Privacy Policy

Coda Compute, Inc., doing business as Coda Health, provides Duet. Depending on the features you use, we collect your account details and display name, health information from the sources you connect, Genome reports you import, your conversation with Duet, what Duet remembers about you, check-ins and reminders you ask Duet to set up, routines you save, insights, saved doctor materials, measurement display preferences, and sharing information. Duet also retains records and original files you previously saved, and private Moments from earlier versions; general document import is no longer available.

You choose which sources to connect. Duet reads the information you authorize and does not change records in Apple Health, Epic MyChart, or another connected health source.

We record which version of the Terms you accept and when you accept it. We also record your AI permission choice, its version, and the time of your decision. These permission records contain no health information.

We use your information to organize your health history, calculate measurements and comparisons, reply to you in your Duet conversation, remember what you share, provide insights and reviews, prepare summaries for your doctor, sync your account, and support sharing, export, and deletion.

AI processing is optional. After you accept the Terms and finish setup, Duet asks for your permission before any AI processing. You do not need to connect a health source first. Allow AI covers your Duet conversation, remembering what you share, reviews of selected new information, insights, and summaries you prepare for your doctor. Not now keeps the rest of Duet available. You can change this choice in Settings.

For your conversation, reviews, and insights, Duet uses what you write, its earlier replies, what it remembers about you, selected health facts, and relevant details from your connected records and the items you save in Duet. Insights may show up to three observations or none. For doctor summaries, we use only the information and notes you select. Duet does not send raw health samples, ECG waveforms, audiogram measurements, workout routes, raw DNA files or genotypes, or original files from your sources to AI services, or any information another person shares with you. Anything you type or paste into the conversation is sent as you wrote it.

Duet remembers what you share so it can pick up where you left off. It keeps one private set of notes about what matters to you, such as your goals, preferences, circumstances, and ongoing concerns. These notes can also reflect your connected records. You can correct them by telling Duet in the conversation; there is no separate screen for them. For a long conversation, Duet may also keep a shorter summary of the earlier discussion.

We do not sell health information or use it for advertising, credit decisions, or training or fine-tuning AI models.

Duet keeps protected app data on your iPhone, including your measurement preferences and private sharing key. We use Google Cloud to provide account sign-in, host Duet's services, and store account information, health data, your conversation and what Duet remembers, and temporary files. Credentials for connected health services are encrypted and held by Duet's server.

Epic provides the MyChart authorization and record access you request. OpenAI is our current AI service provider. Duet sends information to OpenAI only after you choose Allow AI.

Coda's agreement with OpenAI covers the handling of eligible health information. We disable ordinary response storage and do not permit model training with connected health information. Limited provider retention can still apply for abuse monitoring, legal obligations, and technical processing, including encrypted prompt-cache storage for up to 24 hours. Our configuration restricts human review but does not guarantee zero retention or processing only within the United States.

The public Duet website may collect browser, device, page-view, performance, and service-log information through its hosting and performance providers. We use it to operate and improve the website. It is not added to your Duet health profile or combined with connected health information for advertising.

Our service providers process information to provide and protect Duet. We do not permit them to use connected health information for advertising, data brokerage, or tracking you across apps.

You choose Apple Health permissions by data type on your iPhone. Each MyChart organization has a separate authorization and disconnect control. Connecting one organization does not give Duet access to another.

We request access for the Duet features you choose and keep the source and date with your records. Information from a source may be delayed, incomplete, changed, or unavailable.

Disconnecting a source stops future access and updates and removes its saved credentials. It does not change the original source. Duet keeps the history it already imported and its source details, along with insights, doctor materials, and what Duet remembers, and can still use them in your conversation and reviews. You can remove doctor materials in For my doctor. Imported history, insights, and what Duet remembers stay until you delete your account.

Disconnecting MyChart in Duet does not confirm that Epic has revoked its authorization. Use the connected-apps controls in MyChart to revoke access at the source.

We do not currently use connected health information for optional product-improvement or research programs. Connecting a source, using Duet, or allowing AI does not provide that permission.

Any future program would require a separate, optional choice and use only the information needed for that purpose. It would exclude raw health samples, records, documents, Genome data, doctor PDFs, free text, and another person's shared data. You could withdraw that permission without losing core Duet features, and account deletion would remove the related information held by Duet.

You choose what to share and with whom. Receiving another person's information does not give them access to yours. Duet does not provide public profiles, contact discovery, or automatic access to newly introduced health information.

Your iPhone encrypts a separate copy of the selected daily measurements for each recipient. The private sharing key stays on that iPhone. During normal operation, Coda stores and delivers this encrypted information without receiving readable shared values. We can see the accounts involved, selected measurement types, and timing and delivery information. Other health information in your Duet account does not have this same end-to-end encryption.

Apple handles Duet's push notifications. It receives your device's push token, silent background notifications, and generic alerts that ask you to open Duet. Notifications do not include a person's name, measurement names or counts, health values, or the source of the information.

Information shared with you stays separate from your own health information. It is not used for your analytics, AI processing, doctor collection, personal comparisons, Apple Health, widgets, or account export.

We use administrative, technical, and organizational safeguards to protect your information, including encryption in transit, encrypted provider credentials, restricted account access, and deletion controls. No storage or transmission system is completely secure.

We keep account information for as long as needed to provide Duet, meet legal obligations, protect the service, or carry out a deletion or permission withdrawal. We retain minimal recovery records identifying the affected account or item, the restriction, and its time. They contain no health values or content and remain while older recoverable copies could otherwise undo your choice.

Your conversation and what Duet remembers stay in your account until you delete your account. Turning off AI or withdrawing AI permission keeps them, so you can resume, export them, or delete them with your account.

Account deletion removes your information from Duet's active account stores. Earlier copies may remain in restricted backups. We schedule daily database backups, keep the seven most recent successful backups, and retain seven days of recovery logs. Backups are used only for recovery. Keeping seven backups does not mean every copy is deleted exactly seven days after you delete your account.

Routine cloud service logs are retained for 30 days. Selected security and operational records are retained for 365 days, and required cloud audit records for 400 days. We restrict access and minimize health information in diagnostic logs. These records are not used as a separate health profile or research dataset.

Deleting your account cannot remove a copy from an earlier device or computer backup, or a file you exported to another service or person. Those copies follow the controls and retention of their destination.

You can manage connected sources, pause AI features, pause reminders, check-ins, and reviews, withdraw AI permission, export your account information, stop sharing, sign out, or delete your account. Your export includes your conversation and what Duet remembers. Withdrawing AI permission stops future processing but cannot recall information already sent in a request. It keeps your existing records, conversation, what Duet remembers, insights, and doctor materials.

Start fresh in For my doctor clears the note, selected items, and active summary after you confirm. Duet keeps no archive of shared PDFs.

Account deletion removes active account data, Terms and AI permission records, provider credentials, retained health information, your conversation, what Duet remembers, check-ins and reminders, insights, doctor materials, and sharing content. It also clears local account data and sharing keys from the iPhone. The limited backup and recovery records described above remain under their retention rules. Deletion cannot retract information another person has already received, viewed, or captured.

Duet is available to adults age 18 or older who live in the United States. You confirm this when you accept the Terms. We do not infer eligibility from your health information, device location, or Apple account.

We may update this policy as Duet or legal requirements change. We will post the updated policy here with its effective date and provide additional notice when required.

For privacy, rights, or appeal requests, contact legal@codahealth.ai. For product support, contact hello@codahealth.ai. You can also write to Coda Compute, Inc., 99 Wall Street, New York, NY 10005.