Privacy Policy

1. Overview

Analyze My Knee ("the Service") is designed with privacy as a core principle. This Privacy Policy explains what data is collected, how it is used, and what control you have over your information.

2. Chat Data — 100% Browser-Local

All conversation history is stored entirely in your web browser using IndexedDB. This means:

• Your chat messages, AI responses, and analysis history are never transmitted to or stored on any server.
• Clearing your browser data or switching browsers will remove your conversation history.
• We have no ability to access, read, recover, or subpoena your conversation history because it does not exist on our systems.

3. Uploaded Medical Images

When you select medical imaging files (DICOM, X-ray, PDF reports):

• Raw DICOM files, ZIPs, and PDFs are parsed and rendered in your browser.
• The server receives only rendered images and extracted text needed for AI analysis.
• Analysis requests are handled statelessly and are not used to create a medical file store.
• We do not create long-term copies, backups, or archives of your raw medical files.

4. Third-Party AI Processing

To perform imaging analysis, your uploaded images are sent to third-party AI model providers via API, including:

• OpenAI (GPT models)
• Google (Gemini models)
• Anthropic (Claude models)
• xAI (Grok models)

These providers process images according to their own privacy policies and data retention terms. We recommend reviewing their policies. We use API-based access which typically has stricter data handling than consumer-facing products, but we cannot guarantee third-party provider behavior. Because these providers are based in the United States and other countries, your images may be transferred and processed internationally, including outside the EEA and UK, under those providers' own data-protection terms.

If you have concerns about third-party processing, use the built-in DICOM anonymization tool to strip Protected Health Information (patient name, ID, birth date, institution, referring physicians) before analysis.

5. Cookies & Tracking

The Service uses a minimal httpOnly cookie for anonymous session identification and credit tracking. We may also use privacy-preserving web analytics, performance measurement, and consent-based session replay to improve confusing user experience flows. User-entered free text, patient identifiers, filenames, DICOM metadata, and rendered medical images are marked for masking or excluded from analytics. Product UI and AI-generated response text may remain visible in session replay when needed to debug usability.

• We do not use analytics for advertising, remarketing, or cross-site profiling.
• We do not intentionally send patient IDs, chat IDs, payment IDs, filenames, medical session IDs, raw report text, rendered medical images, or user-entered free text to analytics providers.
• Analytics events are limited to low-risk product context such as the current domain, body-part area, locale, page views, basic performance metrics, and interaction patterns needed to improve usability.
• Masked content is intended to remain unavailable in analytics recordings; however, product UI and AI-generated explanations may be visible so we can understand how the tool behaves.

6. DICOM Anonymization

The Service includes a built-in DICOM anonymization tool that strips Protected Health Information (PHI) including patient name, patient ID, birth date, institution name, and referring physician names. We strongly recommend using this tool before uploading data if you are concerned about privacy.

7. Data Retention Summary

8. Your Rights

Because your chat data is stored locally in your browser, you have full control over it at all times. You can view, export, or delete your data directly from your browser without contacting us. For server-side data (uploaded images), you may request deletion by contacting us.

9. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for processing personal data is:

• Consent: You explicitly consent to our Terms of Service and this Privacy Policy before using the Service (via the consent modal).
• Legitimate interest: Temporary processing of uploaded images is necessary to provide the Service you requested.
• Contract performance: Processing is necessary to fulfill the service you are using.

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Since chat data is stored locally in your browser, you can exercise these rights directly. For server-side data, contact us.

10. Data Breach Notification

In the unlikely event of a data breach affecting your personal data stored on our servers (uploaded images), we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws. Note that chat history stored in your browser cannot be breached from our side as it does not exist on our systems.

11. International Data Transfers

Your uploaded images may be processed by third-party AI providers whose servers may be located in different jurisdictions (including the United States). By using the Service, you consent to the transfer of your data to these jurisdictions. We use API-based access with enterprise-grade data handling, but cannot guarantee that all third-party providers meet the standards of your local data protection regulations.

12. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service after changes constitutes acceptance.

14. Contact

For privacy-related inquiries, please contact us via the information provided on our website.