HealthAI takes your health data privacy seriously:

• All personal health information (PHI) is encrypted at rest using AES-256
• Passwords are hashed with bcrypt (never stored in plain text)
• Sessions use short-lived JWT tokens with automatic rotation
• Your data is never sold or shared with advertisers
• You can export or permanently delete all your data at any time
• Chat history is encrypted and only accessible to you