Privacy Policy

Last updated: April 5, 2026

1. Information We Collect

Photos: When you use the AI rating tool, you upload face and body photos. These photos are processed in real-time by our AI analysis engine and are not permanently stored on our servers after analysis is complete.

Payment Information: Payment processing is handled by Stripe. We do not store credit card numbers or financial account details on our servers.

Medical Information: If you proceed with a protocol, medical intake information is collected and managed by our telehealth partner, CareValidate, under their own HIPAA-compliant privacy practices.

Usage Data: We collect anonymous usage analytics to improve the Service, including page views, feature usage, and conversion metrics.

2. How We Use Your Information

  • To provide and operate the AI rating tool
  • To process payments and manage subscriptions
  • To connect you with licensed telehealth providers
  • To send transactional communications (order confirmations, subscription updates)
  • To improve the Service through aggregate analytics

3. Photo Data

Your photos are transmitted securely (encrypted in transit via TLS) to our AI analysis engine for scoring. Photos are processed in real-time and are not stored in any database or file system after analysis is complete. We do not use your photos for AI model training, marketing, or any purpose other than generating your rating results.

4. Third-Party Services

We share information with the following third-party services only as necessary to provide the Service:

  • Anthropic (Claude AI): Photo analysis for rating generation
  • Stripe: Payment processing
  • CareValidate: Telehealth services, prescriptions, and fulfillment
  • Analytics providers: Anonymous usage analytics

5. HIPAA Compliance

ASCEND's AI rating tool does not collect protected health information (PHI). When you proceed to a medical protocol, all PHI is collected and managed by CareValidate, which maintains HIPAA compliance and SOC 2 certification for all medical data handling.

6. Data Retention

AI rating results are stored in your browser's session storage only and are not retained on our servers. Payment and subscription data is retained as long as your account is active and as required by applicable law. Medical records are retained by CareValidate per their data retention policies and applicable healthcare regulations.

7. Your Rights

You may request deletion of any personal data we hold about you by contacting support@getascend.co. For medical records held by CareValidate, contact CareValidate directly.

8. Children's Privacy

ASCEND is not intended for use by anyone under the age of 18. We do not knowingly collect information from minors. If we learn that we have collected information from a person under 18, we will delete that information promptly.

9. Contact

For questions about this Privacy Policy, contact us at support@getascend.co.