Version 2.3 · SHA-256 519fce91b6d3f78d…

MyMedChat Privacy Policy and Consumer Health Data Notice (v2)

Version 2.3. Effective date: October 26, 2026

Alpha Centauri Technologies Inc ("we", "us") operates MyMedChat. This policy explains what we collect, why we collect it, who we share it with, and your choices.

What we collect

• Account information: your email address, and the one-time sign-in codes we send you, which we store only in hashed form.
• Eligibility answers: confirmation that you are 18 or older, and your state.
• Chats: what you type and the AI's replies. Chats may include health information, such as symptoms, conditions, medications or other health concerns. This is sensitive information.
• Consent records: which version of these documents you accepted, and when.
• Technical and security data: IP address, browser type, and records needed to limit abuse, confirm where we offer the service, and keep the service secure.

We do not use advertising, analytics, tracking cookies or third-party scripts. We use one strictly necessary cookie to keep you signed in and protect forms.

How we use it

We use your information only to:

• run MyMedChat and answer your questions;
• apply safety screens, for example to detect emergencies;
• keep the service secure and prevent abuse;
• respond to your requests;
• comply with the law.

We do not sell your information. We do not share it for advertising, and we do not use your health information for marketing.

Who we share it with

• Our AI provider (OpenAI). To generate replies and run safety checks, we send your chat messages to OpenAI's API, without your name or email. OpenAI states that it does not use API data to train its models. OpenAI may keep API data for up to 30 days for abuse monitoring, or longer if the law requires it. OpenAI may also briefly hold processed data in encrypted form, for up to 24 hours, to speed up replies. We ask OpenAI not to store chats for later use.
• Our hosting provider (InMotion Hosting), which stores our encrypted database. Like any web host, it may also record IP addresses in its own server logs for security and operations.
• Legal requirements: when the law requires it, or to protect someone's safety.

Your consent

We collect and use your health information only with your express consent, which you give separately when you sign up. You can withdraw consent at any time by deleting your account. Withdrawing consent ends your use of MyMedChat.

How long we keep it

Chats are deleted automatically 90 days after they are created. Security logs, which do not contain chat text or email addresses, are kept for 90 days. You can delete your chats, or your whole account, at any time. When you delete your account, we keep only a record of your consents (in hashed or encrypted form, with no chat content) as long as needed to show we had your consent. We may keep information longer only when the law requires it.

Security

We encrypt your email, chat content and IP address in our database, store data outside the public website, use HTTPS, and use expiring single-use sign-in codes. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

Your rights

You can ask to access, correct, delete or get a copy of your information. Email alpha@alphacentauritech.com, or use the download and delete options in the app. We won't discriminate against you for using these rights. California residents can also learn more about their rights under California law, including the Confidentiality of Medical Information Act.

Where we offer MyMedChat

MyMedChat is offered only to adults in the United States. It is not currently offered to residents of Washington or Nevada. To confirm where we offer the service, we look up your IP address in a location database on our own server to estimate your state. This lookup is not shared with anyone, and the location estimate is not stored. We keep your IP address only as described in this policy.

Children

MyMedChat is not for anyone under 18. If we learn we have information from a minor, we delete it.

Do Not Track

We do not track you across other sites, and we treat all visitors the same whether or not their browser sends a Do Not Track signal.

Changes

We will post updates here. If a change is material, we will ask you to review and accept it.

Contact

Alpha Centauri Technologies Inc, PO Box 2522, Monterey, CA 93942. alpha@alphacentauritech.com