami saved from your Google account stay in your Vault until you delete them or delete your Ami account.

You can disconnect your Google account at any time from your Ami account, or revoke Ami's access in your Google Account settings.

10. Analytics and advertising

Our website (amihealth.app) uses PostHog for analytics and the Meta Pixel to measure our ads. These tools set cookies and receive standard browser details and the address of the pages you view. Some of our page addresses name a situation, such as amihealth.app/cancer, so a page address can suggest a topic you read about. When you submit the early-access form, we send Meta a scrambled (hashed) copy of your email so we can tell which ads work. We do not send Meta what you told us you need help with.

The Ami app, your chats, and your Health Vault do not use these tools, and nothing from them is shared with advertisers. You can block or clear cookies in your browser settings, and you can ask us to stop this website measurement for you (see “Your choices and rights”).

11. How we protect it

Information is encrypted in transit between you, Ami, and our providers.
Saved logins are encrypted as described above and cannot be read back.
Sign-in codes expire after 10 minutes and are stored only in scrambled form. Sensitive actions, like deleting your account, require you to have verified it is you recently.
Access to production systems is limited to the people who need it to run Ami.
Ami connects to Gmail, and to the files already in your Drive, with read-only access and asks for your approval before sensitive actions.

No system is perfectly secure. If we learn of a breach that affects your information, we will notify you as the law requires.

12. How long we keep it

We keep your account information, conversations, and Health Vault for as long as you have an account, so Ami can keep helping you. You can remove parts of it at any time (see below).

When you delete your account, we stop Ami's access right away, disconnect your Google accounts, and delete your information from our systems within 24 hours. Copies in our routine backups are removed as those backups expire, and we never restore them into an account. We may keep a limited record where the law requires it.

Some copies are outside our control:

Files Ami saved to your Google Drive belong to you and stay there until you delete them.
Information already sent to our providers, such as Anthropic, is kept under their own retention terms.
Messages you exchanged with Ami also remain on your phone and with Apple or Meta.

We keep early-access requests until you ask us to delete them or we no longer need them to follow up with you.

13. Your choices and rights

Wherever you live, you can:

See your information. Your records, health picture, and what Ami remembers are in the Ami app.
Correct it. Correct, confirm, or ask Ami to forget any line of your health picture, or dispute or forget anything it remembers.
Remove parts of it. Remove records, remove saved logins, disconnect Gmail or Drive, and delete the data Ami collected from Gmail.
Get a copy. If you connect Drive, Ami files copies of your records there as it works. For a copy of everything else we hold about you, email us.
Delete your account. Email us and we will verify it is you and delete your account as described above.
Withdraw permission. Disconnect any source, remove any saved login, or revoke Ami's access to your Google account at any time in your Google Account settings.

To make a request, email support@amihealth.app. We will confirm it is you, usually by asking you to verify through your Ami conversation, and respond within 45 days. If we deny your request, you can appeal by replying to our decision; we will answer your appeal within 45 days. We will not treat you differently for using your rights.

14. Consumer Health Data Privacy Notice

This notice is for residents of Washington (under the My Health My Data Act), Nevada, and other states with consumer health data laws. Almost everything Ami handles is “consumer health data” under those laws.

What consumer health data we collect

Health conditions, symptoms, diagnoses, treatments, medications, test results, procedures, appointments, clinicians and care locations, insurance coverage and claims, bills, and any other health information in your messages, photos, email, documents, and the portals you connect, plus information Ami infers from them, such as your health summary.

Where it comes from

From you, from the accounts and portals you connect, and from public sources Ami looks up for you, as described in “What we collect.”

Why we collect and use it

Only to provide Ami to you: to gather and organize your records, answer your questions, and do the tasks you ask for, plus keeping Ami secure and complying with law. You consent to this when you connect a source or share information with Ami, and you can withdraw that consent at any time.

Who we share it with

The providers in “Who we share it with” that help run Ami (Anthropic, Google, Supabase, Railway, Browserbase, and Photon, Apple, and Meta for message delivery), and others only at your direction or as the law requires. We do not sell consumer health data, and we do not share it for advertising.

Your rights

You can confirm whether we collect, share, or sell your consumer health data; get a copy of it and a list of the third parties and affiliates we have shared it with and how to reach them; delete it; and withdraw your consent. Email support@amihealth.app to use these rights. You can appeal a denial by replying to our decision. If your appeal is denied you may contact your state Attorney General.

15. California residents

The California Consumer Privacy Act, as amended, gives California residents rights over their personal information. In the last 12 months we have collected the categories described in “What we collect”: identifiers (such as name, email, phone number), customer records, health and insurance information, account login credentials, internet activity on our website, and inferences drawn from those. We collect them from the sources and use them for the purposes described above, and share them with the providers listed in “Who we share it with.”

Your health information and saved logins are “sensitive personal information.” We use it only to provide Ami and as the law allows, not to infer characteristics about you for other purposes.

We do not sell personal information. Our use of the Meta Pixel on our website may count as “sharing” for cross-context behavioral advertising under California law. To opt out, email support@amihealth.app with the subject “Do not share,” and block cookies in your browser. We do not knowingly sell or share the information of anyone under 16.

You have the right to know what we collect and how we use and share it, to access, correct, and delete it, to opt out of sharing, to limit the use of sensitive personal information, and not to be discriminated against for using these rights. You can use an authorized agent, whom we may ask to prove they have your permission. Email support@amihealth.app to make a request.

16. Other US states

If you live in a state with its own privacy law, such as Colorado, Connecticut, Virginia, Texas, or Oregon, you may have rights like those above, including to access, correct, delete, and get a copy of your information, to opt out of targeted advertising, and to appeal our decision. We give these rights to all users. Email support@amihealth.app to use them.

Ami is for people in the United States. We store and process your information in the United States.

17. Children

Ami is only for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email support@amihealth.app and we will delete it.

18. Changes to this policy

We will update this policy as Ami changes. We will post the new version here with a new effective date. If a change materially affects how we handle information we already have, we will tell you in advance by message or email and, where the law requires, ask for your consent.

19. Contact us

To access, export, or delete your information, to use any of the rights above, or with any other question or complaint about your privacy, email support@amihealth.app. You can also write to Lightshift Health, Co., 169 Madison Ave, Ste 38488, New York, NY 10016.

Lightshift Health, Co. · 169 Madison Ave, Ste 38488, New York, NY 10016 · support@amihealth.app

Ami is not a medical provider and does not give medical advice. In an emergency, call 911.

← Back to Ami