Privacy Policy

Last updated: June 2026

Engel Family Healthcare ("the app," "we") is a small, personal, non-commercial project operated by Blake Engel. It helps a person — and, if they choose, a family caregiver — securely retrieve and receive copies of their own health records from their healthcare provider's patient portal (Epic / MyChart). This policy explains, in plain language, what information the app handles and why.

Information the app handles

• Details you give us: the names, email addresses, caregiver relationships, and delivery preferences for the people whose records are being managed.
• Health records you authorize us to retrieve: after you sign in through Epic and grant permission, the app reads your own health information — demographics, conditions, medications, lab results, encounters, and clinical documents/notes — using read-only access. The app never writes to or changes your medical record.
• A connection credential: so the app can fetch new records on your behalf to deliver them, it stores a "refresh token" from Epic. This token is encrypted before it is stored.

How the app uses this information

• To retrieve your records and deliver your after-visit summaries and clinical notes to you, and to any caregiver you designate, by email (and, in future, other channels you choose).
• To generate a plain-language summary of each note to help you understand it.

We do not sell your information, use it for advertising, or share it for any purpose unrelated to delivering your own records to you and your chosen caregiver.

Service providers we rely on

To operate, the app shares the minimum necessary information with a few service providers, who process it only to perform these functions:

• Epic / MyChart — your provider's system, the source of your records.
• Supabase — securely stores your retrieved records and your connection.
• Anthropic (Claude AI) — receives the text of your notes in order to produce the plain-language summaries. Your note content is sent to Anthropic's API for this processing.
• Resend — sends the delivery emails.
• Render — hosts the application.

How your information is protected

Connection credentials are encrypted before storage, and all secrets are kept out of the app's source code. Please understand this is an early-stage personal project, not an independently audited commercial service.

Your choices and rights

• Get a copy of all the data the app holds about you.
• Delete your data and close out your connection, with no data kept afterward.
• Turn off email delivery at any time.

To exercise any of these, contact Blake Engel (below).

Your right of access, and HIPAA

This app helps you obtain your own records at your request — your right of access under U.S. law. Because it acts on your direction rather than on behalf of your provider, it is generally not a HIPAA "business associate," and your providers' HIPAA obligations do not transfer to it. In practice this means the protections here come from this policy and applicable consumer-privacy law, not from HIPAA. This mirrors what Epic's own consent screen tells you when you connect.

How long we keep it

Your information is kept until you ask us to delete it or you disconnect.

Children

The app is intended for adults managing their own or their family's records, and is not directed to children.

Changes

We may update this policy; the "last updated" date above will change when we do.

Contact

Questions or requests: Blake Engel, blake@dartboard.ing.

Back to home · Terms & Conditions