Privacy and security

What we keep

• Your account: name, email, phone number, date of birth and sex.
• Your health profile: conditions, medicines, allergies and family history. The same for the people you care for if you add them.
• Your checks: what you tell Ion and the report it writes.
• Visits: bookings, messages with your doctor, photos you send, visit notes and sick notes.
• Agreements: when you agreed to something (for example to a child’s profile, AI notes or medical ID scanning) with the date, time and internet address so we can show it was your choice.

Who can see it

• You. Your checks and profile open for you when you are logged in. Apart from the people below no one else can open them.
• A doctor you choose. A doctor sees your check report when you book with them. If you share a report by its QR code, each opening by a doctor is logged and you are told.
• The Ionyx team to run the service, to help when you ask and to keep people safe.
• Anyone with your medical ID card if you turn on scanning. They see only what you chose to show.
• People you care for: you can see the profiles you made for your children or others you help. They cannot see yours.

Emails from Ionyx never include medical details. They tell you something is waiting and link to Ionyx.

Ion and AI

Ion is the Ionyx symptom checker. It was developed by doctors and uses an AI model from OpenAI to ask questions and write your report.

• What is sent to OpenAI: your answers in a check (including what you write in your own words), the age and sex of the person the check is for, the body areas you chose and race or ethnicity if you gave it. If the check is for you, the health background in your profile is sent too. If you answer the questions about what you need when you sign up, those answers are sent so Ionyx can suggest a kind of doctor.
• Taken out first: names, email addresses, phone numbers, street addresses and long numbers like card or NIB numbers that Ionyx can spot. OpenAI sees words like “the patient” in place of a name.
• Not sent: the date of birth in your account (only the age), your contact details, photos, video visits, AI notes from visits and messages with doctors or with Ionyx.
• OpenAI says it does not use what is sent through its API to train its models. It may keep it for up to 30 days to check for misuse.
• Please do not type other people’s names or contact details in a check. Ionyx takes out the ones it can spot but it may not catch every one.
• Ion does not diagnose. A doctor makes any diagnosis.

Video visits

• Video visits run on the Amazon Chime SDK from Amazon Web Services. Sound and picture are encrypted on their way between you and your doctor.
• Ionyx does not record the picture. The sound is only recorded if you agree to AI notes (below).
• Your doctor checks who you are and where you are at the start. A photo you send in the call goes to your visit like any other photo.
• One-tap join links are for you only. They ask for your date of birth before the call opens.

AI notes

Some doctors use AI notes so they can look at you instead of typing. It only happens if you agree.

• You are asked before the visit. You can say no or turn it off at any time. If you turn it off the recording is thrown away.
• The sound of the visit is sent to AWS HealthScribe to draft the notes. Amazon says HealthScribe does not use this to train its models and removes the sound once the draft is made.
• Ionyx deletes the recording and the draft files straight after. Drafts a doctor has not finished are cleared after 30 days.
• Your doctor checks every line before anything is saved or shared with you. Notes made this way say “Drafted with AI, checked by” your doctor.

Medical ID

• You choose what your medical ID shows.
• Scanning the wallet card opens it without logging in only if you turn scanning on. You get a message when it is opened if you keep that turned on.
• Lost the card? Get a new code and the old card stops working straight away.

How we protect it

• Every page uses an encrypted connection (HTTPS).
• Ionyx runs on Amazon Web Services in the United States. The database is not reachable from the internet.
• Backups are encrypted (AES-256) every night and kept in private storage.
• Passwords are stored scrambled so no one at Ionyx can read them.
• Photos you send to a doctor lose their location data.
• Checks no doctor has looked at are deleted after 90 days unless they are part of your care. Reports a doctor has used are medical records and are kept as the law requires.

Your choices

• Delete a check on My checks.
• Change your health profile or remove a person you care for at any time.
• Turn medical ID scanning off at any time.
• Delete your account on the Delete account page. Reports a doctor has used are kept as the law requires but hidden from your account.
• Ask what we hold about you or ask us to correct it. Write to techsupport@ionyxai.com.