Reven privacy policy

Reven is an app operated by Reven Health LLC, established in the United States, offering AI-assisted conversations and personal health tracking tools.

This policy explains how we collect, use, share and retain information when you use the app and the services that support it. Reven is intended for people aged 18 and over in the United States.

For questions or requests about your data, contact darioguerraaragon@gmail.com.

Depending on the features you use and the information you choose to provide, we may collect:

• Account information: user identifier, email address, name when provided, sign-in method and information needed to authenticate and protect your account.
• Profile information: name, age, selected sex or gender, emergency-contact phone number, goals and answers during initial setup. Provide information about other people only with their permission.
• Health information: symptoms, conditions, medications, habits, routines, measurements and other information you share through conversations, forms or follow-ups.
• Content and results: messages, selected images, audio, transcripts, generated responses, plans, reminders, completed activities, summaries, trends and interpretations associated with your account.
• Technical information: identifiers needed to deliver notifications, permissions, language, time zone, dates, reminder-scheduling activity and operational information needed for security and service functionality. Connection providers may also process information such as your IP address.

Use the availability shown in Reven to see which hospitals and connection features are enabled. A hospital appearing in the directory does not by itself mean it is available to connect. The separate Epic sandbox is limited to an authorized test account and fictional records. When you choose an available connection and authorize it through your hospital’s portal, Reven can import a read-only copy of the patient details, conditions, allergies, prescriptions, laboratory results and reports returned by the hospital, including linked PDF documents, images and text where the hospital shares supported attachments. Reven does not receive your hospital password. An import may contain only part of your history; not every document or medical image is available.

Automatic hospital updates are optional and offered only for supported connections. If you enable them and authorize access in MyChart, Reven stores an encrypted refresh token on its server to renew access and check that hospital about once a day, including when you are not using the app. A replacement token is stored when the hospital issues one. The duration and scope of access depend on the permission you grant and the hospital’s rules. If that permission expires or is revoked, you may need to authorize again. Turning this option off keeps your imported records.

We use information to:

• Create, authenticate and protect your account.
• Personalize conversations and follow-up plans.
• Save your history and display your progress.
• Manage reminders, activities and follow-ups.
• Handle questions and requests about your data.
• Prevent misuse and keep the service working.

AI-generated responses, summaries and interpretations may contain errors. Reven does not replace care from a healthcare professional or emergency services.

Connecting a hospital does not authorize AI use. In each hospital connection, you can separately choose “Allow in chat.” With that permission and your general AI consent, Reven may send relevant imported conditions, allergies, medications, laboratory results and structured reports to an external artificial intelligence provider to respond in text chat. It consults copies already stored in Reven when needed, rather than retrieving records from the hospital during a conversation. This feature does not include images or document attachments, and imported records may be incomplete or outdated. The permission starts off and can be withdrawn separately for each hospital. Withdrawal stops new hospital lookups and ongoing AI responses, without disconnecting the hospital or stopping record updates. Disconnecting the hospital also withdraws this permission. Responses and conversation summaries already created may remain until deleted under the app’s data controls. Information you separately type or upload is covered by the AI consent for that feature.

Reven uses an external artificial intelligence service provider to process information and generate responses and other app features.

Depending on the feature you use, we may send messages and relevant context from earlier conversations, profile or health information, selected images, audio and text for generated speech. The context sent may contain personal and health information.

Your saved Reven history is stored through our hosting and database providers. Sending content to the AI service for processing is a separate operation.

We keep the options for voluntarily sharing inputs and responses to improve or train the external provider's models disabled. This does not prevent the processing needed to provide AI features or eliminate applicable retention periods for security and other permitted purposes.

Deleting an original audio or image file does not necessarily delete its transcript, extracted information or responses that have become part of your history.

We use external services for specific functions:

The information sent depends on the feature you use.

Reven does not sell or rent personal information. We do not use or share health information for advertising or marketing.

Our providers may process information outside the state or country where you live. The location of a database does not determine the location of all processing performed by other services.

Imported hospital records and retrieved attachments remain associated with your Reven account until you delete that hospital connection and its records or delete your account. Turning off automatic updates or disconnecting a hospital deletes its saved renewal credential from Reven’s active systems and stops automatic updates; disconnecting also stops new manual imports until you reconnect. These actions retain the imported copy. Deleting the hospital connection and its records or deleting your account removes the imported copy and renewal credential from active systems. These actions do not delete your hospital’s medical record or themselves revoke permission at its portal. Manage permissions in MyChart to revoke the hospital’s authorization. Backups may retain earlier copies until their retention periods expire, as described below.

We retain your profile, conversations, plans and follow-up records while your account is active so that you can review your history and continue using the service. These records currently have no general automatic expiry.

Processing of original images and audio uses temporary storage. Transcripts, analysis results and other content added to your history have separate retention.

External providers may also retain information under the periods and terms applicable to their services.

If we must retain particular records to comply with a legal obligation, we will limit their use to that purpose.

You can request deletion from Profile → Delete account.

Deletion removes your authentication account and associated data from Reven's active systems. If the process cannot finish immediately, we block the account and retry the remaining operations.

Backups may retain earlier versions of data until their retention periods expire. They are intended for recovery, and completed deletions must be reapplied before a copy is returned to active service.

We retain a technical record derived from the account identifier and information about deletion processing to prevent erased information from reappearing during recovery. This record does not contain your conversations or health information. It currently has no automatic expiry.

Deleting your account does not mean that all backups or records retained by external providers disappear immediately.

You can request help or confirmation of deletion by contacting darioguerraaragon@gmail.com.

You can review your history, decide what information to provide, manage device permissions and delete your account. Where offered, you can enable or disable automatic hospital updates from the hospital connection screen. Manual updates remain available for supported connections.

Microphone, camera and notification permissions are managed in your device settings. Withdrawing a permission prevents its future use but does not by itself delete information already sent.

You can also contact darioguerraaragon@gmail.com to request access, correction, a copy of your data, deletion or withdrawal of consent to processing.

We may verify your identity before providing or changing personal information. We will explain the effects of your request on the service and respond within the legally applicable deadlines. Some features require certain information to work.

We apply safeguards including authentication, encrypted network connections, checks on access to each account's data and restricted permissions for application operations.

No system can guarantee absolute security. These measures do not mean that all information is end-to-end encrypted or that authorized providers cannot process it to deliver their services.

Reven is intended exclusively for people aged 18 and over.

If you believe a person under 18 has provided information through the app, contact us so that we can investigate and take appropriate action.

We may update this policy to reflect changes in the service or our obligations. We will indicate the date of the latest update and communicate material changes when appropriate.

Reven Health LLC
United States
darioguerraaragon@gmail.com