Privacy Policy

Gabriel Health Platform ("Gabriel," "we," "us," or "our") is committed to protecting your privacy and safeguarding your personal health information (PHI). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform.

Because we handle protected health information, we comply with the Health Insurance Portability and Accountability Act (HIPAA) and related state privacy laws.

Personal Information

• Name, email address, phone number, date of birth
• Account credentials and security information
• Payment and billing information
• Location data (if you enable location services)

Health Information

• Bio-Well GDV scan results and biofield data
• HeartMath cardiac waveform and HRV data
• Nutrition Response Testing results and protocols
• Lab results, medical history, and symptoms you choose to upload
• Notes and communications with practitioners

Technical Information

• Device information (browser, OS, IP address)
• Usage data (pages visited, time spent, interactions)
• Cookies and similar tracking technologies

We use your information to:

• Provide and improve the Gabriel platform and services
• Connect you with practitioners and facilitate care coordination
• Generate AI-powered health insights and trend analysis
• Process payments and manage your account
• Send service updates, appointment reminders, and important notices
• Comply with legal obligations and prevent fraud
• Conduct research (only with de-identified or aggregated data)

We do not sell your personal health information. We share your data only in the following circumstances:

• With Your Practitioners: Health data is shared with practitioners you authorize to view your records.
• Service Providers: We work with HIPAA-compliant vendors (cloud hosting, payment processors, analytics) under Business Associate Agreements (BAAs).
• Legal Requirements: We may disclose information if required by law, court order, or to protect rights and safety.
• With Your Consent: We may share data for research or other purposes if you explicitly opt in.

Gabriel is a HIPAA-covered entity. We implement administrative, physical, and technical safeguards to protect your PHI, including:

• End-to-end encryption for data in transit and at rest
• Role-based access controls and audit logs
• Regular security assessments and employee training
• Business Associate Agreements with all third-party vendors

For more details, see our HIPAA Notice of Privacy Practices.

We use industry-standard security measures to protect your information, including AES-256 encryption, secure socket layer (SSL) technology, firewalls, and intrusion detection systems. However, no method of transmission over the internet is 100% secure.

You have the right to:

• Access, download, or delete your personal and health data
• Amend or correct inaccurate information
• Request an accounting of disclosures
• Opt out of marketing communications
• Restrict how your data is used or shared
• File a complaint with us or with the Office for Civil Rights (OCR)

To exercise these rights, contact us at privacy@trygabriel.ai.

We use cookies and similar technologies to improve your experience and analyze platform usage. You can control cookie preferences in your browser settings. For more information, see our Cookie Policy.

Our platform is not intended for individuals under 18. We do not knowingly collect information from minors without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform. Your continued use of Gabriel after such changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact:

Gabriel Health Platform
Email: privacy@trygabriel.ai
Privacy Officer: hipaa@trygabriel.ai