Privacy Policy & Clinical Terms of Service
At CorZivra, we view your health information as a sacred trust. This policy explains what we collect, how we use it, and the controls you have over it.
CorZivra (“we”, “us”, “our”) operates an educational health and wellness application. CorZivra is not a medical device and does not diagnose, treat, cure, or prevent any disease or condition. By using our services, you agree to the terms below.
Below, you will find a plain breakdown of how we collect, use, and protect your information, and what our AI features can and cannot do for you.
“This document serves as the architectural blueprint for how we handle your digital health twin. We prioritize clinical-grade clarity, security, and absolute patient sovereignty.”
1. Information We Collect
We collect three kinds of information: on-device biometric readings, information you enter yourself, and general app usage data.
Contact-Free Vitals
Using your phone's camera, CorZivra estimates heart rate, heart-rate variability (HRV), and a stress index from a brief facial video capture. If you connect Apple Health, we can also read metrics you've authorized there, such as steps, sleep, and weight. CorZivra does not require, pair with, or depend on any wearable, smartwatch, continuous glucose monitor, or other external hardware.
This data is encrypted in transit, and access to it is restricted to the systems and personnel that need it to generate your insights.
Device Permissions
We only request device permissions when you use the related feature: Camera (contact-free vitals scans, and scanning prescriptions, lab reports, or product labels), Microphone (AI voice conversations), Photo library (attaching an existing photo instead of taking a new one), and Notifications (reminders you've opted into).
2. AI-Generated Content & Medical Disclaimer
CorZivra's chat and voice features are powered by a large language model and, for voice conversations, a synthetic-voice avatar. All responses — including insights, symptom information, and scan summaries — are educational only.
CorZivra does not diagnose, treat, cure, or prevent any disease or medical condition, and it is not a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical advice, and before making any health decision. In an emergency, call your local emergency number immediately — do not rely on this app.
3. Your Health Rights
You retain absolute ownership of your clinical data. You have the right to purge, export, or audit your records at any time.
Right to Access & Export
Request a copy of your data at any time by contacting us — we'll provide it in a portable format.
The Right to Forget
You can delete your account at any time from within the app. Upon request, we permanently delete your biometric, behavioral, and health-journey data tied to your account.
4. Data Protection & Sovereignty
Your data is encrypted in transit, and access is restricted to the systems and authorized personnel that need it to operate CorZivra and generate your insights.
Data is encrypted in transit (TLS) and hosted with reputable cloud infrastructure providers under industry-standard security practices.
We work with a small number of trusted service providers to operate CorZivra: Firebase Analytics (Google) for anonymized product analytics, Stripe for subscription payment processing, LiveKit and HeyGen for the AI voice-avatar feature, and Apple HealthKit for optional health-data integration on iOS. Each processor only receives the data it needs to perform its specific function.
5. Compliance & Legal
CorZivra is a consumer wellness application. We are not currently a HIPAA-designated Covered Entity or Business Associate, and CorZivra is not intended to replace clinical health-record systems used by healthcare providers.
We aim to handle your data consistent with the principles of applicable data protection laws, including GDPR and CCPA where they apply.
CorZivra is intended for users 18 years of age and older and is not directed to children. We do not knowingly collect information from children.
6. Contacting our Privacy Team
For any privacy concern, email us at privacy@corzivra.health. We aim to respond within a few business days.