Skip to main content
Blendly Health
Product Pricing FAQ

Privacy Policy

Learn how Blendly Health protects your personal health information and respects your privacy.

Privacy Policy

Blendly Technologies LLC

Effective Date: 01/01/2026
Last Updated: 07/01/2026

1. Introduction

Blendly Technologies LLC (“we,” “us,” “our,” or “Company”) operates Blendly Health, a healthcare management application that helps consumers manage their healthcare information, including doctors, medications, and medical conditions.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our application and services (collectively, the “Service”).

By using our Service, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Personal Information You Provide

Account Information: Email address for account registration and authentication.

Health Information: Any health-related information you choose to enter or upload, including:

  • Medical conditions
  • Medications and prescriptions
  • Doctor information and appointments
  • Health notes and text-based health records

Uploaded Images and Documents: You may upload images or documents (for example, prescription labels, insurance cards, or similar records) to simplify data entry.

Authentication Data: We use Auth0 (an Okta company) to authenticate your account. If you sign in with a social account such as Google, we receive basic profile information (such as your email address and name) from that provider.

Payment Information: If you purchase a paid subscription, your payment is processed by Stripe. Your card details are provided directly to Stripe, and we do not store your full card number. We retain limited billing information, such as a Stripe customer identifier, your subscription plan and status, and billing period dates, to manage your subscription.

Automatically Collected Information

  • Device and browser information
  • IP address and approximate location (if enabled)
  • Application usage patterns and performance data
  • Error logs and crash reports

3. How We Use Your Information

We use your information for the following purposes:

  • Service Provision: To provide, maintain, and improve our healthcare management application.
  • Account Management: To create, manage, and authenticate your account.
  • AI and Automated Processing: When you upload a photo (such as a prescription label, supplement label, insurance card, or provider business card), we send the image to our third-party AI provider (Anthropic) solely to extract relevant text for your account. Extracted details are shown to you to review and confirm before they are saved, and you can always enter information manually instead. Images and their contents are used only to provide the Service and are not used to train AI models.
  • Payments: To process paid subscriptions and manage billing through our payment processor, Stripe.
  • Technical Operations: To monitor application performance, troubleshoot issues, and maintain security.
  • Legal Compliance: To comply with applicable laws and respond to lawful requests.
  • Communication: To respond to your inquiries and provide customer support.

4. Data Security

We use industry-standard measures to protect your information:

  • Encryption: User data is encrypted in transit and at rest.
  • Access Controls: Strict access controls limit who can access your personal information.
  • Secure Infrastructure: Our application and stored data are hosted on Amazon Web Services (AWS).

5. Data Breach Notification

In the event of a data security incident that affects your personal information, we will:

  • Investigate and contain the incident promptly
  • Notify affected users and relevant authorities as required by applicable law
  • Provide information about what happened, what information was involved, steps we are taking to address the incident, and steps you can take to protect yourself
  • Cooperate with law enforcement and regulatory authorities as appropriate

We maintain an incident response plan and conduct regular security assessments to minimize the risk of data breaches.

6. Data Storage and Retention

  • Location: Your data is stored on secure servers located in the United States using AWS.
  • Retention: We retain personal information only as long as reasonably necessary to provide the Service or as required by law.
  • Account Deletion: You may delete your account at any time through account settings. When you do, we delete your personal information from active systems within a reasonable time period.

7. Information Sharing and Disclosure

We share information with third-party service providers only as needed to operate the Service. Our use of each provider is governed by that provider’s terms of service and, where available, its data processing terms, which address how data processed through their services is handled. These providers include: cloud hosting and storage (Amazon Web Services), authentication (Auth0, and Google when you use Google sign-in), payment processing (Stripe), AI text extraction (Anthropic), email delivery, and application monitoring and error reporting. We limit the information shared with each provider to what is needed for its function.

Sharing at Your Direction

Blendly Health includes features that let you share your health information with others. When you use them, you decide what is shared and with whom.

Caregiver and Family Access: On eligible plans, you can invite another person to access a profile by entering their email address. They must sign in with an account matching that email before access is granted. You choose their level of access: view only (they can see the profile’s health information but cannot change it) or full access (they can view and edit health information, but cannot manage billing or invite or remove other caregivers). You can revoke a caregiver’s access at any time, and a caregiver can remove themselves from a profile you shared with them. Caregiver access depends on the profile owner maintaining an active subscription.

Shareable Links: You can generate a link that lets others view selected parts of a profile — for example medications, conditions, allergies, providers, procedures, selected notes, and emergency information (blood type and emergency contacts). Insurance card details are never included in a shareable link. You can protect a link with a password and set it to expire. Anyone who has the link (and the password, if you set one) can view the information you chose to share, without needing a Blendly account. You can disable or delete a link at any time, and you can see basic information about when it was viewed. Access through a link stops working if your subscription lapses.

Service Providers/Processors

We share information with third-party service providers only as needed to operate the Service. Our use of each provider is governed by that provider’s terms of service and, where available, its data processing terms, which address how data processed through their services is handled. These providers include: cloud hosting and storage (Amazon Web Services), authentication (Okta, and Google and Apple when you use Google or Apple sign-in), payment processing (Stripe), AI text extraction (Anthropic), email delivery, and application monitoring and error reporting. We limit the information shared with each provider to what is needed for its function.

When required by law, regulation, or valid legal process.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred.

8. Your Rights and Choices

Depending on where you live, you may have the following rights:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information.
  • Data Portability: Request a copy of your personal information in a portable format.
  • Opt-Out of Sale/Sharing: We do not sell personal data. If we begin to “share” personal data for targeted advertising in the future, you will have the right to opt out.

You can exercise these rights by contacting us at privacy@blendly.life. We will respond to your requests within 30 days (45 days for complex requests). We may require verification of your identity before processing requests.

9. Children’s Privacy

Our Service is intended for users who are at least 18 years old. Users under 18 may not create accounts. We do not knowingly collect personal information directly from anyone under 18.

Adults may use their accounts to enter and manage health information for minors or dependents for whom they have legal authority. Parents and legal guardians have the right to review, request deletion of, and refuse further collection of their child’s personal information that has been entered into our Service.

If we discover that someone under 18 has created an account, we will delete it promptly. We comply with the Children’s Online Privacy Protection Act (COPPA) with respect to any information about children under 13 that is entered into our Service by authorized adults.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for essential functions only:

Authentication Cookies: To maintain your login session and provide secure access to your account.

We do not use cookies for advertising, tracking across websites, or other non-essential purposes. You can control cookies through your browser settings, but disabling essential cookies may affect the functionality of the Service.

11. Data Minimization

We collect only the personal information that is necessary to provide our Service. We regularly review our data collection practices to ensure we are not collecting excessive information and delete data that is no longer needed.

12. International Data Transfers

We do not transfer personal data outside the United States. All data processing and storage occurs within the United States using AWS infrastructure.

13. Automated Decision Making

As described in Section 3, we use automated processing, including artificial intelligence provided by our third-party AI provider (Anthropic), to extract information from images you upload, such as prescription labels or insurance cards. This processing is used solely to provide the Service. Extracted information is presented to you to review and confirm before it is saved, so it does not by itself make decisions that produce legal or similarly significant effects.

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make material changes (including changes to data sharing practices, retention periods, or your rights), we will provide notice (such as by email or in-app notification) before they take effect. The “Last Updated” date at the top will always reflect the most recent version.

16. Contact Information

For questions or to exercise your rights:

Blendly Technologies LLC
Email: privacy@blendly.life

17. State-Specific Privacy Rights

California Residents (CCPA/CPRA)

You have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: The categories of information we collect, use, and disclose.
  • Right to Access: A copy of the personal information we hold about you.
  • Right to Delete: Request deletion of your personal information.
  • Right to Correct: Correct inaccurate information.
  • Right to Opt-Out: Opt out of the sale or sharing of personal information.
  • Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of your sensitive health information to what is necessary to provide the Service.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

We also honor Global Privacy Control (GPC) signals as an opt-out mechanism.

Texas Residents (TDPSA)

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents have rights similar to those listed above, including the right to access, correct, delete, and obtain a copy of their personal data.

Other States

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may also have rights similar to those listed above. We extend these rights to all U.S. users where legally required.

We process your personal information based on:

  • Consent: When you provide consent for specific processing.
  • Contract Performance: To provide the Service you requested.
  • Legitimate Interests: To improve the Service and ensure security.
  • Legal Obligations: To comply with applicable laws.

This Privacy Policy is effective as of 01/01/2026 and applies to all users of the Blendly Health application operated by Blendly Technologies LLC.