AskZeni.comMulti-AI
Official Privacy & Zero-Trace Data Policy

Privacy Policy & Zero-Trace Architecture

Effective Date: September 13, 2026 • AskZeni Enterprise Health AI Platform • Version 3.4

Client-Side PII De-Identification

All 18 HIPAA personal identifiers (SSNs, MRNs, patient names, dates of birth, street addresses) are redacted locally in your browser before any network transmission.

Zero Data Retention (ZDR)

We contract under strict Enterprise ZDR agreements with upstream AI model providers (OpenAI, Anthropic, Google DeepMind, DeepSeek). Your queries and lab records are never used for model training.

Zero Hospital Password Storage

When syncing with Epic MyChart, Cerner, or hospital portals via SMART on FHIR, authentication occurs directly on your healthcare provider's secure domain. AskZeni never sees or stores passwords.

1-Click Permanent Data Erasure

You retain absolute data ownership. Erase individual lab records, clear family member sub-vaults, or purge your entire account permanently with a single click. No residual copies remain.

Policy Sections & Quick Navigation:
1. Data We Do & Do Not Collect•2. Client-Side De-Identification•3. Multi-Model AI Consensus•4. SMART on FHIR Portal Sync•5. Email Forwarding & Ingestion•6. Household Family Profiles•7. Zero-Trace Data Erasure•8. Cookies & Advertising•9. CCPA/CPRA & GDPR Rights•10. Security Safeguards•11. Privacy Contact & DPO
1

Information We Do and Do Not Collect

AskZeni is architected from the ground up as a privacy-first, zero-trace health education platform. We firmly reject the business model of monetizing, selling, or training machine learning models on personal health data.

Information We Process Under Your Direction:
  • Account email address and subscription tier (managed via Paddle MoR).
  • User-created Household Family Profile aliases (e.g., “Self”, “Sarah”, “Child”).
  • De-identified health inquiry prompts and symptom descriptions.
  • De-identified laboratory biomarker numbers and diagnostic report text explicitly uploaded or synced with your consent.
Information We NEVER Collect or Store:
  • Social Security Numbers (SSN) or government IDs.
  • Medical Record Numbers (MRN) or Health Insurance Member IDs.
  • Hospital or patient portal usernames and passwords.
  • Credit card numbers or full billing data (handled solely by Paddle).
  • Raw, un-redacted clinical documents containing direct patient names.
2

Client-Side PII De-Identification & HIPAA Safe Harbor Standard

Under the HIPAA Safe Harbor De-Identification Standard (45 CFR § 164.514(b)(2)), health data is legally classified as non-identifiable once 18 specific categories of personal identifiers are removed.

AskZeni executes this de-identification directly inside your web browser (client-side) using an isolated Web Worker engine before payload serialization or API dispatch. The following 18 identifier patterns are automatically detected and replaced with cryptographic redaction markers:

1. Social Security Numbers → [REDACTED_SSN]
2. Telephone & Fax Numbers → [REDACTED_PHONE]
3. Email Addresses → [REDACTED_EMAIL]
4. Dates of Birth → [REDACTED_DOB]
5. Medical Record Numbers (MRN) → [REDACTED_MRN]
6. Patient Names → [REDACTED_NAME]
7. Street Addresses → [REDACTED_ADDRESS]
8. US ZIP & Postal Codes → [REDACTED_ZIP]
9. Health Plan Beneficiary IDs → [REDACTED_INSURANCE_ID]
10. Lab Specimen & Accession IDs → [REDACTED_ACCESSION]
11. Physician NPI & License Numbers → [REDACTED_NPI]
12. Device Serial Numbers → [REDACTED_DEVICE]
13. Web URLs → [REDACTED_URL]
14. IP Addresses → [REDACTED_IP]
15. Biometric Identifiers → [REDACTED_BIOMETRIC]
16. Full-face Photographic Images → [STRIPPED]
17. Account & Certificate Numbers → [REDACTED_ACCT]
18. Any Unique Characteristic / Identifier → [REDACTED]
3

Multi-Model AI Processing & Zero Data Retention (ZDR) Guarantees

AskZeni queries multiple leading artificial intelligence models concurrently (including GPT-4o / GPT-4o-mini by OpenAI, Claude 3.5 Sonnet / Claude 3.5 Haiku by Anthropic, Gemini 1.5 Pro / Flash by Google DeepMind, and DeepSeek R1 / V3 via Groq hardware acceleration) to formulate multi-disciplinary clinical consensus comparisons.

Enterprise API Zero-Data Retention (ZDR) Standards:

All model inferences are executed exclusively through enterprise commercial API endpoints governed by contractual Zero-Data Retention terms. Upstream LLM providers are contractually prohibited from using your submitted health prompts, questions, or scrubbed lab values to train, fine-tune, or improve future foundational AI models.

4

SMART on FHIR v2.0 & Electronic Health Record (EHR) Interoperability

In compliance with the 21st Century Cures Act Interoperability Mandate (45 CFR Part 170), AskZeni supports SMART on FHIR v2.0 / HL7 FHIR R4 Standalone Patient Access protocols across 6,000+ US health systems, hospitals, and outpatient lab portals (including Epic MyChart, Cerner / Oracle Health, Athenahealth, Quest Diagnostics, and Labcorp).

Direct Patient OAuth 2.0: When you connect your hospital portal, you authenticate directly on your healthcare organization’s SSL-secured portal login page. AskZeni never intercepts, accesses, or stores your portal username or password.
Explicit Scope Limitation: We request only read-only patient access scopes (patient/Observation.read, patient/DiagnosticReport.read) required to extract verified lab biomarkers (e.g. HbA1c, Glucose, Lipid profiles, Complete Blood Counts).
Ephemeral Token Handling: OAuth access tokens are short-lived, encrypted, and discarded immediately following synchronization.
5

Private Vault Email Forwarding & Ingestion

Subscribed members receive cryptographically salted, private vault email addresses (e.g. vault-usr789a-fam-spouse@askzeni.com) to forward lab results from mobile share sheets or medical email receipts.

Inbound emails are processed in real time by our automated ingestion pipeline, immediately parsed for clinical laboratory data, scrubbed of all PII identifiers, indexed into your isolated vault vector partition, and permanently deleted from mail server spools.

6

Household Family Member Profiles & Consent Governance

To support families caring for children or aging parents, Pro Family accounts feature distinct Household Profiles (Self, Spouse, Minor Children, Aging Parents).

  • Sub-Vault Isolation: Medical records, lab results, and AI consultation histories are logically partitioned by profile ID so records for one family member are never commingled with another.
  • Minor Child Protection: Minor child profiles (<18) require explicit legal guardian authorization upon creation. Direct independent registration by minors under 18 is prohibited by our mandatory age gate.
  • Adult Family Member Consent: Adding adult family members certifies that you have obtained their lawful authorization to facilitate record organization and decision-support synthesis on their behalf.
7

Zero-Trace Data Erasure & 1-Click Account Purge

You maintain total dominion over your data. AskZeni provides granular self-service deletion controls and zero-trace data governance:

Delete Individual Lab Records: Instantly erases the document from browser storage and deletes all associated vector embedding chunks from Supabase pgvector.
Delete Family Profile: Permanently removes a household member and cascades full deletion across all their synchronized documents, notes, and visit guides.
1-Click Account Purge: Erases your user account, all household profiles, all vector embeddings, all cached transcripts, and cancels active Paddle subscriptions immediately. No residual data or hidden archives are maintained.
8

Cookies, Local Storage & Contextual Advertising Disclosures

AskZeni minimizes tracking technologies. We use modern localStorage and session state mechanisms on your device to persist your dark/light theme preferences, active tab selections, and rate limit quotas without relying on invasive third-party tracking beacons.

To keep free curiosity inquiries accessible to the public, non-sensitive public search pages may display non-personalized, contextual Google AdSense or health directory links. Under no circumstances are your medical questions, uploaded documents, or lab biomarker results shared with advertising partners or data brokers.

10

Technical & Organizational Security Safeguards

AskZeni maintains rigorous administrative, physical, and technical safeguards to protect all digital interactions:

  • Encryption in Transit: Mandatory TLS 1.3 encryption across all public web and API endpoints with strict HTTP Strict Transport Security (HSTS) headers.
  • Encryption at Rest: AES-256 military-grade database encryption with Supabase Row-Level Security (RLS) policies.
  • Biometric WebAuthn Passkeys: Hardware-backed biometric authentication (Touch ID, Face ID, YubiKey) to eradicate password credential compromise risks.
  • Automated Health & Model Drift Monitoring: Continuous 5-minute synthetic health checks and nightly model drift benchmarks to guarantee reliability.
11

Data Privacy Officer Contact & Inquiries

For any questions regarding this Privacy Policy, client-side de-identification, or to submit a formal data privacy request, please contact our Data Protection Officer:

AskZeni LLC Privacy & Data Governance Office

Address: AskZeni LLC, 522 W Riverside Ave STE N, Spokane, WA 99201-0581

Email: privacy@askzeni.com or contactus@askzeni.com

Direct Web Form: askzeni.com/contact

We respond to all verified consumer privacy inquiries within 30 statutory days.