Privacy Policy

Coda Compute, Inc., doing business as Coda Health, provides Duet. Depending on the features you use, we collect your account details and display name, health information from the sources you connect, Genome reports you import, insights, saved doctor materials, private Moments, measurement display preferences, and sharing information. Duet also retains records and original files you previously saved; general document import is no longer available.

You choose which sources to connect. Duet reads the information you authorize and does not change records in Apple Health, Epic MyChart, or another connected health source.

We record which version of the Terms you accept and when you accept it. We also record your AI permission choice, its version, and the time of your decision. These permission records contain no health information.

We use your information to organize your health history, calculate measurements and comparisons, provide insights, prepare summaries for your doctor, sync your account, and support sharing, export, and deletion.

AI processing is optional. Once health information is available from a connected source, Duet asks for your permission before using it with third-party AI services. Allow AI covers automatic insights and summaries you request for your doctor. Not now keeps the rest of Duet available. You can change this choice in Settings.

For insights, Duet uses selected health facts and relevant details from your connected records. It may show up to three observations or none. For doctor summaries, we use only the information and notes you select. We do not send raw health samples, ECG recordings, audiograms, workout routes, raw DNA files or genotypes, original files, or another person's shared information to AI services.

We do not sell health information or use it for advertising, credit decisions, or training or fine-tuning AI models.

Duet keeps protected app data on your iPhone, including your measurement preferences and private sharing key. We use Google Cloud to provide account sign-in, host Duet's services, and store account information, health data, and temporary files. Credentials for connected health services are encrypted and held by Duet's server.

Epic provides the MyChart authorization and record access you request. OpenAI is our current AI service provider. AI features are currently turned off and require your permission before use.

Coda's agreement with OpenAI covers the handling of eligible health information. We disable ordinary response storage and do not permit model training with connected health information. Limited provider retention can still apply for abuse monitoring, legal obligations, and technical processing, including encrypted prompt-cache storage for up to 24 hours. Our configuration restricts human review but does not guarantee zero retention or processing only within the United States.

The public Duet website may collect browser, device, page-view, performance, and service-log information through its hosting and performance providers. We use it to operate and improve the website. It is not added to your Duet health profile or combined with connected health information for advertising.

Our service providers process information to provide and protect Duet. We do not permit them to use connected health information for advertising, data brokerage, or tracking you across apps.

You choose Apple Health permissions by data type on your iPhone. Each MyChart organization has a separate authorization and disconnect control. Connecting one organization does not give Duet access to another.

We request access for the Duet features you choose and keep the source and date with your records. Information from a source may be delayed, incomplete, changed, or unavailable.

Disconnecting a source stops future access and updates and removes its saved credentials. It does not change the original source. Previously imported history, source details, insights, and doctor materials remain in Duet until you remove them using an available control or delete your account.

Disconnecting MyChart in Duet does not confirm that Epic has revoked its authorization. Use the connected-apps controls in MyChart to revoke access at the source.

We do not currently use connected health information for optional product-improvement or research programs. Connecting a source, using Duet, or allowing AI does not provide that permission.

Any future program would require a separate, optional choice and use only the information needed for that purpose. It would exclude raw health samples, records, documents, Genome data, doctor PDFs, free text, and another person's shared data. You could withdraw that permission without losing core Duet features, and account deletion would remove the related information held by Duet.

You choose what to share and with whom. Receiving another person's information does not give them access to yours. Duet does not provide public profiles, contact discovery, or automatic access to newly introduced health information.

Your iPhone encrypts a separate copy of the selected daily measurements for each recipient. The private sharing key stays on that iPhone. During normal operation, Coda stores and delivers this encrypted information without receiving readable shared values. We can see the accounts involved, selected measurement types, and timing and delivery information. Other health information in your Duet account does not have this same end-to-end encryption.

Apple handles Duet's push notifications. It receives your device's push token, silent background notifications, and generic alerts that ask you to open Duet. Notifications do not include a person's name, measurement names or counts, health values, or the source of the information.

Information shared with you stays separate from your own health information. It is not used for your analytics, AI processing, doctor collection, personal comparisons, Apple Health, widgets, or account export.

We use administrative, technical, and organizational safeguards to protect your information, including encryption in transit, encrypted provider credentials, restricted account access, and deletion controls. No storage or transmission system is completely secure.

We keep account information for as long as needed to provide Duet, meet legal obligations, protect the service, or carry out a deletion or permission withdrawal. We retain minimal recovery records identifying the affected account or item, the restriction, and its time. They contain no health values or content and remain while older recoverable copies could otherwise undo your choice.

Account deletion removes your information from Duet's active account stores. Earlier copies may remain in restricted backups. We schedule daily database backups, keep the seven most recent successful backups, and retain seven days of recovery logs. Backups are used only for recovery. Keeping seven backups does not mean every copy is deleted exactly seven days after you delete your account.

Routine cloud service logs are retained for 30 days. Selected security and operational records are retained for 365 days, and required cloud audit records for 400 days. We restrict access and minimize health information in diagnostic logs. These records are not used as a separate health profile or research dataset.

Deleting your account cannot remove a copy from an earlier device or computer backup, or a file you exported to another service or person. Those copies follow the controls and retention of their destination.

You can manage connected sources, pause AI features, withdraw AI permission, export your account information, stop sharing, sign out, or delete your account. Withdrawing AI permission stops future processing but cannot recall information already sent in a request. It keeps your existing records, insights, and doctor materials.

Start fresh in For my doctor clears the note, selected items, and active summary after you confirm. Duet keeps no archive of shared PDFs.

Account deletion removes active account data, Terms and AI permission records, provider credentials, retained health information, insights, doctor materials, and sharing content. It also clears local account data and sharing keys from the iPhone. The limited backup and recovery records described above remain under their retention rules. Deletion cannot retract information another person has already received, viewed, or captured.

Duet is available to adults age 18 or older who live in the United States. You confirm this when you accept the Terms. We do not infer eligibility from your health information, device location, or Apple account.

We may update this policy as Duet or legal requirements change. We will post the updated policy here with its effective date and provide additional notice when required.

For privacy, rights, or appeal requests, contact legal@codahealth.ai. For product support, contact hello@codahealth.ai. You can also write to Coda Compute, Inc., 99 Wall Street, New York, NY 10005.