Privacy Policy

Last updated: September 12, 2026

1. Information We Collect

Data Type	What We Collect	Purpose
Account Info	Email address, professional role	Authentication, user segmentation
Queries	Questions you ask the AI	Provide responses, improve service quality
Chat History	Question-answer pairs	Enable history feature, quality analysis
Session Data	Device type, browser, session duration	Usage analytics, UX improvement
Approximate Location	Country and state or region, derived from your IP address. Our hosting providers may process IP addresses in network and security logs.	Usage analytics
Feedback	Thumbs up/down ratings, optional comments	Quality assurance
Billing	Subscription status and Stripe or Apple transaction identifiers	Manage your subscription and paid access

2. Information You Must Not Submit

Do not enter patient-identifying information, social security numbers, government IDs, or other sensitive personal information. Use hypothetical educational scenarios. We screen for some identifier patterns, but this screening cannot detect every identifier or guarantee that text is de-identified. Content that is not blocked may be processed and stored as described below.

We do not receive your full payment-card details. We do not request GPS access or your address book.

3. How We Use Your Information

Provide the Service — process your queries and return AI-generated responses with citations
Improve quality — analyze query patterns and feedback to improve response accuracy
Usage analytics — understand how the tool is used to guide feature development
Security — detect and prevent abuse, prompt injection, and unauthorized access

4. Data Storage & Security

We use HTTPS and account-based access controls. Authentication, storage and processing use third-party cloud infrastructure. These controls reduce risk but do not make this a system for patient records.

5. Third-Party Services

Google Firebase provides authentication and account storage; Supabase supports retrieval and shared answer caching; our n8n workflows coordinate processing; AI providers process questions and retrieved educational material to generate and check answers. Our application analytics include account-linked questions, activity and feedback, and are not anonymous. Stripe and Apple process subscriptions through their respective payment systems. We do not sell your information or share it with third parties for their marketing.

6. Data Retention

Chat history is retained until you delete it (via the Clear All History feature)
Pinned messages are retained until individually unpinned and deleted
Clearing chat history removes the history entries shown in your account. It does not by itself remove separate analytics or diagnostic records.
Account deletion removes your profile, flashcards, history and the activity records linked by your account ID. A minimal deletion receipt is retained to prevent account writes from restarting during deletion. Older diagnostic records linked only by a session identifier, shared educational cache entries, and provider-held billing records are not automatically removed by this process. Contact us for a review of remaining records.
Educational questions and checked answers may be stored in a shared cache and served to other users. Identifier screening is limited, so never submit patient information. Negative feedback is recorded for review; Regenerate requests a fresh answer and does not delete the shared cache.
Cancel Stripe renewal before deleting your account. Apple subscriptions must be managed through your Apple account; deleting your Neo account does not cancel Apple billing. Deletion forfeits remaining access.

7. Your Rights

You can:

View your chat history within the app
Delete individual conversations or all history
Delete your account via the Settings menu
Request a data export by emailing info@neoanesthesia.io

8. Children's Privacy

Neo Anesthesia is designed for healthcare professionals and students. We do not knowingly collect information from anyone under 18 years of age.

9. HIPAA Notice

Do not enter patient information into Neo Anesthesia. This Service is not HIPAA-compliant and should never be used to process, store, or transmit protected health information (PHI). Use only de-identified, hypothetical, or educational scenarios.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be reflected in the "Last updated" date above.

11. Contact

For privacy questions or data requests, contact us at info@neoanesthesia.io.