document_key: privacy_policy version: v1 last_updated: "2026-06-11T12:00:00Z" owner: Re:Formd surfaces: web, app
Re:Formd Privacy Policy
Version 1
1. Introduction
Re:Formd is a health education organization and personal insight platform owned and operated by Retrospect LLC. Retrospect LLC (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy describes what data we collect, how we use it, and your choices. It applies to all Re:Formd products and services, including interfaces such as the mobile application and the public website, and any related offerings operated by us. By using Re:Formd, you agree to the practices described here.
2. Data we collect
We collect information in two ways: what you provide directly, and what we obtain when you use Re:Formd.
Account and profile data:
- Email address and account credentials (for example, a hashed password).
- Profile information you provide (for example, name if you add it, preferences).
Health and assessment data:
- Responses to assessments and health-related questions you complete in Re:Formd.
- Health profile data you enter or that we derive (for example, system scores, priorities, insights).
- Lab and biomarker data you upload or enter (for example, lab results, dates, values).
Usage and technical data:
- How you use Re:Formd (for example, features used, actions taken) to improve the product and troubleshoot issues.
- Device and session identifiers, and similar technical data, as needed to operate the service.
3. How we use your data
We use your data to:
- Provide, maintain, and improve Re:Formd.
- Build and maintain your health profile and provide personalized educational guidance and insights.
- Process and store lab and biomarker information you provide.
- Authenticate you and enforce our terms and legal gates (for example, terms of service, privacy policy, health disclosure).
- Communicate with you about your account, important updates, or support.
- Comply with legal obligations and protect our rights and the safety of our users.
- Analyze usage in an aggregated or de-identified way to improve the product.
We do not sell your personal information or personal health information to third parties for marketing.
Model training: we do not use personal health information to train generalized AI models without explicit user consent where that consent surface is offered in the product. For how AI features work and what you control, see Section 8 (AI transparency and assisted features) of the Terms of Service.
4. Legal bases (for transparency)
Where applicable (for example, under GDPR-style frameworks), we process your data based on:
- Contract: To provide the service you requested and to perform our agreement with you.
- Consent: Where you have given clear consent (for example, for specific optional features or marketing).
- Legitimate interests: To operate, secure, and improve the service, and to prevent misuse, where not overridden by your rights.
- Legal obligation: Where we must process data to comply with law.
5. Sharing and service providers
We may share your data:
- With service providers who help us run Re:Formd (for example, hosting, authentication, analytics, email). These providers are contractually required to protect your data and use it only as we instruct.
- When required by law (for example, subpoena, court order) or when necessary to protect our rights, your safety, or the safety of others.
- In connection with a merger, sale, or restructuring of our company, in which case your data may be transferred as part of that transaction, subject to the same privacy protections.
We do not share your health or assessment data with advertisers or for third-party marketing.
6. Your data — access, export, and deletion
It is your data. Re:Formd gives you tools to review, download, and delete the information you store with us, subject to legal and security requirements described below.
In the Re:Formd app:
- Export data: open Profile → Account → Export Data to download a copy of your health record.
- Delete data: open Profile → Account → Delete Data to remove health data from your account.
- Delete account: open Profile → Account → Delete account to request full account removal.
- Legal documents: open Profile → Account → Legal & Disclosures to review agreements such as Terms of Service (including health disclosure and AI transparency) and this Privacy Policy.
On the web: visit getreformd.com/data-controls to request data export, correction, or account deletion.
You may also contact us using the information in the Contact section below to exercise access, portability, correction, restriction, or deletion rights where applicable law provides them. We will respond in line with applicable law.
We retain your data for as long as your account is active and as needed to provide the service and comply with legal obligations. If you delete your account, we will delete or anonymize your personal data in line with our retention policy and applicable law, except where we must retain data for legal, security, or fraud-prevention reasons.
7. Your choices and controls
- Account and profile: You can update or correct account and profile information where Re:Formd provides account settings.
- Health data: You can update or remove health and assessment data you have entered, where those controls exist in the product.
- Communications: You can opt out of non-essential emails using the link in those emails or in preferences where available.
- Legal gates: You can review accepted agreements (for example, terms, privacy, health disclosure) in the Legal area of the product where provided.
If you are in a jurisdiction that grants additional rights (for example, access, portability, restriction, objection), you may contact us to exercise them. We will respond in line with applicable law.
8. Security
We use reasonable technical and organizational measures to protect your data, including encryption in transit and at rest where appropriate. No system is completely secure; you provide data at your own risk.
9. Children
Re:Formd is not intended for users under 18. We do not knowingly collect data from children under 18. If you believe we have collected such data, please contact us so we can delete it.
10. International transfers
Your data may be processed in the United States or other countries where our service providers operate. By using Re:Formd, you consent to such transfer. We take steps to ensure your data receives appropriate safeguards where required by law.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes through Re:Formd or by email. The last_updated value in the metadata at the top of the canonical policy file indicates when the policy was last revised. Your continued use after the effective date constitutes acceptance of the updated policy. For significant changes, we may ask you to accept the updated policy again through Re:Formd.
12. Contact
For privacy-related questions, requests, or complaints, contact us using the contact information provided in Re:Formd or on getreformd.com (or the then-current public site for Re:Formd).
By using Re:Formd, you acknowledge that you have read and understood this Privacy Policy.