Privacy Policy

Effective September 14, 2026 · Last updated September 24, 2026

Lacey exists so that a family can understand what a doctor said. That means the most sensitive thing a person has — a conversation about their health — passes through our software. This page describes exactly what happens to it, in the order that actually matters: what we never keep, then what we keep, then who else sees it.

The audio is never recorded

This is the most common assumption about Lacey, and it is wrong in our favour, so it belongs first.

During a visit, microphone audio is carried live to whoever is listening and is then gone. There is no recording file, on our servers or anywhere else. Nobody — including us — can play back your visit afterwards. What persists is the transcript text and the summary written from it.

What we collect

Things you type in

• Your email address and the name you go by.
• The name of the person the record is about, and — if you choose to add them — their date of birth and insurance details.
• Visit details: the clinician, the specialty, the location and the time.
• Phone numbers you enter so we can text a join link or a reminder.
• Health entries you log yourself: weight, blood pressure, heart rate and your own notes.
• Questions you send into a live visit.

Things produced by the visit

• The transcript text captured during the visit.
• The summary written from that transcript, including suggested actions and explanations of medical terms.

Things collected automatically

• Ordinary technical logs from our host — IP address, browser type, pages requested, timestamps — kept for security and debugging.
• A session cookie that keeps you signed in. We use no advertising cookies and no third-party analytics or tracking pixels.

How it is protected

Everything travels over encrypted connections and is stored in a database that is encrypted at rest, reachable only by an authenticated member of the account it belongs to. That access rule is enforced by the database itself, not merely by the app, so a bug in a screen cannot show you another family's record.

Date of birth and insurance details get an additional layer: they are encrypted individually with a key our application servers cannot read, because those fields are valuable to an identity thief and useless to an attacker in encrypted form.

Transcripts are not individually encrypted in that stronger way today. We would rather say so plainly than imply a protection we have not built.

Who else sees it

We do not sell personal information, and we do not share it for advertising. We never have. The companies below process data because the product cannot function without them, each under a contract limiting them to that purpose:

All of them process data in the United States. We may also disclose information if the law compels it, or to protect someone from imminent harm — and if a company ever acquires Healthcare Henry, your record would transfer with it, still subject to this policy.

The people you invite

Laceyis built for more than one person, so some sharing is the point rather than a leak. Anyone you invite onto an account can see that account's visits, transcripts and summaries. Before you invite someone, assume they will read everything in it.

In co-parent mode this is deliberately absolute: both parents receive the identical, unedited record, and neither can alter or delete a transcript. That is the feature. It exists so that a record cannot be quietly edited mid-dispute, and it means you should not enter anything into a shared record that you would not want the other parent to read.

How long we keep it

• Summaries are kept for as long as your account exists. They never expire, on any plan, paid or not.
• If you never subscribed, the transcript from your free visit is kept too. Nothing expires.
• While you subscribe, every transcript is kept.
• If you cancel, you have 30 days from the cancellation to download your transcripts. After that they leave your account — no one signed in can read them, including you. Your summaries stay.
• We then hold those transcripts for six more months, in an archive no account can reach, for one reason: so that coming back is possible. Subscribe again inside that window and they are restored to you automatically, without your having to ask. At six months they are destroyed and cannot be recovered by us or by anyone else. We say this here because a copy we keep and never mention would not be a restore window — it would be retention we hadn't disclosed.
• If you would rather we did not hold that archived copy at all, deleting the visit or your account removes it immediately, as below.
• Deleting a visit or your account removes the underlying data from our live systems immediately; backups age out within 30 days.

Your rights

Wherever you live, you can do all of the following, and the first three are buttons in the app rather than a request you have to send us:

• See everything on your account.
• Download your transcripts and summaries as plain text.
• Delete any visit, or your whole account and everything in it.
• Correct anything inaccurate — email us if a screen won't let you.
• Ask what we hold about you and receive an answer within 45 days.

If you are in California, the CCPA gives you these rights explicitly, plus the right not to be discriminated against for exercising them — we do not charge more or degrade the product for anyone who does. We do not sell or share personal information as those terms are defined there, so there is no opt-out to offer. If you are in the EU or UK, our lawful basis is the contract between us for delivering the service, your explicit consent for health data, and our legitimate interest in keeping the service secure; you may also complain to your supervisory authority.

To exercise anything above, email masonhenry1@gmail.com. We will verify that you control the account before acting.

HIPAA, and why it does not apply here

HIPAA governs healthcare providers, insurers and the vendors working on their behalf. Laceyis none of those — it is a consumer tool you use for your own benefit, so HIPAA does not cover the record you create with it, and we are not a “business associate” of your doctor.

We say this plainly because “HIPAA compliant” is widely misused as a synonym for “secure,” and we would rather describe the protections we actually apply, above, than claim a label that does not fit.

Children

Lacey is for adults. Nobody under 18 may create an account.

Co-parent mode is explicitly designed to hold records about a child, entered by a parent or legal guardian. If you use it, you are confirming you have the authority to make decisions about that child's health information. A child does not have their own login and cannot be invited. If you believe a child created an account, tell us and we will delete it.

Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect rather than quietly editing this page.

See also our Terms of Service and the recording & consent guide.