Consumer Health Data Privacy Policy
This page explains how Larkin AI, LLC ("Larkin," "we") handles consumer health data — information that relates to the health of you or your children. It adds to our main Privacy Policy. If the two ever seem to disagree about health data, this page applies.
Even when Larkin uses neutral words like "Appointment," the fact that a family member has an appointment with a health provider on a certain day is health data. We treat it that way.
1. What health data we collect
- Appointment logistics from health-related email: which family member it's for, the date and time, the location (left out if the location itself names a kind of health service), simple steps such as "forms due" or "bring your insurance card," and a general kind of provider from a short fixed list (dentist, orthodontist, pediatrician, eye doctor, pharmacy, occupational therapy (OT), school nurse; everything else is just "appointment").
- Short "please follow up" notes: when an office writes that test results are available or asks you to call, Larkin notes that there is something to follow up on. It does not keep the result.
- Attachment names and types from health-related email (for example, a form's file name), so you can save the file to your Document Vault. We don't keep the file itself. A file you save to the Vault goes to your own Google Drive.
- A scrambled fingerprint of the sender's web address, used only to spot duplicate reminders. It can't be turned back into the address.
- Your family's regular care providers and roughly when you last visited, if Larkin learns them from your calendar or you tell it, so it can remind you about check-ups.
- Check-up reminders: which patient and which kind of check-up, when it last fired, and the date of the last confirmed visit. No email subject line is stored.
We never store diagnoses, test results, medication names, the reason for a visit, or the subject line or text of a health-related email.
2. Why we collect it
Only to provide what you asked Larkin for:
- putting appointments on your calendar and reminding you about them;
- telling you when an office needs something from you (a form, a call, a pickup);
- reminding you when check-ups are due.
We do not use health data for advertising, and we do not sell it. We do not use it to train AI models.
3. Where it comes from
- Your Gmail, which you connected with read-only access.
- Your Google Calendar, which you connected.
- What you tell us in the app or during onboarding.
4. Who processes it for us
These companies process data on our behalf, only to run Larkin:
| Company | What it does for Larkin | What it sees |
|---|---|---|
| Google Cloud / Firebase | Stores Larkin's data; runs our servers; sends notifications | The health data listed above |
| Google Gemini | Reads each email once to find the appointment details | The full email, including health-related email — under Google's paid terms, which do not allow Google to train its models on this data; Google may keep requests for a limited time to detect abuse. |
| Anthropic (Claude) | Writes the wording of notifications, briefings and recaps | Event details (title, date, time, who it's for), family first names, and recent notification history. For health-related email, only Larkin's own template words — never the email's subject, sender, or text. Used under Anthropic's commercial terms, which do not allow Anthropic to train its models on this data. |
| ElevenLabs | Runs the voice conversation during onboarding, if you choose it | Your voice and what you say during that conversation, which could include health details. What ElevenLabs keeps is governed by its own privacy policy. |
| Google Calendar | Holds the calendar entries Larkin creates, in your own account | The neutral entry, marked private |
| Google Drive | Holds files you choose to save to your Document Vault, in your own account | Only files you save |
We do not share health data with anyone else, including advertisers or data brokers.
5. How long we keep it
- Appointment logistics: until you delete your account, or ask us to delete them (privacy@heylarkin.com). Removing an appointment from your Google Calendar marks Larkin's copy as cancelled; it does not delete it.
- Email details: 90 days, then deleted automatically.
- Email waiting to be processed is held for up to 7 days, then up to 7 more days after being sent for processing, then deleted automatically.
6. Your rights
You can:
- See your data: download a copy of your data from inside the app at any time.
- Delete your data: delete your account and everything with it from inside the app, or email privacy@heylarkin.com to delete specific records. Deleting your account removes your health data from our systems. Calendar entries already on your Google Calendar stay there until you remove them, because that calendar is yours.
- Withdraw consent: disconnect Gmail or Google Calendar in the app or in your Google Account permissions. Larkin stops reading new email right away.
- Know who we share it with: the full list is in Section 4 above.
To use these rights, or if you have a question, use the in-app controls or email privacy@heylarkin.com. We will respond within 45 days. If we decline your request, you can appeal by replying to our decision; we will respond to your appeal within 45 days. If we deny your appeal, you may contact the Washington State Attorney General.
We will not treat you differently for using any of these rights.
7. Changes
If we change how we handle health data, we will update this page and tell you in the app before the change takes effect.
8. Contact
Email: privacy@heylarkin.com
Entity: Larkin AI, LLC