🔒 Our privacy commitment
OceanAI is a health platform. We treat your data with the highest level of care. We do not sell it, we do not use it for ads, and wherever possible, we process it on your device so it never leaves your phone.
What data we collect
OceanAI collects only what is necessary to provide your health intelligence experience. This includes:
- Health documents you upload (lab reports, prescriptions, imaging)
- AI conversation history
- Appointment data you create
- Account information (email, name) if you create an account
- Watch/wearable data when you grant permission
We do NOT collect: location data in the background, contacts, camera outside of document uploads, or any data you have not explicitly provided.
On-device processing
OceanAI's on-device Local LLM processes your health queries entirely on your phone. No query is sent to any server when the on-device model is active.
When you use the cloud AI features (Insurance AI, advanced file extraction), your query is transmitted securely to our API endpoint and to Anthropic's Claude API. No health data is retained by Anthropic beyond the immediate API call.
How we use your data
Your health data is used solely to provide your OceanAI experience:
- Documents you upload are analyzed to extract health data for your timeline
- AI conversations are stored in your personal history to provide context for future queries
- Watch data is used to populate your organ health metrics
We do not use your health data for advertising, analytics products, or model training.
Data storage and security
Your data is stored in Supabase (PostgreSQL) with row-level security — your data is isolated from all other users at the database level. All data in transit is encrypted via TLS 1.3. At-rest encryption is enforced on all storage backends.
Documents you upload are stored encrypted and tied exclusively to your account. No Studio ILLIOS employee has access to your health documents in the normal course of operations.
Family Connect
When you use Family Connect to share health data with family members, you grant explicit, revocable consent to each connection. Shared data is limited to what you specifically authorize. You can revoke access at any time from within the app.
Your rights
Under India's Digital Personal Data Protection Act (DPDPA) 2023 and applicable international regulations, you have the right to:
- Access all personal data we hold about you
- Correct any inaccurate data
- Request deletion of your account and all associated data
- Withdraw consent for any data processing
- Data portability — export your health timeline as a PDF
To exercise any of these rights, email nextlife@studioilios.org.
Third-party services
OceanAI uses the following third-party services:
- Anthropic Claude API — for cloud AI features only (no data retention per Anthropic's API terms)
- Supabase — database and authentication
- Vercel — web hosting (this website only; no health data)
- Apple / Google — app distribution only
We do not sell, rent, or share your data with any advertising or analytics third parties.
Contact
For any privacy-related questions, data access requests, or concerns, contact us at:
Studio ILLIOS
nextlife@studioilios.org
We will respond within 5 business days.