Privacy Policy

Last updated: 20 October 2026

1. Summary at a glance

This summary is for orientation only. The numbered sections below govern.

• What Ēnel is. Ēnel is a community-powered health-evidence platform. We measure real-world evidence on products that people already use, and we publish the result. We are observational. We never supply, prescribe, or recommend treatment, and nothing on the platform is medical advice.
• What you share. Participation is voluntary. You tell us who you are when you create an account, and you report on products you already use. You can withdraw and delete.
• How we hold it. Your account and your health data are stored in two separate databases. They are linked only by a random code that is not built from any of your details.
• What we will never do. We never sell your personal data. We never share it with insurers. We never share it with employers. We never share it with law enforcement except under a valid legal order, which we record. We never let a brand buy, place, or edit a verdict.
• Your control. You can access, correct, export, restrict, or delete your data, withdraw consent, and opt out of any sale, sharing, or targeted advertising. We do not discriminate against you for exercising these rights.
• Consult your physician. Ēnel does not give medical advice. For medical decisions, consult your own physician. In an emergency, call your local emergency number.

2. Who we are, scope, and contact

2.1 Who we are

Ēnel (“Ēnel,” “we,” “us,” or “our”) operates the Ēnel platform at enelhealth.com and related services. The legal entity responsible for your personal data is Enel Health Inc, located at 5639 La Jolla Blvd, La Jolla, CA 92037, United States.

2.2 Scope

This policy explains how we collect, use, disclose, and protect personal data when you visit enelhealth.com, create an account, submit observational reports, connect a device or wearable, or otherwise interact with Ēnel (together, the “Services”). It also describes your rights and how to exercise them.

This policy does not apply to third-party websites, products, or services that we do not control, including the makers of products you choose to report on and the providers of wearables or devices you choose to connect. Their handling of your data is governed by their own policies.

2.3 A note on HIPAA

Ēnel does not handle health data on behalf of healthcare providers or health plans.

Ēnel is most likely not a “covered entity” or a “business associate” under the US Health Insurance Portability and Accountability Act (HIPAA), because Ēnel is not a healthcare provider, a health plan, or a healthcare clearinghouse, and does not provide treatment, payment, or healthcare operations on behalf of such entities. As a result, HIPAA generally does not apply to the data you share with us. This does not lower our standard of care. We protect your sensitive consumer health data under the consumer privacy and consumer health data laws described in this policy. [TO CONFIRM: legal review of HIPAA status for the final entity and service design is pending.]

2.4 How to contact us

For privacy questions or to exercise your rights, contact us at support@enelhealth.com or through our contact page. Postal mail can be sent to 5639 La Jolla Blvd, La Jolla, CA 92037, United States.

3. Definitions

The following terms are used throughout this policy.

• Personal data (also “personal information”) means information that identifies, relates to, or could reasonably be linked with you or your household.
• Consumer health data means personal data that identifies your past, present, or future physical or mental health status, including the products you report using and any health-related inferences. This term is defined by laws such as the Washington My Health My Data Act, the Nevada consumer health data law (SB 370), and the Connecticut Data Privacy Act as amended.
• Observational report means information you voluntarily submit about a product you already use and what you have observed.
• Evidence means the measured and de-identified records that make up the published record, separated from your identity as described in Section 7.
• De-identified and pseudonymized describe data that has been separated from direct identifiers so that it cannot, on its own, be attributed to you. Pseudonymized data can in principle be re-linked only through information we hold separately and protect; the random code described in Section 7 is designed so that the health side cannot be traced back to you.
• Process means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• Sale and share have the meanings given under California law. “Sale” means disclosing personal data for monetary or other valuable consideration. “Share” means disclosing personal data for cross-context behavioral advertising. We do neither, as described in Section 10.

4. Information we collect and our sources

We collect only what we need to run the Services and to build the record. The categories below describe what we may collect and where it comes from.

4.1 Account and identity information

When you create an account, we collect information such as your name or chosen display name, email address, password credentials (stored only in hashed form), and any profile details you choose to add. We may collect a year of birth or an age confirmation to verify eligibility (see Section 15). Source: you.

4.2 Observational reports

When you report on a product you already use, we collect the content of that report, including the product, your observations, the period of use, and any structured measures you choose to provide. This is consumer health data. Source: you.

4.3 Connected wearable and device data

If you choose to connect a wearable or device, or to import data from a third-party health service, we collect the data you authorize, which may include metrics such as heart rate, heart rate variability, sleep, activity, temperature, or other measurements offered by that source. We collect this only with your explicit consent and only to the extent you authorize. Source: you, and the device, wearable, or service you connect, acting on your instruction.

4.4 Health files you add

If you choose to add health files, such as PDFs of lab results, test reports or letters from your doctor, we store them for you. Each file is encrypted on your device before it is uploaded, is stored encrypted, and is visible only in your account. Adding a file does not provide medical analysis, diagnosis or emergency monitoring. You can download or delete any file at any time. Deleting a file, deleting your data or closing your account removes it. Source: you.

4.5 Health photos you add

If you choose to add health photos, such as photos of your skin, a rash, hives, acne, redness, a mole, a bruise, a cut, stretch marks, an injection site, your hair, scalp, eyes, mouth, nose or ears, we store them for you so you can see how they change. Before a photo leaves your device, the location and other hidden details are removed from it and it is encrypted. It is stored encrypted and is visible only in your account. Before a photo is kept, Google Cloud Vision checks that it is a health photo and not explicit, and uses it for nothing else. Photos of anyone else, of intimate areas or of anything unrelated are not accepted, and a photo that is not accepted is deleted at once. Adding a photo does not provide medical analysis, diagnosis or emergency monitoring. You can download or delete any photo at any time. Deleting a photo, deleting your data or closing your account removes it. Source: you.

Photo tags. If you agree to photo tags, we keep tags from each new photo: the area you chose, what Google Cloud Vision saw, and what Claude, an AI model from Anthropic, notices by a fixed set of measurements for that area, such as redness, swelling or a scab, and how it compares with your last photo of the same area. We never keep the photo itself for this. Google Cloud Vision checks every photo before it is kept; with your yes, Claude looks at each new photo once to make these tags. With your yes, our own measuring software, running on our Google Cloud servers in the United States, also measures photos of moles, cuts, injection sites, bruises and rashes: the size of the spot against a US quarter beside it, and its colour against the skin around it. Only those numbers are kept with your tags, never the photo. The tags are kept in our separate health database under a random code, not with your name or account. They are used for research and may later tailor your recommendations. They are wellness information, never a diagnosis. If you delete a photo, its tags stay with no link to you. You can turn photo tags off at any time in Privacy and data: the tags linked to you are then erased, and those with no link to you stay.

4.6 Voice and video check-ins

If you choose to check in by voice or video, we ask you two questions first. You can change either answer at any time in Privacy and data.

• Use for research. If you agree, your voice is used for research. We measure how you speak, such as your pace, pauses, pitch and steadiness, and we may run research models that look for signs linked to mood. If you say no, your DayLog is text only and your voice is not recorded or measured.
• Track your progress over time. If you allow it, we keep your voice as its own sound file, encrypted on your device before it is uploaded, so your DayLog can be tracked over time. You can play it, and so can anyone you share that video with. If you do not allow it, your voice is measured and then deleted, and only the numbers are kept.

Your spoken words are turned into text by AssemblyAI and saved in that day’s DayLog. Your videos are encrypted on your device before they are uploaded, and only you and the people you choose to share them with can see them. The measures made from your voice are wellness signals, never a diagnosis. We never use your voice to identify you, and we never sell it. Source: you.

Voice as biometric data. Some states, including Illinois, Texas and Washington, treat voice recordings and voice measurements as biometric data. We collect your voice only with your separate consent, use it only for the measures described here, never use it to identify you and never sell it. When you turn off Use for research or Track your progress over time, delete your data or close your account, only processed data, tags and extracted analytics in cohort systems will be kept.

4.7 Technical and usage information

When you use the Services, we automatically collect technical data such as IP address, device and browser type, operating system, language settings, pages viewed, the website that referred you, and timestamps. We use this to operate, secure, and improve the Services. Source: your device and our systems.

4.8 Communications

When you contact us, respond to a survey, or otherwise communicate with us, we collect the content of those communications and our records of them. Source: you.

4.9 Payment information

Ēnel is currently free to use and does not use a payment processor. If paid tiers are introduced in the future (see Section 13 and the Terms of Use), we will update this policy to identify the payment processor, the billing information collected, and the records retained before payment processing begins.

4.10 What we do not collect

We do not ask you to submit other people’s identifiable data. We do not seek to collect more sensitive data than the Services require. We do not build advertising profiles about you (see Section 16).

5. How and why we use your information

We use personal data for the purposes below.

5.1 To provide the Services

We use your account and report data to create and maintain your account, to accept and process your observational reports, and to operate the platform.

5.2 To build and publish the record

We use de-identified evidence to measure efficacy and publish findings, including the Ēnel Index and credible interval, as part of the append-only record.

For observational real-world evidence (RWE) studies, we obtain participants’ explicit consent before using their health data for the study. Each study’s consent says who can take part, and studies are not limited to people who live in the United States.

5.3 To connect devices and wearables you authorize

We use connection and import data to bring in the measurements you have authorized. We also use the Apple Health readings you import or save for analytics, which Tailglow carries out for us (see Section 8.1).

5.4 To secure and maintain the Services

We use technical and usage data to keep the Services safe, to detect and prevent fraud and abuse, to debug, and to maintain reliability.

5.5 To communicate with you

We use your contact details to respond to you, to send service messages, and, where you have opted in or where permitted, to send updates about Ēnel.

5.6 To comply with law

We use personal data as needed to comply with legal obligations and valid legal orders, and to establish, exercise, or defend legal claims.

5.7 Withdrawing consent

Where we rely on consent, you can withdraw it at any time (see Section 11). Withdrawal does not affect processing carried out before withdrawal. You can also delete your data or your account as described in Section 14.

6. Consumer health data notice

This section is a specific notice for consumer health data, provided to meet laws including the Washington My Health My Data Act, the Nevada consumer health data law (SB 370), and the Connecticut Data Privacy Act as amended. It supplements the rest of this policy.

6.1 What consumer health data we collect and why

We collect the consumer health data described in Sections 4.2, 4.3, 4.4, 4.5 and 4.6: your observational reports, any wearable or device data you choose to connect, any health files and health photos you choose to add, and your voice and video check-ins, including voice recordings and the measures made from them. We collect it to operate the Services and to build the published record, as described in Section 5. We collect it from you and from sources you authorize.

6.2 Separate consent

We obtain your consent to collect consumer health data separately from any general acceptance of these documents. Consent is a clear affirmative act that is freely given, specific, informed, opt-in, voluntary, and unambiguous. Accepting a broad terms-of-use document, hovering over content, or any deceptive design does not count as consent. We obtain separate consent before sharing consumer health data with a service provider in a way that requires it. You give this consent through a dedicated consent step that names the categories of health data we process and the purposes for which we process them.

6.3 No sale of consumer health data

We do not sell your consumer health data. Selling consumer health data would require a separate, specific, written authorization from you under Washington and Nevada law, and we do not seek one. Our position is firmer than the law requires: we will not sell it. See Section 9.

6.4 Who may receive consumer health data

We share consumer health data only with the service providers and processors needed to run the Services, under contracts that bind them, and only as described in Section 8. We name the categories of recipients in Section 8 and can provide, on request, a list of the specific third parties and affiliates that have received your consumer health data.

6.5 Your rights in consumer health data

You have the right to access your consumer health data, to obtain a list of third parties and affiliates with whom it has been shared, to withdraw your consent to its collection and sharing, and to have it deleted, including from backups and archives as described in Section 14. To exercise these rights, see Section 11.

6.6 Geofencing

We do not use geofences around healthcare, mental health, or reproductive or sexual health facilities to identify, track, collect data from, or send messages to consumers based on their consumer health data.

7. The two-database model and coded health data

How we hold your data is central to this policy.

7.1 Two databases, held apart

Your account and your health data are stored in two separate databases. One holds your account: who you are, your consent record and your daily logs. The other holds the health records you import, voice measures and coded research data, with no names, email addresses or account details. Keeping them apart means the health database on its own does not show who any record belongs to.

7.2 The random code

The only link between the two databases is a random code. It is made at random, not built from your name, email address or any other detail, so it cannot be recreated from them. The list that matches each code to an account stays on the account side and is never stored with the health data, so a record in the health database cannot be traced back to you through that database.

7.3 What this means for you

This design separates identity from research evidence. Deleting your account or data also removes the associated research contributions, as described in Section 14.

7.4 Analytics does not know who you are

Our analytics providers are never told who you are, whether or not you are signed in. Analytics carries no identifier for you or your account, so it cannot be joined to your account or to the evidence database.

8. How we share and disclose information

We share personal data only in the limited circumstances below. We do not sell it, and the five prohibitions in Section 9 always apply.

8.1 Service providers and sub-processors

Our current service providers that handle user data are Neon, Resend, PostHog, Vercel, AssemblyAI, Google Cloud, Anthropic, OpenAI, and Tailglow. This section lists these providers and their roles. They act on our instructions under data processing agreements (DPAs) that require them to protect the data and forbid them from using it for their own purposes. Our vendor controls are described in the Data Security Policy.

Our infrastructure and communications providers include Neon for database services and Resend for email delivery. Neon uses Amazon Web Services (AWS) for the underlying database infrastructure; we use AWS through Neon. Neon and Resend store our user data in the United States. We have data processing agreements in place with Neon and Resend.

Vercel also hosts the Services and stores, encrypted, the files you add, such as videos, voice files, health files and health photos. AssemblyAI turns your spoken words into text. Google Cloud runs our voice analysis server in the United States, which opens a voice file only to measure it and keeps nothing, and our photo measuring server in the United States, which opens a health photo only to measure it and keeps nothing. Google Cloud Vision checks each health photo you add before it is kept, in the United States, and uses it for nothing else. Anthropic runs the DayLog guide when AI and voice is on, and its model Claude describes the health photos you add when you agree to photo tags. OpenAI reads the health files you add to pull out their values. Tailglow analyses the readings from the Apple Health export you save. It receives them under a random code instead of your name or account, with the dates shifted, and with your date of birth, device names and locations removed.

Our analytics providers are PostHog, Inc. (product analytics, with data held in the United States) and Vercel Inc. (Web Analytics and Speed Insights, which set no cookies). They receive only the usage information described in Section 17, with no identifier for you. They never receive names, email addresses, free text you write, DayLog content, or which products a person uses. We have data processing agreements in place with both providers.

8.2 Legal compliance and protection

We may disclose personal data where required by law or a valid legal order, or to establish, exercise, or defend legal claims, or to protect the rights, safety, and security of users, the public, or Ēnel. Where we disclose personal data to law enforcement, we do so only under a valid legal order, and we record that order, as stated in Section 9.

8.3 Business transfers

If Ēnel is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction. We will require any successor to honor this policy and the five prohibitions in Section 9.

8.4 With your direction

We share data as you direct, for example when you connect a wearable or service at your instruction.

8.5 Who we never share with

We never share your personal data with insurers, employers, or brands as described in Section 9. We never let a brand buy, place, or edit a verdict. The evidence is uninfluenced.

9. The five absolute prohibitions

These prohibitions bind Ēnel. They are commitments, not preferences.

1. We never sell your personal data.
2. We never share it with insurers.
3. We never share it with employers.
4. We never share it with law enforcement, except under a valid legal order, which we record.
5. We never let a brand buy, place, or edit a verdict. The evidence is uninfluenced.

10. Sale and sharing: we do neither

We do not sell personal data, and we do not share personal data for cross-context behavioral advertising, as those terms are defined under California law. We have not sold or shared personal data in the preceding 12 months, and we do not intend to. Because we do not sell or share, there is nothing for you to opt out of in that respect, but you may still record an opt-out preference and we will honor opt-out preference signals. See Section 11.

11. Your rights and choices

Depending on where you live, you have some or all of the rights below. We honor these rights for all users where we reasonably can, and we apply them as required by your local law.

11.1 The rights

• Access: know what personal data we hold about you and obtain a copy.
• Correct: fix inaccurate or incomplete data.
• Delete: delete your personal data as described in Section 14.
• Port: receive certain data in a portable, machine-readable format.
• Restrict: ask us to limit processing in certain circumstances.
• Object: object to processing based on legitimate interests, and object to direct marketing at any time.
• Withdraw consent: withdraw any consent you have given, at any time.
• Opt out: opt out of any sale, sharing, or targeted advertising. As stated in Section 10, we do not engage in these, but you may still register your preference.
• Limit sensitive data use: direct us to use sensitive personal data only for permitted purposes.
• Non-discrimination: exercise your rights without being denied service, charged a different price, or given a lower quality of service.
• Human review of automated decisions: where applicable, see Section 16.

11.2 How to exercise your rights

You can exercise most rights from within your account, or by contacting us at support@enelhealth.com or through our contact page. You do not need to pay to make a request.

11.3 Identity verification

To protect your data, we will take reasonable steps to verify your identity before acting on a request, using information already associated with your account. We will not use the information you provide for verification for any other purpose.

11.4 Authorized agents

You may use an authorized agent to submit a request on your behalf. We require the agent to show written permission from you and verify your identity directly with you.

11.5 Our response times

We respond within the timeframes set by applicable law, generally within 45 days under US state laws (extendable once where permitted). We will tell you if we need more time.

11.6 Appeals

If we decline your request, you may appeal. Send your appeal to support@enelhealth.com. We will respond to your appeal within the period required by your local law (for example, within 60 days under several US state laws) and will explain our decision. If your appeal is denied, we will tell you how to contact your state attorney general or relevant regulator.

12. Regional disclosures

12.1 California (CCPA and CPRA)

If you are a California resident, you have the rights to know, access, correct, and delete your personal information, to opt out of sale and sharing, to limit the use of sensitive personal information, and to non-discrimination, as described in Section 11.

Categories overview. In the preceding 12 months, we may have collected the following categories of personal information as defined by the CCPA: identifiers (such as name, email, IP address); customer records (such as account details and, if applicable, billing records); internet and network activity (such as usage data); geolocation (general, derived from IP); and sensitive personal information, specifically health data contained in your observational reports, any connected device data, and any health files and health photos you add, and, only with your consent, voice recordings and voice measurements, which some states treat as biometric information. We collect these for the business purposes in Section 5, from the sources in Section 4. We disclose them only to the categories of recipients in Section 8. We do not sell or share personal information, including sensitive personal information. We use sensitive personal information only for purposes permitted under the CPRA, such as providing the Services you request.

12.2 Washington, Nevada, Connecticut, and other US states

If you are covered by the Washington My Health My Data Act, the Nevada consumer health data law (SB 370), the Connecticut Data Privacy Act, or another US state privacy or consumer health data law, the consumer health data notice in Section 6 and the rights in Section 11 apply to you. The rights available, and any appeal and complaint routes, follow your state’s law. [TO CONFIRM: legal review of applicable state-specific disclosures and effective dates is pending.]

12.3 International users generally

Our database is hosted through Neon using Amazon Web Services (AWS) infrastructure in the United States. Wherever your data is processed, the protections in this policy and the five prohibitions in Section 9 apply.

13. Founding members and future tiers

The “founding members free, forever” offer is described in the Terms of Use. Paid tiers may be introduced in the future. If they are, any associated payment processing will be handled as described in Section 4.8, and this policy will be updated.

14. Data retention and deletion

14.1 How long we keep data

We keep personal data to provide the Services while your account is active. Voice files you allow us to keep are kept while your account is open. When you close your account, only processed data, tags and extracted analytics in cohort systems will be kept, except data you gave to a study, which is removed as described in Section 14.2. You can delete your data or your account at any time using the account controls described below.

14.2 Deleting your account or data

Choosing Delete Data removes your contributions and associated data while keeping your account open. We do not retain your personal information or your raw files. When you delete your data or close your account, only processed data, tags and extracted analytics in cohort systems will be kept. Data you gave to a study is the exception: it is removed too, including what is held for study analysis. Backup copies expire within seven days after deletion.

14.3 Corrections to the record

Published findings are not quietly edited. Corrections are appended to the record with the date and the reason, so the history stays intact and visible.

15. Children’s privacy

The Services are for adults. You must be at least 18 years old to use Ēnel, as stated in the Terms of Use. We do not knowingly collect personal data from anyone under 18, and we do not knowingly collect personal data from children under 13 in a manner that would require parental consent under the US Children’s Online Privacy Protection Act (COPPA). If we learn that we have collected data from someone under 18, we will delete it. If you believe a minor has provided us data, contact us at support@enelhealth.com.

16. Automated decision-making

We do not use your personal data for advertising profiling, and we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without a lawful basis and appropriate safeguards. The published findings are produced by a measurement method applied to de-identified evidence; they are statements about products, not automated judgments about you. Where any automated processing would have a significant effect on you, you have the right to request human review, to express your point of view, and to contest the decision, as provided by applicable law. Reports of adverse health events, other health concerns, or a participant’s death receive review by the institutional review board (IRB) and a clinician before decisions about study participation are made. These decisions are not made solely by an automated system.

17. Analytics and tracking

Analytics sets no cookies and stores nothing on your device, on enelhealth.com and on the Atlas at atlas.enelhealth.com. It tells us which pages are visited, which steps people take, such as opening an Atlas entry or starting to sign up, and which parts of a Flip are read and for how long. To count visitors without a cookie, PostHog computes a code on its own servers from your IP address and browser details. The code changes every day and PostHog does not keep your IP address with it, so it cannot follow you from one day to the next. Our analytics providers never receive your name, your email address, anything you write, what you record in a DayLog, or which products you use, and they are not told who you are, even when you are signed in.

We honor Global Privacy Control. If your browser sends it, analytics does not run on our sites and our servers record nothing about your visit for analytics.

Vercel Web Analytics and Speed Insights measure page views and page speed without setting cookies, and they also stop under Global Privacy Control.

18. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, give you additional notice, such as by email or an in-product notice. Your continued use of the Services after an update means you accept the updated policy, to the extent permitted by law.

19. Contact and complaints

For privacy questions, requests, or complaints, contact us at support@enelhealth.com or through our contact page.

If you are in a US state with a privacy or consumer health data law, you may contact your state attorney general.