Privacy Policy

Effective October 20, 2026

1. Who we are

This policy describes how the Altachart app ("Altachart", "we", "us") handles information when you use it to download your health records from your health care providers. Contact: support@altachart.com.

2. Information Altachart accesses

Health records. When you connect a provider and approve access in that provider's patient portal, Altachart downloads the records the provider makes available to patient apps. That can include demographics, visits, clinical notes, problems, allergies, medications, immunizations, lab and other results, vital signs, procedures, reports, care plans, care team members, and related provider and location details.

Access credentials. To keep your access active, Altachart stores the access tokens your provider issues and, where supported, a cryptographic key registered for your connection. Your portal username and password are entered only on your provider's own sign-in page. Altachart never receives them.

What we do not collect. Altachart has no user accounts of its own, no analytics or tracking, and no advertising identifiers. This website sets no cookies and loads no third-party scripts.

3. Where your information is stored

Downloaded records, access tokens and keys are stored on the computer where you run Altachart. Credentials are kept in files readable only by your user account. Altachart does not upload your records to any server operated by us. Records travel from your provider to your computer over encrypted HTTPS connections.

Because the records live on your computer, you are responsible for that computer's security, for example by using a device password, disk encryption and backups you control. If you use other software or services with the downloaded files, those products' own terms and privacy policies apply.

4. How the information is used

Altachart uses your information only to download, update, organize and display your own records for you. We do not use your information for advertising, marketing, profiling, research, or training artificial-intelligence models, and we do not create de-identified data sets from it.

5. Sharing

We do not sell, rent or share your health information with anyone. Altachart has no servers that hold your records, so there is nothing for us to disclose. Any sharing of your downloaded records, for example with a new doctor or a family member, happens only when you choose to do it yourself.

6. Your choices and control

• Stop access: remove Altachart in your provider's patient portal (in its connected or linked apps settings). Access also ends automatically when the period you chose at sign-in expires.
• Delete data: delete the downloaded records and connection files from your computer. Because we hold no copy, deleting them from your computer removes them from Altachart completely.
• Choose what to share: your provider's sign-in screen shows what Altachart requests and lets you decline.

7. Security

Altachart requests read-only access, uses industry-standard OAuth 2.0 authorization (SMART on FHIR, with PKCE), communicates only over HTTPS, and stores credentials with owner-only file permissions. Where your provider supports it, Altachart uses a key that is unique to your connection instead of a shared, long-lived secret. No system is perfectly secure. If we learn of a security problem in Altachart that affects you, we will tell you promptly.

8. Children

Altachart is intended for adults. A parent, guardian or other authorized representative may use it to manage records they are legally permitted to access.

9. Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change materially affects how your information is handled, we will tell you before it takes effect.

10. Contact

Questions about this policy: support@altachart.com. Please do not email medical information.