Privacy policy

1. Who we are and what this covers

Lugano Health is an educational service for people who use feeding tubes and the people who care for them. We are not a healthcare provider, we do not provide medical advice, and we are not covered by HIPAA. Because the information you share with us is still sensitive health information, this policy describes exactly what we collect and what we do with it — no more, no less.

2. Information we collect

Everything we hold comes from what you choose to give us:

• Account information: Email address, display name, a password (stored only as a bcrypt hash), and a record of when you accepted the beta terms.
• Health profile — every field is optional: Your role (patient or caregiver), tube type and model, how long you've had the tube and (if you set it) the placement date, how feedings are given and which pump, formula (including a free-text name if yours isn't listed), preferred brand, primary concerns, age group, gender, height, weight, activity level, and your avatar. You can skip any of these, answer "not sure" where offered, and remove any answer later in Settings.
• Chat conversations: Messages you send to the AI assistant and the responses it generates.
• Cards and pins: The health information cards generated for your board, your pinned blocks, and feedback you give on cards.
• Community posts: Threads and replies you write, and posts you mark as helpful.
• In-app searches: Search queries you run inside the app.
• Service logs: Technical logs our infrastructure produces to operate and debug the service.

3. How we use your information

• To tailor the educational information we show you — your cards, suggestions, and chat answers. Your answers are never used to diagnose you or to provide medical advice.
• To provide, maintain, and improve the Service.
• To send you important service-related communications.

We do not sell your personal information, and we do not use advertising or third-party analytics trackers.

4. AI processing

When you chat with the assistant or generate a card, we send your message and your saved profile to OpenRouter, a service that routes requests to large-language-model providers, which process it to generate the response. The profile context sent can include: your first name, role, tube type and time with the tube, primary concerns, age group, gender, formula, feeding method and pump, height, weight, and activity level.

Fields you skipped are simply never sent — a question you didn't answer isn't part of your AI context. We do not train AI models on your conversations.

5. What other members can see

• Community: Posts and replies you write are shown to other members with your display name, avatar, role, tube type, and how long you've had the tube (for example, "G-tube · a few months"). If you'd rather not show these, you can remove them from your profile before posting.
• Shared cards: If you create a share link for a card, anyone with the link can see that card's content. Personal details — care-team contacts, medication lists, your formula and pump names, and similar profile specifics — are removed or generalized before the page is created, and you can disable a link at any time.

6. Service providers

Running the Service means some companies technically process your data on our behalf. We use exactly three:

• Vercel — hosts the website you're reading now.
• Railway — hosts our backend and the database where your data is stored.
• OpenRouter — processes AI requests as described in section 4.

7. Data retention

We keep your data for as long as your account exists. When you delete a card it is archived rather than immediately erased, and archived cards are removed along with everything else when you delete your account.

Lugano Health is currently in beta: as we develop the product, data may occasionally be reset. Please don't rely on the Service as your only record of anything important.

8. Deletion and your choices

• Every profile question is optional. You can skip any of them, and remove any answer later in Settings.
• You can delete your account yourself, in Settings, at any time. This permanently removes your account, profile, cards, conversations, and searches. Community posts you wrote stay up, but with your name and profile removed — they show as written by a deleted account. Deletion cannot be undone.
• You can also email us at the address below and we'll delete your account for you.

9. Security

• Passwords are stored only as bcrypt hashes, never in plaintext.
• All data is transmitted over encrypted HTTPS connections.
• Authentication uses signed JSON Web Tokens (JWT).
• Database queries are parameterized to prevent injection attacks.

No system is perfectly secure, and we won't pretend ours is. What we promise is the honest list above, kept current.

10. If a breach happens

If a breach of security exposes your identifiable health information, we will notify you, and the Federal Trade Commission where required, as provided by the FTC Health Breach Notification Rule.

11. Children's privacy

Lugano Health may be used by caregivers of pediatric patients, but the Service is intended for use by adults (age 18+). We do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact us

If you have questions about this privacy policy or how we handle your data, please contact us at privacy@luganohealth.ai.