Encrypted, never sold, yours to take back
Hale by Just Hale LLC · an educational wellness tool, not medical advice · Sign in at allhale.app
Health data is the most personal thing a person can hand to software, so Hale is built so that handing it over costs you as little as possible.
Encrypted at rest. Your markers and their history, everything Hale remembers about you, your protocols and your chat history are encrypted on our servers. Your password is stored only as a hash. Card details go straight to Stripe, never to Hale; the account keeps Stripe's references and your plan's status.
Never sold, never advertised against. There is no advertising profile, no third-party tracker and no data broker. What Hale counts about itself is a small set of product events kept as daily totals, with no account id and no IP address attached, so they cannot be tied back to anyone.
AI processing. To answer you, your messages and the relevant parts of your health data are sent to our AI provider, Anthropic, solely to generate that response. Anthropic processes them on our behalf and does not use them to train shared models. Uploaded lab panels are read once for extraction and are not kept as files.
Apple Health and Apple Watch. On iPhone, Hale reads only the metrics you allow and never writes anything back. Once you connect your Apple Watch, new readings sync automatically in the background after your Watch syncs to your iPhone, and you can stop automatic sync from My Data at any time. Those readings are stored on your account like any value you typed, never used for advertising and never written to iCloud. Hale on Apple Watch has its own sign-in, which you can end at any time; it reads Health on the Watch only with your permission and sends only its latest readings, which you can switch off there. Apple Watch is the only wearable Hale connects to.
Yours to take back. Privacy & Data exports everything you have entered as a single file, and a short PDF summary is there for your clinician. Deleting your account takes effect immediately, cancels any subscription and removes the account from the live database; Hale's own backups roll off within 30 days, and our hosting provider's disk snapshots expire on its schedule. You can do all of this yourself, without asking us.
The plan does not change any of it. Hale Core ($4.99 a month) and Hale Pro ($14.99 a month) differ in how much you can run, never in how your data is handled, and export and delete stay open whatever your subscription status. Hale is for adults 18 and older. The full Privacy Policy has the detail; privacy requests go to hello@allhale.app and are answered within 30 days.