Skip to main content
TOPOS

How Topos Handles Your Health Data

Consumer Health Data Privacy Policy

Effective: April 13, 2026

This policy explains how Topos Health collects, uses, stores, and shares your health data. It is separate from our general Privacy Policy and our Terms of Service. We wrote it in plain language because you deserve to understand exactly what happens with some of the most personal information you have.

1. What health data we collect

Topos collects the health information you choose to share with us. Here is every category, described plainly:

Health conditions and diagnoses

What you tell us about your health: current conditions, past diagnoses, surgeries, and medical history.

Lab results and biomarkers

Blood work values you upload or share in conversation: cholesterol, glucose, thyroid markers, vitamin levels, and more.

Medications and supplements

What you're taking, dosages, timing, and reasons, both prescription medications and supplements.

Genetic information

APOE status, clinically relevant variants, and whole genome sequencing results. Today these reach Topos only from files you upload or from what you tell us directly. No laboratory sends results to us. If that changes, we will name the laboratory here before it starts. Sharing genetic data is always your choice.

Body composition and vitals

Weight, body fat percentage, blood pressure, resting heart rate, and other measurements you provide.

Wearable data

Sleep patterns, daily steps, heart rate, heart rate variability (HRV), workouts, and activity data from Apple Health and connected wearables.

Cycle and reproductive health

Your cycle tracking settings (cycle length, last period start, life stage, and hormonal birth control) and, if you share it from Garmin, your cycle schedule and pregnancy details such as your due date. Cycle tracking is always your choice and can be turned off at any time.

Family health history

Health conditions and patterns you share about your parents, grandparents, siblings, and children, used to identify inherited risk patterns.

Nutrition and lifestyle data

Food choices, exercise habits, sleep routines, supplement protocols, and lifestyle factors you share in conversation.

Conversation content

Everything you discuss with Topos: your questions, concerns, goals, and the context around them.

AI-generated health insights

Your Health Portrait, trajectory projections, coaching recommendations, and practice plans, all generated from the data you share.

2. Why we collect it

We collect your health data for one reason: to give you the most personalized, useful health guidance possible. Specifically:

Personalized guidance: to provide health insights based on your specific data, not generic advice that applies to everyone.

Your Health Portrait: to build a comprehensive, evolving picture of your health that connects your genetics, lab results, family history, daily habits, and wearable data into one intelligence layer.

Patterns and trajectories: to identify trends over time and project where your health is heading, so you can make informed decisions now.

Family health connections: to map health patterns across generations that inform your screening timelines and prevention strategies.

We do not collect health data for advertising, marketing to third parties, or selling. We never have and never will.

3. Where your data comes from

Directly from you: through conversations with Topos, manual entry, and uploaded documents.

Files you upload: lab result PDFs, medical records, Apple Health exports, and other health documents.

AI inferences: patterns, connections, and projections generated by analyzing the data you've shared. These are always derived from your data, never fabricated.

Family members: health patterns shared by family members who have joined your Family Circle, with their explicit consent.

4. Who we share your data with

We are transparent about every third party that touches your data:

Anthropic (AI processing): your conversation content is sent to Anthropic's API for AI analysis. Anthropic retains data for up to 30 days for safety monitoring and then deletes it, longer only where their automated safety systems have flagged the content, or where the law requires them to keep it. They do not use your data to train AI models.

Supabase (database hosting): your health data is stored in a Supabase PostgreSQL database with encryption at rest. Row-level security ensures each user can only access their own data.

Vercel (application hosting): hosts the application, so your data passes through Vercel's servers. Vercel also keeps the log our servers write while they work. A log line says what happened and names your account by its internal ID. We do not write what Topos generated for you, your results, or your email address to that log. An error's own message is kept in it, and an error message can include a word from the information it failed on. Separately, a page address can name a lab test, such as when you open one of your results from search, but never its value, what Topos wrote, or a person's name, and every address passes through Vercel's servers.

Sentry (error monitoring): receives a report when something goes wrong, or when one of our checks catches a mistake in something Topos wrote. A report says what failed and where, and carries your account's internal ID. Before a report is sent we remove what Topos wrote, the names and values of your results, and the kind of any safety concern, and we keep that detail in our own records instead. A report keeps the software's own error message, shortened, and an error message can include a word from the information it failed on. Earlier reports could include health information, and Sentry keeps those until its retention period ends. When an error happens in your browser, Sentry also receives a recording of the screen around it, with text masked and images left out. It receives timing records for a sample of ordinary requests.

Resend (email): your email address and email content (which may reference health topics) is processed by Resend for health digests and coaching emails. Resend also carries notices to our own team when something needs a person's attention. A notice can name you and say what kind of matter it is, and it can include a detail of the matter: what a check found wrong in something written for you, or what you wrote when you sent us feedback. Three notices are different: the one sent when a conversation reaches a safety screen, the one sent when a check holds back a plan made for you, and the one sent when a check keeps holding back your daily brief. Each carries your account's internal ID, and none carries your name, the kind of concern, or what the check found.

AssemblyAI and OpenAI (voice): only if you use voice. AssemblyAI receives your audio to turn it into text, with a list of names from your own record, as your record writes them (your medications, supplements, conditions and allergies, your lab tests and other results, genetic ones included, and your doctors and family members), so that it hears them correctly. OpenAI receives the text of Topos’s reply to turn it into speech, and no other part of your record. Neither uses your audio or text to train AI models. AssemblyAI does not keep the audio or the text of what it hears live, and deletes a short recording, its text and the names sent with it within a few days. OpenAI keeps the reply text, and may keep the audio made from it, for up to 30 days for abuse monitoring, then deletes them, except where the law requires it to keep them longer or it needs them to protect its services or another person from harm.

We do not share your data with:

Advertisers, data brokers, employers, insurers, or any entity that could use it for discriminatory purposes. We do not sell your health data. Period.

5. Family sharing: what family members can and cannot see

When you join a Family Circle, family health patterns are shared to help identify inherited risks. Here is exactly what that means:

What family members can see: Health patterns in your family (for example, “cardiovascular conditions present”) and that you are part of the Family Circle.

What family members cannot see: Your specific lab values, medications, supplement protocols, conversation content, personal goals, or daily habits, unless you explicitly choose to share them.

You control what your family sees in Settings. You can leave a Family Circle at any time, and your data will no longer be shared with that circle.

6. Your rights

You have full control over your health data. These rights are always available to you:

Access: you can see everything Topos knows about you at any time, in Settings under “My Data.”

Download: you can export your health data in a portable format.

Delete: you can request deletion of any or all of your health data. Deletion is permanent.

Withdraw consent: you can withdraw your consent for data collection at any time in Settings.

Correct: you can correct any inaccurate health data by updating it in the app or through conversation with Topos.

To exercise these rights: go to Settings → My Data in the app, or email privacy@topos.health.

7. Data security

We protect your health data with multiple layers of security:

Encryption: all data is encrypted in transit (HTTPS/TLS) and at rest (AES-256 via Supabase).

Row-level security: every database query is scoped to your user account. No other user can access your data, even if they somehow obtained a valid session.

Authentication: your account is secured with email authentication, with optional multi-factor authentication (MFA) available.

Error reports: when something goes wrong, a report goes to our error monitoring service (Sentry) and to our own error log. The report that goes to Sentry says what failed and for which account, and we take what Topos wrote and the names and values of your results out of it before it is sent. Our own error log keeps that detail and can include health information. What Sentry receives is listed under “Who we share your data with” above, and how long our own log is kept is in our general Privacy Policy under “Data Retention.”

Regular security audits: we conduct ongoing security reviews of our infrastructure and access controls.

8. Data retention

While your account is active: your health data is retained and used to provide you with personalized guidance. Your data gets more valuable over time as patterns and trends emerge.

When you delete your account: your health data is removed from our live systems when you confirm the deletion. This includes lab results, conversations, health portraits, family connections, and AI-generated insights. Copies held in routine database backups are overwritten on our hosting provider’s rolling schedule and are never restored into the product. We keep your consent records. The consent records hold no health data. Our log of the corrections you made and of changes to what you shared with family, and the record of any safety intervention, are deleted with your account. Error reports that name your account are deleted; one that never named an account is kept for up to 90 days. A notice already sent to our team about your account is kept for up to 90 days and can name you. Our general Privacy Policy explains why under “Delete your account.”

AI processing: Anthropic retains conversation data for up to 30 days after processing for safety monitoring, then deletes it. Flagged content, and anything they are legally required to keep, can be retained for longer.

Consent records: records of your consent decisions are retained indefinitely as a legal audit trail, even after account deletion. This protects both you and us.

9. Changes to this policy

If we make material changes to how we handle your health data, we will notify you via email and through an in-app notification before the changes take effect. For material changes that expand how we use your data, we may require you to re-consent before continuing to use Topos.

10. Contact

If you have questions about how your health data is handled, or if you want to exercise any of your rights:

Email: privacy@topos.health

Topos Health Company

General Privacy PolicyTerms of ServiceManage My Data
← Back To Where You Were

How Topos Handles Your Health Data

Consumer Health Data Privacy Policy

Effective: April 13, 2026 · 10 min read

On This Page

This policy explains how Topos Health collects, uses, stores, and shares your health data. It is separate from our general Privacy Policy and our Terms of Service. We wrote it in plain language because you deserve to understand exactly what happens with some of the most personal information you have.

1. What health data we collect

Topos collects the health information you choose to share with us. Here is every category, described plainly:

Health conditions and diagnoses

What you tell us about your health: current conditions, past diagnoses, surgeries, and medical history.

Lab results and biomarkers

Blood work values you upload or share in conversation: cholesterol, glucose, thyroid markers, vitamin levels, and more.

Medications and supplements

What you're taking, dosages, timing, and reasons, both prescription medications and supplements.

Genetic information

APOE status, clinically relevant variants, and whole genome sequencing results. Today these reach Topos only from files you upload or from what you tell us directly. No laboratory sends results to us. If that changes, we will name the laboratory here before it starts. Sharing genetic data is always your choice.

Body composition and vitals

Weight, body fat percentage, blood pressure, resting heart rate, and other measurements you provide.

Wearable data

Sleep patterns, daily steps, heart rate, heart rate variability (HRV), workouts, and activity data from Apple Health and connected wearables.

Cycle and reproductive health

Your cycle tracking settings (cycle length, last period start, life stage, and hormonal birth control) and, if you share it from Garmin, your cycle schedule and pregnancy details such as your due date. Cycle tracking is always your choice and can be turned off at any time.

Family health history

Health conditions and patterns you share about your parents, grandparents, siblings, and children, used to identify inherited risk patterns.

Nutrition and lifestyle data

Food choices, exercise habits, sleep routines, supplement protocols, and lifestyle factors you share in conversation.

Conversation content

Everything you discuss with Topos: your questions, concerns, goals, and the context around them.

AI-generated health insights

Your Health Portrait, trajectory projections, coaching recommendations, and practice plans, all generated from the data you share.

2. Why we collect it

We collect your health data for one reason: to give you the most personalized, useful health guidance possible. Specifically:

Personalized guidance: to provide health insights based on your specific data, not generic advice that applies to everyone.

Your Health Portrait: to build a comprehensive, evolving picture of your health that connects your genetics, lab results, family history, daily habits, and wearable data into one intelligence layer.

Patterns and trajectories: to identify trends over time and project where your health is heading, so you can make informed decisions now.

Family health connections: to map health patterns across generations that inform your screening timelines and prevention strategies.

We do not collect health data for advertising, marketing to third parties, or selling. We never have and never will.

3. Where your data comes from

Directly from you: through conversations with Topos, manual entry, and uploaded documents.

Files you upload: lab result PDFs, medical records, Apple Health exports, and other health documents.

AI inferences: patterns, connections, and projections generated by analyzing the data you've shared. These are always derived from your data, never fabricated.

Family members: health patterns shared by family members who have joined your Family Circle, with their explicit consent.

4. Who we share your data with

We are transparent about every third party that touches your data:

Anthropic (AI processing): your conversation content is sent to Anthropic's API for AI analysis. Anthropic retains data for up to 30 days for safety monitoring and then deletes it, longer only where their automated safety systems have flagged the content, or where the law requires them to keep it. They do not use your data to train AI models.

Supabase (database hosting): your health data is stored in a Supabase PostgreSQL database with encryption at rest. Row-level security ensures each user can only access their own data.

Vercel (application hosting): hosts the application, so your data passes through Vercel's servers. Vercel also keeps the log our servers write while they work. A log line says what happened and names your account by its internal ID. We do not write what Topos generated for you, your results, or your email address to that log. An error's own message is kept in it, and an error message can include a word from the information it failed on. Separately, a page address can name a lab test, such as when you open one of your results from search, but never its value, what Topos wrote, or a person's name, and every address passes through Vercel's servers.

Sentry (error monitoring): receives a report when something goes wrong, or when one of our checks catches a mistake in something Topos wrote. A report says what failed and where, and carries your account's internal ID. Before a report is sent we remove what Topos wrote, the names and values of your results, and the kind of any safety concern, and we keep that detail in our own records instead. A report keeps the software's own error message, shortened, and an error message can include a word from the information it failed on. Earlier reports could include health information, and Sentry keeps those until its retention period ends. When an error happens in your browser, Sentry also receives a recording of the screen around it, with text masked and images left out. It receives timing records for a sample of ordinary requests.

Resend (email): your email address and email content (which may reference health topics) is processed by Resend for health digests and coaching emails. Resend also carries notices to our own team when something needs a person's attention. A notice can name you and say what kind of matter it is, and it can include a detail of the matter: what a check found wrong in something written for you, or what you wrote when you sent us feedback. Three notices are different: the one sent when a conversation reaches a safety screen, the one sent when a check holds back a plan made for you, and the one sent when a check keeps holding back your daily brief. Each carries your account's internal ID, and none carries your name, the kind of concern, or what the check found.

AssemblyAI and OpenAI (voice): only if you use voice. AssemblyAI receives your audio to turn it into text, with a list of names from your own record, as your record writes them (your medications, supplements, conditions and allergies, your lab tests and other results, genetic ones included, and your doctors and family members), so that it hears them correctly. OpenAI receives the text of Topos’s reply to turn it into speech, and no other part of your record. Neither uses your audio or text to train AI models. AssemblyAI does not keep the audio or the text of what it hears live, and deletes a short recording, its text and the names sent with it within a few days. OpenAI keeps the reply text, and may keep the audio made from it, for up to 30 days for abuse monitoring, then deletes them, except where the law requires it to keep them longer or it needs them to protect its services or another person from harm.

We do not share your data with:

Advertisers, data brokers, employers, insurers, or any entity that could use it for discriminatory purposes. We do not sell your health data. Period.

5. Family sharing: what family members can and cannot see

When you join a Family Circle, family health patterns are shared to help identify inherited risks. Here is exactly what that means:

What family members can see: Health patterns in your family (for example, “cardiovascular conditions present”) and that you are part of the Family Circle.

What family members cannot see: Your specific lab values, medications, supplement protocols, conversation content, personal goals, or daily habits, unless you explicitly choose to share them.

You control what your family sees in Settings. You can leave a Family Circle at any time, and your data will no longer be shared with that circle.

6. Your rights

You have full control over your health data. These rights are always available to you:

Access: you can see everything Topos knows about you at any time, in Settings under “My Data.”

Download: you can export your health data in a portable format.

Delete: you can request deletion of any or all of your health data. Deletion is permanent.

Withdraw consent: you can withdraw your consent for data collection at any time in Settings.

Correct: you can correct any inaccurate health data by updating it in the app or through conversation with Topos.

To exercise these rights: go to Settings → My Data in the app, or email privacy@topos.health.

7. Data security

We protect your health data with multiple layers of security:

Encryption: all data is encrypted in transit (HTTPS/TLS) and at rest (AES-256 via Supabase).

Row-level security: every database query is scoped to your user account. No other user can access your data, even if they somehow obtained a valid session.

Authentication: your account is secured with email authentication, with optional multi-factor authentication (MFA) available.

Error reports: when something goes wrong, a report goes to our error monitoring service (Sentry) and to our own error log. The report that goes to Sentry says what failed and for which account, and we take what Topos wrote and the names and values of your results out of it before it is sent. Our own error log keeps that detail and can include health information. What Sentry receives is listed under “Who we share your data with” above, and how long our own log is kept is in our general Privacy Policy under “Data Retention.”

Regular security audits: we conduct ongoing security reviews of our infrastructure and access controls.

8. Data retention

While your account is active: your health data is retained and used to provide you with personalized guidance. Your data gets more valuable over time as patterns and trends emerge.

When you delete your account: your health data is removed from our live systems when you confirm the deletion. This includes lab results, conversations, health portraits, family connections, and AI-generated insights. Copies held in routine database backups are overwritten on our hosting provider’s rolling schedule and are never restored into the product. We keep your consent records. The consent records hold no health data. Our log of the corrections you made and of changes to what you shared with family, and the record of any safety intervention, are deleted with your account. Error reports that name your account are deleted; one that never named an account is kept for up to 90 days. A notice already sent to our team about your account is kept for up to 90 days and can name you. Our general Privacy Policy explains why under “Delete your account.”

AI processing: Anthropic retains conversation data for up to 30 days after processing for safety monitoring, then deletes it. Flagged content, and anything they are legally required to keep, can be retained for longer.

Consent records: records of your consent decisions are retained indefinitely as a legal audit trail, even after account deletion. This protects both you and us.

9. Changes to this policy

If we make material changes to how we handle your health data, we will notify you via email and through an in-app notification before the changes take effect. For material changes that expand how we use your data, we may require you to re-consent before continuing to use Topos.

10. Contact

If you have questions about how your health data is handled, or if you want to exercise any of your rights:

Email: privacy@topos.health

Topos Health Company

The Set, Cross-Linked
General Privacy PolicyTerms of ServiceManage My Data

A reader of one is usually vetting all three. The set travels together at the foot of each page.