Privacy notice

Who is responsible

Controller: Yoram Biton. Contact by email: yoram@fluencesignal.com.

Fluence supports your care team. Your treating organization is responsible for your care itself.

Is providing information required

Providing information is voluntary. There is no legal obligation to report, and declining does not affect your entitlement to care. Reporting less may limit how well the system can show your care team a picture over time.

What is collected

Your check-in answers, any free text you type or dictate, an optional weekly self-rating, and — only if you choose to connect it — daily step count and sleep duration and timing.

Technical data needed to run the service: session and device-verification identifiers, and notification subscriptions.

Why it is collected

To show your care team changes over time relative to your own personal baseline, to support preparation for appointments, and to send you reminders.

Who can see it

Your assigned care team.

The Fluence system administrator, whose owner account has technical access to all records in order to operate and support the service.

The service providers listed below, only to operate the service for us.

Service providers and where processing happens

Hosting and storage: Railway, United States.

Text analysis by a language model: OpenAI, United States. Before sending, the system automatically removes direct identifiers it can recognize — names, the activation code, phone numbers, email addresses, ID numbers, links and street addresses. Automatic removal cannot guarantee that free text never reveals who you are. Requests are sent with the provider's request-storage option switched off; this is a request setting, not a guarantee that the provider keeps nothing.

Voice input: if you use the microphone, the recording itself is sent to Google Cloud Speech-to-Text (Google, European Union processing region) to turn it into text. Audio cannot be anonymized — Google receives your voice. Fluence does not store the recording; only the text you choose to send is kept.

Notifications: emails to your care team are sent through Resend (United States); reminders to you are delivered by Expo, Apple, Google or your browser's push service and may include your first name, never report content.

Optional Google Health / Android Health Connect: if you connect it, Fluence reads only daily steps and sleep, never heart rate, location or raw sensor data, and never writes to your account. You can disconnect at any time from the app.

Processing outside Israel: yes — in the United States (hosting, language-model analysis, email) and the European Union (voice transcription).

What Fluence does not do

Fluence does not diagnose, does not decide treatment and does not replace clinical judgement. All clinical decisions are made by your care team.

How long it is kept

For the duration of care plus any further period required by clinical, contractual and legal obligations. Audit, consent and privacy-request records are kept separately as evidence.

Backup copies are kept for a limited period and are not edited after a deletion. If a backup is ever restored, records deleted after that backup was made are deleted again before the service resumes.

Your rights

You can ask to see your information, correct it, receive a copy, have it deleted, or withdraw your consent — from the Privacy screen in the app or by email. Each request is recorded and handled by an authorized person.

Withdrawing consent immediately stops new language-model and voice processing of your information; to keep using the app you will be asked to accept again.

Important limit on deletion

Deletion may be limited by clinical, legal, contractual or audit-retention obligations. We do not promise immediate deletion from every copy.

In an emergency

If you are in immediate danger, seek help immediately (in Israel: 101 for ambulance, 100 for police). Do not rely on this application.