Longstory AI

Privacy Policy

This policy explains what happens to the documents you add to Longstory: who can see them, where they go, how long they stay, and how to get them back or delete them. It is written to be checked rather than trusted — where we name a company, you can go and read their terms too.

What we collect

  • Account. Your email address, how you sign in, and the devices you have signed in on — so you can get in, and sign a lost phone out.
  • Profiles. The names, relationships and dates of birth you enter, so one person’s records stay separate from another’s.
  • Documents. The files you add. They are the record.
  • Extracted facts. Values, dates and names read out of those documents — each stored with the page and the exact words it came from, so every fact can be traced back.
  • Access log. When a document was opened and by whom.
  • Diagnostics. Crash reports and error counts.

What we do not collect: no advertising identifiers, no third-party analytics, no session replay, no location. Our diagnostic events carry counts, durations and error types — never the contents of a record, a value, or a person’s name.

Who else processes your data

  • Supabase, Inc. Database, sign-in, encrypted file storage.
  • LandingAI, Inc. Reads the text out of your documents.
  • Amazon Web Services, Inc. Sends sign-in emails; builds the search index for your records.
  • Google LLC. Sign in with Google, if you choose it.

What LandingAI does with your documents — read this one. To turn a scan into a readable history, the pages of your documents are sent to LandingAI. We are on their pay-as-you-go plan, and under their terms of service documents sent on that plan may be used by LandingAI “to develop, train and finetune LandingAI’s models”. So your documents may be used to improve LandingAI’s software. They are not sold and not shared with anyone else, but they are not processed and immediately forgotten either. LandingAI offers a Zero Data Retention option on their paid plans, under which documents are held only in memory and never used for training. We intend to move to it, and this section will say so and be dated when we do. Until then, this is what happens, and we would rather tell you than let you assume otherwise.

The AI that writes explanations

  • Every generated sentence is grounded in your own documents and carries a citation to the page it came from. If the answer is not in your records, the app says so rather than answering from general knowledge.
  • Longstory never diagnoses. It reads your reports back to you. A value appears marked only when the laboratory itself printed a flag against it — never because of what we think the number means.

How long we keep things

  • Your documents and the facts read from them: until you delete them.
  • A deleted person’s records: 30 days, so a mistake can be undone, then permanently destroyed.
  • A deleted account: destroyed immediately. There is no recovery window — deleting an account is meant to mean it.
  • Access log: [SET] months.
  • Crash reports: [SET] days. Encrypted backups: [SET] days.

How it is protected

  • In transit: TLS 1.2 or higher, everywhere.
  • At rest: AES-256, provider-managed keys.
  • Separated by person: every query is scoped to one profile before anything else, enforced by the database and not only by the app.
  • On your phone: you can require Face ID, a fingerprint or your passcode to open the app.

Your rights

Export everything, correct anything, delete a person’s records or your whole account, withdraw consent, or complain to your local data protection authority. Corrections you make are kept and ours are superseded — never overwritten. We answer requests within 30 days.

Health privacy

Longstory is a consumer app. You add your own records; we are not your doctor, your hospital or your insurer, and we are not acting on their behalf. That means we are not a HIPAA covered entity, and we make no HIPAA claim. We are still bound by consumer health-privacy law where you live — the US FTC Health Breach Notification Rule, Washington’s My Health My Data Act, California’s CCPA/CPRA, the UK and EU GDPR, and the equivalents in Australia and Canada. Nothing here asks you to waive any of it.

Never

  • We do not sell your data, and there is no version of Longstory in which we do.
  • No advertising, and nothing shared with advertisers.
  • We do not train our own models on your health records.
  • Paying for someone’s account gives you no access to their records. A seat grants nothing.

When this policy changes materially we will tell you in the app before the change takes effect. Changes to who processes your data will always be announced, never quiet.