Privacy Policy

Effective date: May 9, 2026 · Last updated: September 5, 2026

1. Who this policy applies to

This Privacy Policy describes how Up to Speed ("Up to Speed," "we," "us," or "our") collects, uses, stores, and shares information when you use our website at uptospeed.health and our application (collectively, the "Service"). It applies to anyone who creates an account, including patients managing their own care and caregivers acting on behalf of a patient with appropriate authority.

2. Information we collect

We collect three categories of information:

2.1 Account information

When you create an account, we collect your email address and a password (stored as a salted hash, so we never see your plaintext password). If you contact us, we keep the contents of that correspondence so we can respond and follow up. If you request an invite before you have an account, we keep the name, email address, relationship to the patient, hospital and MyChart answer you give us, and the network address the request came from, until the request is decided and for 30 days after. You may instead choose to sign in with your Google account, described in Section 2.2. In that case we do not hold a password for you at all unless you later set one.

2.2 Signing in with Google

Signing in with Google is optional. Email and password sign-in works exactly as it always has, and always will. You are never required to involve a Google account to use Up to Speed.

If you choose it, Google tells Up to Speed three things: your name, your email address, and a stable identifier Google uses for your account. We store those to create your Up to Speed account, to recognise you when you come back, and to show you which account you are signed in as. That is the entire extent of what Up to Speed receives.

Up to Speed requests only the three standard sign-in permissions (openid, email and profile). It does not request, receive, or have any ability to read your Gmail, your Google Drive, your contacts, your photos, or your calendar.

Signing in with Google is separate from the Google Calendar feed described in Section 3.5. Using one never enables the other. They are asked for at different times, for different reasons, and either can be used without the other. Signing in with Google gives Up to Speed no access whatsoever to your calendar.

Google will know that you signed in to Up to Speed and when, in the same way it knows about any other site you use your Google account for. What you do inside Up to Speed afterwards, every symptom, lab result, note and document, is not visible to Google and is never sent to it.

You are not locked in. You can set a password at any time from the password page in Settings, using the emailed link, and from then on sign in either way. Setting a password is also what lets you change your email address or delete your account, since both of those ask you to confirm your password first.

2.3 Information you provide directly

Up to Speed lets you record symptoms, vital signs, medication doses, appointments, hospital stays, photos of paper documents, and notes from conversations with your care team. Everything you enter into Up to Speed is information we collect.

2.4 Information from connected medical record systems

If you choose to connect a medical record account, we collect the health data described in Section 3.

2.5 Limited technical information

Our servers log standard request metadata for operational purposes: IP address, request path, response status, timestamp, and user-agent string. We use Google Analytics on both uptospeed.health and the Up to Speed application to understand which pages are used. It reports the page you are on, the page you came from, an approximate location derived from your IP address, and your browser and device type. It does not receive the contents of your records. Within the application, page addresses are rewritten before they are sent, so invite links, password-reset links and individual record identifiers are replaced with placeholders rather than transmitted. uptospeed.health and the application share one Google Analytics property with cross-domain measurement enabled, so a visit that starts on the marketing site and continues into the application is counted as one journey rather than two disconnected ones. We do not use advertising trackers, session replay tools, or social-media pixels. We use a single, first-party session cookie to keep you logged in.

2.6 Gifts

Up to Speed can be bought for another family as a gift. If you give one, we collect your name and email address, the name and email address of the person you are giving it to, the note you write them, the number of months and the amount, the identifiers Stripe returns for the payment, and the network address the order came from. If you receive one, the only thing we learn about you from the giver is the name and email address they typed.

Your note is shown to the person who opens the gift and to the owner of the household it lands on, and it is visible to whoever operates this server in the queue where gifts are managed. The giver's email address is never shown to the recipient, and nothing about the recipient is sent to Stripe: Stripe receives the giver's name, email address and card, plus an identifier for the gift, and no other detail.

A gift bought for an address that has no Up to Speed account creates an invitation for that address, so the family can set up an account when they open it. That invitation does not expire, because the gift is already paid for. The mail a gift sends is one message to the person receiving it, a receipt and a note that it was opened to the giver, and, as the gifted months run low, one or two reminders to the household that received it.

3. Health information from your medical record

When you connect your Epic MyChart account (or another supported medical record), Up to Speed uses the SMART on FHIR standard to request read-only access to your record. The OAuth authorization screen at your hospital's site shows you exactly what is being requested before you approve it, and you can revoke that access from your hospital's patient portal or from Up to Speed's Settings page at any time.

3.1 What we request

Up to Speed uses the SMART on FHIR standard and requests read-only access, one narrow, separate permission for each kind of data it uses, never a blanket "all of your data" permission. The categories Up to Speed reads are:

• patient demographics
• laboratory results and vital signs
• lab and imaging reports
• medication orders
• clinic visits and hospital admissions
• diagnoses, both the problem list and visit diagnoses
• clinical notes and radiology reports

Each of these is a "read and search" permission: Up to Speed can read your existing records and look them up by patient, but it cannot create, change, or delete anything. We also use the standard sign-in permissions that let your hospital tell Up to Speed which patient you've connected and keep you signed in without re-entering your password every time.

3.2 What we do not request

Up to Speed asks for no permission to write to your record, place orders, schedule appointments, send messages on your behalf, or see any patient other than the one you've connected, and it could not use one if it had it. It is a strictly read-only consumer of your data.

3.3 How often we read

While your medical record is connected, Up to Speed polls your hospital's FHIR endpoint approximately every 30 minutes to retrieve new or updated resources for your patient. When the connection is disconnected, polling stops immediately.

3.4 Where the data lives

Health data retrieved from your medical record is stored on the server Up to Speed runs on, a rented virtual machine its operator administers; our additional disclosures name the hosting provider and say what it necessarily holds. The original FHIR payloads are stored verbatim alongside the parsed, normalized values that power Up to Speed's dashboards, so we can reprocess your data as we improve the application without needing to re-fetch it from your hospital.

3.5 Other connected sources and optional integrations

Up to Speed supports two optional integrations beyond your primary medical record. Each is off by default, configured by you in Settings, and can be disconnected at any time. Full data flows are documented in our additional disclosures.

Google Calendar

If enabled, Up to Speed writes a one-way feed of your appointments, treatment cycles, infusion days, and hospital stays to a dedicated Google calendar you select. Up to Speed obtains a Google OAuth scope limited to that calendar's events; it cannot read your other calendars and cannot read anything from Google back into Up to Speed. Disabling the integration stops new writes but does not delete events already in your Google calendar. You delete those from Google.

Web push notifications

If enabled, Up to Speed can deliver browser-based push notifications when a new lab draw lands and when an AI review is ready. Notification delivery uses the standard Web Push protocol with VAPID authentication; the push payload routes through your browser vendor's push service (Apple, Google, or Mozilla). The body contains only a short, generic message and a link back into Up to Speed, never the actual lab value or any clinical detail. Disabling notifications in Up to Speed or your browser stops new pushes.

4. How we use your information

We use the information described above to:

• Provide the Service: assemble your record, render dashboards, generate summaries, and deliver the notifications you have asked for.
• Authenticate you and keep your account secure.
• Communicate with you about the Service, including security and outage notices and material changes to this policy.
• Diagnose and fix errors, monitor reliability, and improve performance.
• Respond to your support requests.
• Comply with legal obligations and enforce our Terms of Service.

We do not use your health information for advertising. We do not sell your information. We do not share or license your information to data brokers. We do not use your health data to train general-purpose AI models.

5. When we share information

Up to Speed does not share your information with third parties except in the limited circumstances below.

5.1 Service providers

We use a small number of vendors to operate the Service, for example the cloud infrastructure that hosts our application, the email provider that sends transactional messages, and (where applicable) the AI providers described in Section 6. These vendors are contractually bound to use information only to perform services for us and to protect it appropriately.

5.2 Legal requirements

We may disclose information if required to do so by law, subpoena, court order, or other valid legal process. Where lawful, we will notify you before disclosure so you can object.

5.3 Protecting people

We may disclose information if we believe in good faith that it is necessary to investigate or prevent fraud, security incidents, or harm to any person.

5.4 With your direction

If you choose to share, export, or send your data to another person or service, we will help you do so. That sharing is at your direction and under your control.

5.5 Business transfers

If Up to Speed is involved in a merger, acquisition, or sale of assets, we will give you notice before your information is transferred and becomes subject to a different privacy policy. You will have an opportunity to delete your data before any transfer.

6. Use of AI providers

Up to Speed's AI features fall into two groups. As uptospeed.health is configured today, both groups send data over the internet to OpenAI, which runs the model gpt-5.6-luna. Every call is written to your private audit trail inside Up to Speed, with the exact payload, so you can see what was sent, when, and what came back.

6.1 Everyday text features

Plain-language explanations of lab tests and imaging reports. Neither of these runs on its own. Each one happens when you press its button. What is sent is the thing you asked about: a test's name, unit and reference range, or the text of a radiology report. These features used to run on a model hosted on our own server. They no longer do.

6.2 Clinical-style review

Lab reviews, rounds preparation, methotrexate clearance checks, lab threshold suggestions, pathology and imaging findings extraction, and echo trend reviews. Up to Speed sends a curated subset of your data chosen for the task, never your full record and never your raw FHIR resources. Most of these wait for a button press. Two do not: the lab review runs when new results arrive, and the imaging findings extraction runs when a new radiology report arrives. These prompts are written to leave the patient's name out and to send the age in whole years rather than a date of birth. Free text you have typed is sent exactly as you wrote it.

6.3 What we can and cannot promise

Up to Speed marks every request to OpenAI store: false, which asks OpenAI not to keep the request on the account and not to use it to improve their models. Under OpenAI's standard API terms, what Up to Speed sends may still be held for roughly 30 days for abuse monitoring before deletion. There is no Data Processing Agreement and no zero-retention arrangement behind that, and Up to Speed cannot verify or enforce it on your behalf. Anything that must never leave your record should not be put through an AI feature at all.

The operator of an Up to Speed server can point either group at a model running on the server itself, and then nothing is sent to OpenAI. uptospeed.health is not run that way today. The privacy page inside the application, at app.uptospeed.health/privacy, always describes the configuration actually in force, and it governs wherever the two pages differ.

7. How we protect your information

We take the security of your information seriously. Our practices include:

• Encryption in transit. All connections to Up to Speed use TLS 1.2 or newer. The Service is configured with HSTS.
• Encryption at rest. Disk-level encryption (AES-256) protects all stored data. Sensitive fields, including OAuth access tokens and refresh tokens, are additionally encrypted at the application layer with per-record keys.
• Least privilege. Access to production systems is limited to personnel who need it. All access is logged.
• Minimal data collection. We request only the data categories Up to Speed actually uses and store only what is necessary.
• No advertising trackers. The Service uses Google Analytics (see Section 2.5) but includes no advertising pixels or social-media trackers.

For more detail, see our security overview.

8. How long we keep your information

We keep your account information and your record data for as long as your account is active. If you delete your account, we delete the underlying data within 30 days, except where we are required by law to retain a copy (for example, narrowly scoped records relevant to a legal hold). Backup snapshots may persist in encrypted, access-restricted storage for up to 90 additional days, after which they are overwritten in the normal rotation.

Logs containing IP addresses and request metadata are retained for 30 days for operational and security purposes, then deleted.

A gift order that was started and never paid for is deleted after a day. A paid gift is kept as the record of that purchase: while nobody has opened it, and after that for as long as the household it landed on exists. A refund is written onto the gift rather than erasing it, so both sides can still see what happened.

9. Your rights and controls

You have the following rights regardless of where you live, and we will honor them globally:

• Access. You can view all of your data in Up to Speed at any time. Most of it is visible directly in the application; for raw FHIR resources or anything else, contact us.
• Export. You can export your data in machine-readable formats (FHIR JSON for record data; CSV/JSON for entries you've made in Up to Speed).
• Correct. You can edit or delete entries you've made in Up to Speed directly. For data sourced from your medical record, corrections must be made at the source, and Up to Speed re-reads it from your hospital.
• Disconnect. You can disconnect your medical record from Up to Speed at any time from Settings. This stops new data from being retrieved. Previously retrieved data remains in your account until you delete it.
• Delete. You can delete your account at any time from Settings, which removes all of your data subject to the retention rules in Section 8.
• Object or restrict. You can ask us to limit how we use your information for any reason.

If you live in California, the EEA, the UK, or another jurisdiction with statutory privacy rights, you may have additional rights under those laws. To exercise any right, email privacy@uptospeed.health.

10. Information about minors

Up to Speed is designed to be used by adults, including caregivers (such as parents or legal guardians) who manage care on behalf of a minor patient. Caregivers may enter information about a minor patient in their care.

Up to Speed does not knowingly create accounts for users under 13. If you are a caregiver entering information about a minor, you confirm that you have the legal authority to do so. If you become aware that a minor has created an account without authorization, please contact us at privacy@uptospeed.health and we will delete the account.

11. A note on HIPAA

HIPAA generally regulates "covered entities" (such as hospitals and health plans) and their "business associates." Up to Speed provides services directly to individuals at their request, which means the federal HIPAA Privacy Rule does not, in most cases, apply to Up to Speed in the same way it applies to your hospital. We have nonetheless designed Up to Speed around HIPAA-aligned security and privacy practices because we believe your health data deserves that standard regardless.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and post the updated policy here at least 30 days before it takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact us

If you have questions, concerns, or requests about this policy or how Up to Speed handles your information, please contact:

Up to Speed Privacy
privacy@uptospeed.health
General support: support@uptospeed.health