Privacy Policy

Who we are

UniversalHX ("UHX") is operated by Axella Research LLC, a New York limited liability company. In this policy "we" and "us" mean Axella Research LLC.

This policy covers the UHX Personal Record website at record.universalhx.com and the UHX apps for iPhone and Android.

The short version

• Your record is yours. We do not sell it, we do not use it for advertising, and we do not give it to anyone for their own marketing.
• Nobody sees it unless you share it, and every share can be withdrawn.
• You can see who has looked at your record, under Record Activity.
• You can delete your account and your record from inside the app.
• There are no advertising or analytics trackers in UHX.

What we collect

We collect only what the service needs to work:

• Account details: your name, email address, phone number, and sign-in settings such as two-factor authentication. Passwords are stored by our sign-in provider in hashed form; we never see them.
• Your health record: what you import from health systems and practices you connect (for example visits, conditions, medications, allergies, immunizations, procedures, lab and diagnostic results, clinical notes, insurance coverage, and demographics); what you upload or scan (documents and photos, such as an insurance card); and what you enter yourself (medications, reminders, intake answers, your emergency card).
• Records of family members you manage, such as a child or a parent you care for.
• Connection details: the authorizations health systems give us so we can read on your behalf. These are stored encrypted and are never shown to anyone.
• Wearable data, only if you connect a wearable device.
• Activity logs: who opened or changed your record and when (you can see these yourself), and sign-in events with the time, browser or device, and IP address, which we use to keep your account secure.
• Device information for notifications, only if you turn notifications on: a device token that lets us deliver them.
• Messages you send and receive in UHX, which the people in that conversation can see, and messages you send us, such as a support request.

We do not collect your precise location, your contacts, or advertising identifiers.

How we use it

• To build your record and show it to you.
• To run the features you choose: sharing, intake forms for a practice, reminders, trial matching, the assistant, and your emergency card.
• To keep your account and your record secure, and to investigate misuse.
• To answer you when you contact us.
• To meet our legal obligations.

We do not sell your information. We do not use it for advertising or to build a marketing profile. We do not use your record to train artificial intelligence models, and we do not allow our providers to.

AI features

Some features use artificial intelligence: the assistant, reading a document you scan or upload, summaries, health trends, and suggesting answers on an intake form. They are off until you allow them, either when you create your account or the first time you use one, and you can turn them off at any time in Settings, under AI and your data. When you use one, the part of your record that feature needs is sent to Anthropic, which provides the AI model, to produce your answer. Anthropic processes it for us under terms that do not permit it to use your information to train its models.

The assistant does not build a memory of you from your conversations.

Who we share it with

Your information leaves UHX only in these cases:

• People you choose. When you share a document or part of your record, invite another guardian for a family member, send intake forms to a practice, message someone in UHX, or contact a clinical trial, it goes to the person or practice you picked. You review a trial message before it is sent. Once a practice has received your forms, its copy is also governed by that practice’s own privacy practices.
• Your emergency card, if you turn it on. Anyone with your card’s link or code can open it after giving their name, role and agency, and see the emergency details you chose to put on it. Your clinical history, care team, AI summary and insurance, if you included them, are shown only to someone whose National Provider Identifier (NPI) is active and matches their name in the national NPI registry run by the Centers for Medicare & Medicaid Services. Each time the card is opened, we keep what the person entered, the time, and their IP address, and show it to you in your Record Activity and the card’s access log, and we notify you.
• Service providers that run UHX for us, under contracts that limit them to doing that. They are listed below.
• When the law requires it, such as a valid court order. Unless we are prohibited from doing so, we will tell you first.
• If our business changes hands. If UHX, or the company that runs it, is reorganized, merged, or sold, including a transfer to a company formed to run UHX, your information would move with it. The new operator would be bound by this policy, and we would tell you in the app before it happened.

Our service providers

These companies process information on our behalf so the service can run:

• Supabase: our database, sign-in, and file storage, in the United States.
• Vercel: hosts the website and the servers behind it.
• Anthropic: the AI model behind the AI features, when you use them.
• Resend: delivers email from UHX, such as share invitations and reminders.
• Twilio: video visits, when you use them.
• Metriport: finds your records across national health information networks, when you ask it to.
• Terra: connects wearable devices, when you connect one.
• Apple, Google, and Expo: deliver notifications to your phone, if you turn them on. They receive a device token and the notification text, which never contains health details.

Health systems you connect, such as a hospital using Epic, are not our service providers. You sign in to them directly and approve what we may read; we never see your portal password.

When someone opening your emergency card enters an NPI, we look that number up in the public NPI registry run by the Centers for Medicare & Medicaid Services. Only the number is sent, never anything about you.

Notifications

Notifications are off until you turn them on, and you can turn them off in the app or in your phone’s settings. Because they can appear on a locked screen, they say only that something needs your attention, for example "You have a medication reminder" or "Your record was viewed". They never contain health details, which are shown only after you open UHX and sign in. The one exception to "no details" is who opened your emergency card: that notification names the person and the role and agency they entered, so you can lock the card at once if you do not recognize them.

The UHX phone app

The UHX app for iPhone and Android shows the same UHX Personal Record, and this policy covers it in the same way. The app itself does not keep a copy of your record on your phone; what you download from it is saved only where you choose.

It asks for your camera, photos, or microphone only when you use something that needs them: scanning a card or a form, adding a photo, or a video visit. You can withdraw any of these in your phone’s settings.

If you turn on the app lock, your phone checks your Face ID, Touch ID, or fingerprint and tells the app only whether it matched. UHX never receives your biometric data.

Cookies and browser storage

UHX uses only what it needs to work: your sign-in session is kept in your browser’s storage, and a short-lived cookie remembers that you entered the PIN for a shared record. We use no advertising cookies and no analytics.

Because we do not sell or share personal information for advertising, there is nothing for a "Do Not Track" or Global Privacy Control signal to switch off; we treat every visitor as if one were set.

How we protect it

Information is encrypted when it travels to and from UHX and when it is stored. Access inside the system is limited to the record’s owner and the people they have authorized, and it is enforced by the database itself, not only by the app. Staff access is limited and logged.

No system is perfect. If your information is ever accessed without authorization, we will tell you, and the Federal Trade Commission where its Health Breach Notification Rule requires it, as quickly as we can and within the time the law allows.

Health information and HIPAA

UHX is a personal health record: a service you use for yourself, not one your doctor uses to treat you. For that reason the federal HIPAA law generally does not apply to the copy you keep here. We protect it to at least the same standard, and the Federal Trade Commission’s rules for personal health records do apply to us.

The records held by your doctors and hospitals remain governed by HIPAA and by their own policies.

Keeping and deleting your information

We keep your information for as long as you have an account.

You can delete your account from inside the app. Before anything happens, it shows you exactly what will be removed. Deleting removes your record, your documents and files, your shares, and your account. For a family member you are the only guardian of, their record is deleted too. For a family member who has another guardian, the record stays with that guardian and only your access is removed.

A few accounts cannot be deleted automatically because deleting them would also remove information that belongs to someone else, such as a practice’s copy of forms you sent it. The app tells you when this applies, sends the request to our team, and we complete it.

Copies may remain in encrypted backups for a limited time until they are overwritten. You can also ask us to delete your account by email, without signing in; see record.universalhx.com/delete-account.

Your choices and rights

Wherever you live, you can:

• See and download your record, including in a standard health data format.
• Correct what you entered. Information that came from a health system has to be corrected by that health system; we can show you what we received from them.
• Delete your account and your record.
• Disconnect a health system, withdraw a share, or remove another guardian’s access.
• Turn notifications off.
• Ask us what we hold about you and who we have shared it with.

Some states, including New Jersey, California, Connecticut, Nevada, and Washington, give their residents these and other rights over health data by law. We give them to everyone. To make a request, email uhx@universalhx.com from the address on your account. We will answer within 45 days. If we decline a request, you can appeal by replying with the word "Appeal", and we will answer the appeal within 45 days.

We never treat you differently for using these rights.

Children

UHX accounts are for adults. A child’s record is created and managed by a parent or guardian from the guardian’s own account, and it is covered by this policy in the same way. We do not knowingly let a child under 13 open an account. If you believe one has, tell us and we will delete it.

Where your information is stored

UHX stores and processes your information in the United States.

Changes to this policy

If we change this policy in a way that affects what we collect, who we share it with, or what we do with it, we will tell you in the app before the change takes effect. We will not use information we already hold in a materially different way without your consent.

Contact

Questions or requests about your privacy: email uhx@universalhx.com, or sign in and use the assistant in the app. Our postal contact is Axella Research LLC, Attention: Privacy.