Privacy Policy
This English policy controls. Future translations, if provided, are for convenience; if a translation conflicts with this policy, the English version applies.
1. Who we are and how to contact us
Mint Health provides an AI-assisted health-information and organisation service for adults in the Philippines. For this service, Mint Health determines why and how personal information is processed. To ask a privacy question or exercise a right, email privacy@minthealth.me. For service support, email support@minthealth.me.
2. Information we collect
We collect account and identity information such as your email address, password credential or sign-in identifier, account settings, and, if you choose Google sign-in, the Google identity information needed to authenticate you.
We collect sensitive health information that you provide: anamnesis and health-profile details, uploaded medical documents, laboratory results, prescriptions, findings, chat messages, and AI-generated summaries or responses. We also collect limited usage, device, session, security, fraud-prevention, and payment metadata. Payment card details are handled by the payment provider, not stored by Mint Health.
3. Why we use information and our grounds for doing so
We use account information to create and secure your account, provide the service, communicate with you, process purchases, prevent fraud and misuse, maintain the service, and meet legal obligations. We process sensitive health information only to provide the health profile, organise your documents, and generate the AI-assisted responses you request, based on your separate, specific consent. Where permitted by applicable law, we also use limited technical and security information for our legitimate interests in protecting the service and users.
Operational reports contain aggregate counts and exclude medical text, files, email addresses, and model output. To understand whether our ferritin check helps people continue in Mint, we keep a random answer identifier, timestamps, a broad traffic-source category, and completion milestones. If you transfer your conversation and sign in, we can link this limited measurement record to your account to count subsequent use. We do not send these records to advertising platforms or use additional tracking cookies for this measurement. We respect Do Not Track and Global Privacy Control for this measurement. Unsent delivery records expire after seven days; application measurement records expire after 90 days or are removed when you delete your account. Measurement details updated October 15, 2026.
Health Data and AI Processing Notice
Notice version: health-2026-08-20. Before we process health information, upload a medical document, create a health profile, or provide health AI chat, we ask for your separate affirmative consent. That consent covers processing the health information and documents you submit, generating a health profile and AI-assisted responses, sending necessary content to the processors described below (including OpenAI), and international processing and transfer as described in this policy. It is not pre-selected, bundled with marketing, or inferred only from accepting the Terms.
Mint Health uses automated and AI-assisted processing. AI can make mistakes, may omit context, and is not a substitute for a qualified health professional. We do not use AI to make solely automated decisions that produce legal or similarly significant effects about you. Important medical decisions require verification with a qualified professional.
You may withdraw health-data consent at any time. Withdrawal blocks new uploads, profile processing, and health AI requests until you give new consent. Withdrawal does not erase your account or records we must retain for payment, security, fraud prevention, disputes, or legal obligations. We will offer a path to delete your health profile or complete account.
4. Service providers, international transfers, and accountability
We use processors to operate the service, including OpenAI for AI processing, Cloudflare for security and delivery, Google for optional sign-in, and the payment provider for transactions. We may also use hosting, storage, and email-delivery providers. Processors act only on our documented instructions and may process information outside the Philippines. We use appropriate contractual, organisational, and technical safeguards for those transfers and remain accountable for processing entrusted to our processors as required by applicable law.
5. No sale, advertising use, or AI-model training
Mint Health does not sell health data, use health data for advertising, or use your documents, health-profile content, chat content, or AI responses to train AI models.
For new registrations reached through links marked as Facebook, Instagram, Audience Network, Messenger, Threads or Meta, we send Meta a completed-registration event and limited technical advertising identifiers. We do not include health records, symptoms, conversations, email addresses or authentication tokens in that event. Read about the data, retention and how to stop pending delivery in Advertising measurement.
6. Retention and deletion
Unpaid pending documents are generally removed on an approximately 24-hour cleanup schedule. You may delete your account in the application or request deletion by contacting privacy@minthealth.me. Account deletion removes account health content, including documents, health-profile text, chat content, and AI output, subject to the limited records described below.
We may retain minimal billing, tax, fraud-prevention, dispute, consent, and security records for required periods. Those records exclude document content, profile text, chat content, and AI output unless preservation is necessary for a specific legal claim.
7. Your rights
Subject to applicable law, you may ask to be informed about processing; access, correct, or update information; object to processing; withdraw consent; request erasure or blocking; request data portability; seek damages where available; and complain to the Philippine National Privacy Commission. To make a request, contact us at privacy@minthealth.me. We may need to verify your identity and will explain any lawful limit on a request.
8. Security and incidents
We use reasonable administrative, technical, and organisational measures designed to protect information, including access controls and security monitoring. No method of transmission or storage is completely secure, and we do not promise absolute security. If a personal-data incident occurs, we will investigate, contain it, and notify affected people and authorities when required by applicable law.
9. Changes to this policy
We will post the current effective date and version here and provide notice of material changes. A material change to health-data purposes, recipients, AI use, or paid terms will require new affirmative acceptance before affected processing continues where required. Questions or concerns may be sent to privacy@minthealth.me.