Sharing Authorization
Effective date: September 30, 2026
Each time you share information from your CuraeAI record — with a contact, with a relative, with someone you show a share code to, or with an app — you sign an authorization for that share. This document is the text of every such authorization. The details of your share are shown in the box above the button you tap, and your tap signs it.
- Who discloses. CuraeAI Inc. ("CuraeAI"), which keeps your personal health record, discloses the information.
- Who receives it. The recipient named in the box: a person, by name and, when their account has one, email address; a relative who uses CuraeAI, by name; the one person who opens your share code and confirms their email address; or an app, by the name CuraeAI verified.
- What is disclosed. The information you selected in the box, and nothing else. CuraeAI labels records in these sensitive categories: alcohol and drug use records, HIV records, sexually transmitted infection records, mental health records, records state law protects for minors, sexual and reproductive health records, gender-affirming care records, sexual assault, abuse and domestic violence records, and genetic information. Alcohol and drug use records that a federally assisted substance use treatment program made are also protected by federal law (42 CFR part 2). CuraeAI labels a record from the medical codes it recognizes on it, such as a diagnosis, a procedure, a medicine, a test result or a vaccine, from the labels your health system sends with it, and from the records it is linked to, such as the visit it was recorded in. A record CuraeAI does not label is included whenever you share your health records, even if what it says suggests a sensitive category. A share includes records that CuraeAI labels in a sensitive category only when the box names the category, in one sentence that begins "This includes". A contact sees your visit notes and documents only when the box says so.
- Why. At your request: for the person to see it, or for the app to provide the features it described to you.
- How the recipient may use it. A person may see what you shared, and a relative receives a copy of the family health history you selected in their own record until the end date, or until you stop sharing if that is sooner, and keeps only what they add to their own family history. An app may use the information only to provide its features to you, must not sell it or use it for advertising, and must delete it within 24 hours after the share ends. Once another person or company has the information, CuraeAI cannot control what they do with it, and the laws that protect it in CuraeAI may no longer protect it. When the app is one CuraeAI publishes, such as VibeCheck, CuraeAI is its developer and is responsible for it under that app's own privacy policy.
- When it ends. On the end date shown in the box, which is at most one year after you sign, or earlier if you stop sharing. It also ends when the record stops being part of your CuraeAI account, for example when you delete your account or when a health system's record shows that the person is under 18. A share code ends when it has been viewed once, when you close the screen that shows it, or after 15 minutes.
- Stopping it. You can stop sharing at any time. If you sign in to CuraeAI, stop it under Consents, or by emailing privacy@curaeai.com from the email address on your account; don't include health information in an email to us. If your account was made through Curae Connect and you have not finished setting up a full account, stop it in one of two ways: open Curae Connect from the app and choose Manage sharing, then Stop sharing; or use the app's own control for stopping sharing, which we require every app to provide. Stopping ends access through CuraeAI at once; it does not undo what the recipient already saw or received.
- You don't have to sign. Sharing is your choice. CuraeAI does not require it for you to use the Service, and nothing about your account changes if you do not share.
- Your copy. You have the right to receive a copy of this authorization. If you sign in to CuraeAI, choose View Authorization under Consents, then Download, or email privacy@curaeai.com. If your account was made through Curae Connect and you have not finished setting up a full account, open Curae Connect from the app and choose Manage sharing, where you can see and download each authorization you signed.
- How you sign. You sign by tapping the button under the box (Share, Show Code or Allow); each further code the same screen shows is signed under the words you signed with Show Code. CuraeAI records the date and time, the exact words in the box, and the version of this document.