AI Processing Disclosure
Effective date: September 30, 2026
This disclosure explains which features of the CuraeAI service (the "Service") use artificial intelligence ("AI"), what information they see, who runs them, what we keep, and what they cannot do. It is provided by CuraeAI Inc. ("CuraeAI," "we" or "us") and forms part of the privacy information in our Privacy Policy and Consumer Health Data Privacy Policy.
1. The AI features
AI features run only where we have switched them on for the Service. While a feature is switched off, no information is sent to an AI model for it. When they are switched on, the Service uses AI in three ways:
| Feature | What it does | When it runs |
|---|---|---|
| AI Visit Summary | Writes a plain-language overview of one visit in your record | Only when you choose Summarize on that visit |
| AI Health Insights | Points out patterns and items worth discussing with your clinician across your health history | Only when you choose Explain this page |
| Findings extracted from clinical notes | Reads the clinical notes in your record and identifies the conditions, medications, family history, social history and other findings they mention, which the Service then shows as AI-extracted findings with the passage of the note they came from | When we run it over the notes in your record |
The scores and estimates shown in the Service, such as Health Reserve, are calculated with formulas, not by these AI features.
2. What each feature sees
- AI Visit Summary receives the clinical details of the one visit: its reason, status and dates, the kind of visit and service, diagnoses, results and vital signs, medications, procedures, immunizations given, hospital-stay details, and the specialty and role (but not the name) of each clinician involved. It does not receive your name, date of birth, record numbers or other identifiers, where the visit took place, or the visit's documents.
- AI Health Insights receives your allergies, conditions, medications, test results, immunizations and visits (their type, date, reason and setting). It does not receive your name, date of birth, record numbers or other identifiers.
- Findings extracted from clinical notes receives the full text of each note it reads. A clinical note can contain names and other identifying details written by the clinician, and those are sent as part of the note.
For a long record, a feature may send only part of it, and its output then covers only what was sent.
Each feature receives the records it covers whatever their sensitivity, including records in the sensitive categories the Sharing Authorization lists, such as substance use treatment records protected by federal law (42 CFR part 2). The labels that limit what you share with people and apps do not limit what a feature reads for you.
3. Who runs the AI
3.1. The AI features run on AI models that CuraeAI operates itself, on servers under CuraeAI's control in Microsoft Azure data centers in the United States. Microsoft provides those servers under a business associate agreement with CuraeAI. No AI company receives your information: our systems are built to send health information for AI processing only to those servers and to refuse to send it anywhere else.
3.2. Requests travel over encrypted connections. The AI servers do not keep the information sent to them, or their output, once they have answered a request.
3.3. We do not use your information to train or improve any AI model, and we do not allow AI output to be used for advertising or to make decisions about you.
4. What we keep
- AI Visit Summaries and AI Health Insights are shown to you and are not stored by us. We record that a summary was generated, and that the information was sent to our AI models, in our audit records; we do not record the information sent or the summary itself in our logs.
- Findings extracted from clinical notes are stored in your record, together with the short passage of the note each one came from, for as long as we keep the note. They are deleted when the note's records are deleted — for example, when you delete the records from the health system the note came from — and are erased when you delete your account.
5. Human review
No person at CuraeAI or elsewhere reviews an AI output before you see it. Findings extracted from clinical notes are checked by an automated second review step and given a confidence level, but they are not checked by a clinician.
6. What AI output is not
AI output can be wrong or incomplete. It can miss something important, misread a result or a note, or describe something that is not in your record. It is not medical advice, a diagnosis or a treatment recommendation, and it does not replace your clinician. Check anything that matters against your records and talk to your clinician before making a health decision. If you think you may have a medical emergency, call 911.
7. Limits on use
To keep the Service available and its costs controlled, the Service limits how often each person can use the AI features, including a daily limit. When a limit is reached, the feature asks you to try again later.
8. Your choices
The AI Visit Summary and AI Health Insights run only when you ask for them, and findings extraction runs only while the AI features are switched on. Questions: privacy@curaeai.com. Don't include health information in an email to us.
9. Changes
Adding an AI feature, sending a new kind of information to an AI model, or running the AI features anywhere other than the servers Section 3 describes requires an updated version of this disclosure first.