Privacy
Last updated October 29, 2026.
Checkup Score helps you understand your health and your family’s. That means you trust us with sensitive information, and this page explains plainly what we do with it. Our Consumer Health Data Privacy Policy covers health information specifically, including your rights to access, delete and withdraw consent.
What we collect
- Your email address, to sign you in, and your cell number if you choose to give it.
- Whether you want product updates by email or text. Both are optional and separate from your health information.
- What you tell us: age, height, weight, habits, conditions, medicines, family history, how treatment is working, optional mood questions, and anything else you choose to write.
- Results you add: lab values, units, reference ranges and dates, after you confirm them; blood pressure and weight readings.
- Profiles you create for family members, with their permission for adults.
- Feedback you send us.
When you upload a lab report, we read it to extract the values and then discard the file. We keep the values you confirm, not the document.
How we use it
Only to calculate your score, show your next steps and run the service, and to improve the service based on feedback. If you turn on texts, we text you about your own account: check-ins, reminders for things you plan, and when your results or score update. Those texts never include a number, a test name or a private topic. Offers by text or email go only to people who tick a separate box. Every message has a way to stop (unsubscribe, or reply STOP to texts). We don’t sell your personal information and we don’t show ads. The only exception to “only to run the service” is research, and only if you opt in (below).
Who processes it
We use a small number of service providers under contract: our hosting and database provider, our email provider for sign-in links, our text-message provider if you turn on texts, and Anthropic, whose AI reads the lab reports you upload, the history you type in your own words, and the questions you ask in the app. If you choose a paid plan, Stripe processes your payment; we never see or store your full card number. When you choose a partner lab through Get my labs, we send you to its site. We don’t send it your health information; it handles your order and results under its own terms. We record only that you followed the link, so we can remind you to add your results, and the link carries a random code, never your name or health data.
If you sign in with Google, Google tells us your email address and nothing else. If you connect a device such as Oura or Withings, we receive only what we use: activity and sleep, or weight and blood pressure. You can disconnect anytime; what already synced stays in your records until you delete it.
If you connect Google Health (for a Fitbit or Pixel Watch), we read only your activity minutes, sleep and weight, read-only, to calculate your score and plan. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: we don’t sell it, use it for ads, include it in research, or let people read it except with your permission, for security, or as the law requires.
If you import from your doctor’s patient portal (MyChart), we receive read-only access to your lab results, weights, vaccines, and nothing else. If you allow ongoing access on the MyChart screen, we keep an encrypted access key so we can check for new results once a week. You choose how long that lasts, and you can disconnect from your results page or revoke it in MyChart anytime; we then delete the key. What was already imported stays until you delete it.
Research
Off unless you turn it on, in sign-up or Settings. If you opt in, we may use your data in health research, our own and in studies with research partners, after removing your name, contact details and other direct identifiers. We never sell it, and we don’t share it in exchange for payment or anything else of value. We require partners not to try to identify anyone. You can turn it off anytime; data already shared in a past project can’t be pulled back from it. Genetic results and answers to the mood and alcohol checks are never included.
Your choices
- Download everything we hold about you from Settings.
- Delete your account from Settings. It removes everything tied to it: your profile, family profiles, readings, results, connections and access keys, plus any waitlist entry, invites and feedback. Copies in our database backups roll off within 30 days.
- Delete any single result from your records.
- Turn email or text updates on or off in Settings.
- Withdraw your consent to us using your health information, to sharing your profile, or to reading genetic reports, in Settings.
- Correct anything that’s wrong, in the app or by asking us.
You can also email us to make any request, without an account. We respond within 45 days (we’ll tell you if we need 45 more), and you can appeal any decision; the Consumer Health Data Privacy Policy explains how.
Automated scoring and AI
Your score and next steps are worked out automatically from your information and published guidelines. They’re information for you, not decisions about you: we don’t use them to decide anything with legal or similar effects, like insurance, credit or employment. We don’t use your information to train AI models, and our AI provider doesn’t use it to train theirs.
Site analytics
We count visits to our public pages with our hosting provider’s privacy-friendly analytics. Pages inside the app aren’t counted. It uses no cookies, doesn’t follow you across sites, and never sees your health data.
Requests from courts and law enforcement
If anyone asks us for your information, including a subpoena or warrant, we’ll tell you before we respond, unless the law forbids it, so you can object. We challenge requests that are overbroad or that seek reproductive or other sensitive health information where the law allows, and we disclose only what we’re legally required to.
Security
Data is encrypted in transit and at rest. Sign-in uses one-time links, and only hashed tokens are stored.
Health data laws
Checkup Score is a consumer service and is not a healthcare provider. California’s Confidentiality of Medical Information Act treats services like ours as providers for privacy purposes, and we follow it: we don’t disclose your medical information without your authorization, except to the service providers that run the service. We follow consumer health privacy laws, including the FTC Health Breach Notification Rule and state laws such as Washington’s My Health My Data Act, and we will notify you of any breach as those laws require.
Children
Accounts are for adults 18 and older. Parents and guardians may create profiles for their children, which they manage and consent for. Children’s information is never used for ads or sold, and it’s used only to show what’s due for them.
Contact
Questions or requests: hello@checkupscore.com. A person reads every message.
Contact
Questions about this page, your data or your account? Email hello@checkupscore.com. A person reads every message.