Your data, plainly.

Effective 16 August 2026. If we change this policy, the date changes with it.

What OnePanel is

OnePanel is a health record you share with your practice. Access is invite-only: your account exists because your practice created it. OnePanel is operated as a joint venture with your practice; your clinical relationship is with them.

What we collect

Account details. Your name, email address, phone number if you add one, and a profile photo if you upload one. Sign-in is passwordless; we store no password.

Your clinical record. Lab results your practice uploads or confirms, reference ranges, and treatment courses your practice records.

What you log yourself. Food, water, sleep, workouts, goals, supplements you record, and values you enter by hand.

Device data you connect. If you connect a wearable, we store daily summaries from it and nothing more granular. From a WHOOP: recovery, heart-rate variability, resting heart rate, blood oxygen, skin temperature, respiratory rate, strain, sleep and its stages, and workouts. From aFitbit (through the Google Health API): resting heart rate, heart-rate variability, blood oxygen, respiratory rate, temperature variation, VO2 max, sleep and its stages, steps, distance, active zone minutes, active calories, workouts, and weight or body fat if your device records them. We do not read second-by-second heart rate, and we do not read location. You can disconnect at any time, which deletes our access tokens and, for Fitbit, revokes them at Google. Days already synced remain in your record because they are your record; ask us to delete them and we will.

Operational records. An audit log of access to health data (who, what, when, with your network address stored only as a hash), and the technical minimum to keep sign-in working.

What we use it for

Running the product you see: your charts, trends, reminders, messages with your practice, and the AI explanations you ask for. Nothing else. We do not sell your data, we do not advertise, and we do not use your health data to train AI models.

Who can see it

Your practice. The clinical staff at the practice that invited you can see your record — that is the product.

Service providers. We run on Cloudflare (hosting, storage, database). When you use Ask or AI insights, the relevant parts of your record are sent to Anthropic's API to generate the answer and are governed by their API terms, which exclude training on your data. If you connect a wearable, data flows to us from WHOOP, or from Google for a Fitbit, under the consent you give on their own screen — and only for the specific categories you approve there. We do not sell or transfer wearable data to anyone, and we do not use it for advertising or to train any model.

Nobody else. No data brokers, no advertisers, no analytics companies.

Where it lives and how it is protected

Data is encrypted in transit everywhere. Access requires sign-in codes sent to your email; sessions are stored hashed. Every access to health data is written to an audit log the application itself cannot skip. OnePanel is not today a HIPAA-covered service and does not claim to be; it is architected so that moving to HIPAA-eligible hosting is a hosting decision, and that remains the plan as the product grows.

Your choices

You can edit your name, phone and photo, and change your sign-in email with a verification code. You can disconnect any wearable at any time; for a Fitbit you can also revoke OnePanel from your Google account atmyaccount.google.com/permissions. For correction or deletion of clinical records, ask your practice — they are the clinical authority on your record. To close your account entirely, ask your practice or write to us.

Contact

Questions about this policy: [email protected].