Privacy Policy

1. Who We Are

OxynX, LLC (“OxynX,” “we,” “us,” or “our”) provides the OxynX mobile application and related services to help users manage health records, medications, reminders, routines, prevention, and care follow-through. This Privacy Policy applies to our app, related services, and support interactions that reference this policy.

2. Data We Access, Collect, and Process

Depending on the features you use, the permissions you grant, and the data you choose to provide, OxynX may access, collect, or process the following categories of data:

• Account and identity data: account email, authentication identifiers, profile information, support communications, and any contact information you provide.
• Health and wellness data: health profile information, nutrition logs, meal plans, weight and body measurements, symptoms, medical history, medications, reminders, menstrual or cycle data, fertility or period-tracking information, preventive-care questionnaires, uploaded health documents, and notes you choose to enter.
• Health platform integration data: data from integrations you authorize, such as Apple Health, Health Connect, or similar health-data sources, only after you grant the required permission and consent.
• Camera, microphone, and file uploads: photos, scans, barcodes, documents, voice input, and other media only when you intentionally use those features.
• Device, app, and security data: device identifiers, app version, operating system, request IDs, notification tokens, error logs, audit events, and limited technical telemetry required for reliability, abuse prevention, fraud prevention, performance monitoring, and security operations.
• AI-related inputs and outputs: when you use AI-powered features or provide consent for them, inputs you submit for those features and the resulting summaries, classifications, or assistive outputs.

3. How We Use Data

We use user data, including health data, only for purposes reasonably related to OxynX’s app and service functionality, user-requested features, legal compliance, and security. These uses may include:

• Creating and managing accounts, signing users in, verifying access, and securing sessions.
• Providing app features such as record organization, cycle tracking, medication reminders, nutrition support, preventive follow-through, summaries, reports, and user-requested uploads or scans.
• Syncing or importing health data from integrations the user explicitly authorizes.
• Operating reminders, notifications, calendar-based workflows, and care-management features.
• Processing consent choices, privacy controls, support requests, and deletion requests.
• Monitoring service quality, fixing bugs, detecting abuse or fraud, enforcing security, and meeting legal or regulatory obligations.

4. AI Features and Future Use of De-Identified Data

Some OxynX features may use AI or machine-learning-assisted workflows. These features are intended to support organization, summarization, pattern recognition, and preventive guidance. AI outputs may be incomplete or inaccurate and are not a substitute for professional medical advice, diagnosis, or treatment.

Where permitted by law and by the user’s choices or consent, OxynX may use de-identified or aggregated data for product quality, safety monitoring, privacy-first model improvement, analytics, benchmarking, and approved research collaborations. We do not sell personal data or directly identifiable health data, and we do not use health data for advertising personalization.

Third-Party AI Providers

Some AI-powered features send the specific information you choose to submit for that feature — such as the text, questions, documents, or content you select to process — to a third-party AI provider that processes it on our behalf to generate the summary, classification, or assistive output you requested. Where these features rely on a third-party model, that provider is OpenAI, L.L.C. (the “AI Provider”).

We disclose this sharing to you within the app, and we ask for your permission before an AI feature sends your information to the AI Provider. AI features are optional — you can decline and continue using OxynX without them. We transmit only the data needed for the feature you request, and we do not send more of your health information than is necessary for that feature.

The AI Provider acts as a service provider under written agreements that require it to safeguard your data, use it only to provide the requested feature to you, and not use your data to train its models. We require any third party with whom we share data to provide the same or an equivalent level of protection as described in this Policy. We do not sell your personal data or health data.

5. How We Share Data

We may share data, including health data, only in the following limited circumstances:

• Service providers and infrastructure vendors: for secure hosting, storage, authentication, notifications, document processing, AI-assisted feature delivery, and technical operations, subject to contractual restrictions and access controls.
• User-directed integrations or actions: when a user chooses to connect a health platform, upload a file, export information, or otherwise direct OxynX to process or transfer data for a requested feature.
• Legal, security, and compliance purposes: when reasonably necessary to comply with law, regulation, valid legal process, protect users, investigate abuse, or defend legal claims.
• Corporate transaction: in the event of a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate confidentiality and notice obligations where required.

OxynX does not sell personal data or health data.

6. Security and HIPAA-Aligned Safeguards

OxynX uses administrative, technical, and organizational safeguards designed to protect personal and sensitive user data, including health data. These measures may include encrypted transmission over HTTPS/TLS, access controls, audit logging, authentication controls, role-based access restrictions, environment separation, and secure cloud-provider controls.

Our systems are designed to support HIPAA-aligned and, where applicable, HIPAA-compliant handling of protected health information when used with the appropriate operational controls and vendor agreements. No website, mobile app, or online system can guarantee absolute security, but we work to reduce risk and protect the confidentiality, integrity, and availability of user data.

7. Data Retention

OxynX retains user data, including health data, for only as long as reasonably necessary to provide the service, maintain the user’s account, support app functionality, meet legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.

• Account data, profile data, health records, uploaded files, reminders, logs, and related user content are generally retained while the account remains active or until the user asks us to delete the account or associated data.
• After a verified deletion request, we aim to delete or de-identify account-linked data from active systems within 30 days, except where a longer retention period is required for law, fraud prevention, security, billing, dispute resolution, research records, or other legitimate compliance purposes.
• Encrypted or protected backup copies may persist for up to 90 days after deletion before they are overwritten in the ordinary backup cycle.
• De-identified or aggregated data may be retained longer for quality, safety, analytics, and approved research or model-improvement purposes because it is no longer reasonably linked to an identifiable user.

8. Data Deletion and Account Deletion

Users may request deletion of their OxynX account and associated data by contacting us at admin@oxynx.com. To protect account security, we may ask the user to verify identity before processing the request.

• Deletion requests should include the account email address and a clear statement that the user is requesting account and data deletion.
• If an in-app account-deletion path is available, users may also use that path.
• Certain limited records may be retained when required by law, for security, fraud prevention, billing, research-record integrity, backup restoration windows, or dispute resolution.

9. User Choices and Permissions

Users may manage permissions, integration access, and certain consent settings through their device settings, within the app where available, or by contacting us. Some features may stop working if required permissions or data access are removed.

10. Children’s Privacy

OxynX is not intended for children under 13 without the involvement of a parent, guardian, or legally authorized representative where required by law. If you believe a child has provided personal data to OxynX without authorization, contact us and we will review the request.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date on this page and may provide additional notice where appropriate.

12. Contact and Privacy Requests

Privacy contact: admin@oxynx.com

Developer / company: OxynX, LLC

For privacy, retention, deletion, or compliance questions, contact us using the email above.