Privacy Policy

At Gabriel Care LLC ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use Gabriel Care, Ask Gabriel, the Gabriel Intelligence platform, and our related websites, applications, and services.

Last updated November 5, 2026

1. Information We Collect

Account Information

When you create a Gabriel Care account, we collect:

  • Name
  • Email address
  • Date of birth
  • State of residence
  • Phone number

Health Information

To provide personalized recommendations and process claims, we collect:

  • Health interests and wellness goals
  • Current insurance status
  • Experience with integrative and functional medicine
  • Medical claims data (provider, service type, amount, receipts)
  • Treatment protocols and outcomes (if voluntarily shared)

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card numbers. We receive from Stripe:

  • Last four digits of your payment card
  • Card type and expiration date
  • Billing address
  • Transaction history

Wearable & Biometric Data

If you connect a wearable device via Terra API, we collect:

  • Daily step count
  • Heart rate and heart rate variability (HRV)
  • Sleep duration and quality metrics
  • Activity and exercise data
  • Other metrics available through your connected device

If you connect Apple Health in the Gabriel iPhone app, we collect the Apple Health data described in Section 3B.

Genetic Information

If you import a raw DNA file or share genetic results with Gabriel, we collect the genetic information described in Section 3C.

Connected Apps

If you connect Gabriel to ChatGPT, we receive the requests ChatGPT sends for you, such as your questions and the changes you ask for. We keep a record of the connection and your choices. Section 3D explains this. If you connect Gabriel to Claude or another AI app, the same applies, and if you turn on agent orders, Gabriel also receives the orders the app asks for. Section 3F explains this.

If you connect Gmail, Gabriel reads your email, read-only, for health purchase receipts and, if you agree, mail from your health insurance, and keeps only the details described in Section 3E.

Usage Data

We automatically collect information about how you use Gabriel Care:

  • Pages visited and features used
  • Time spent on the platform
  • Device type, operating system, and browser
  • IP address and general location
  • Interactions with Gabriel Intelligence (queries, chat history)

On our public website we also record visits as described in “Product Analytics and Session Recordings” in Section 3.

Communications

We collect communications you send to us, including:

  • Support messages and inquiries
  • SMS messages (if you opt in to text notifications)
  • Email correspondence
  • Feedback and survey responses

2. How We Use Your Information

We use the information we collect to:

  • Process membership and claims: Verify eligibility, process payments, and reimburse approved medical expenses
  • Provide AI health scoring and recommendations: Gabriel Intelligence uses your health data, wearable metrics, and claims history to generate personalized health scores and treatment recommendations
  • Correlate treatments and outcomes: Analyze anonymized data to identify patterns and improve our wellness benefit categories
  • Communicate with you: Send account updates, claim status notifications, educational content, and important service announcements via email, SMS, and in-app messages
  • Improve our services: Analyze usage patterns to enhance Gabriel Intelligence, optimize the user experience, and develop new features
  • Prevent fraud and abuse: Monitor claims for fraudulent activity and ensure fair use of community resources
  • Comply with legal obligations: Respond to legal requests, enforce our Terms of Service, and protect our rights and the rights of our members

3. How We Share Your Information

Service Providers

We share your information with service providers who help us run Gabriel, only as needed for the service each one provides:

  • Supabase: Database, file storage, and sign-in
  • Vercel: Web hosting and application infrastructure
  • Railway: Hosting for Gabriel's clinical reference tools, phone agent, and the services that connect Gabriel to ChatGPT, Claude and other AI apps
  • Pinecone: Search across Gabriel's reference library
  • Stripe and our banking partners: Payments, bank accounts you choose to link, and reimbursement transfers
  • LINQ and Twilio: Text messages and phone calls
  • Email providers: Account and service emails
  • Terra API: Wearable device data, if you connect a device
  • PostHog: Product analytics and session recordings on our public website
  • Team tools: The messaging and productivity tools our team uses to handle your requests

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

The AI model providers Gabriel works with are described in Section 3A.

Care and Coverage You Request

When you ask Gabriel to request a prescription, order a lab test, or book a visit, we share the information needed to provide that care with the licensed clinicians, pharmacies, dispensaries, and laboratories involved. They keep their own records under their own privacy practices and the laws that apply to them. If you ask for help finding or enrolling in health insurance, we share what is needed with licensed enrollment partners and insurers.

Apps You Connect

If you connect Gabriel to another app, such as ChatGPT, we share the information you choose with that app when you ask it to use Gabriel. The app's provider handles it under its own terms and privacy policy. Section 3D explains Gabriel in ChatGPT.

We Never Sell Your Data

Your personal information is never sold to third parties. We never share it with data brokers. Your health information, what you ask Gabriel, and what you buy are never shared with advertisers. The advertising measurement we do is described in “Advertising on Our Website” below.

Advertising on Our Website

We advertise Gabriel on Facebook and Instagram. To learn which ads work, our public marketing pages use the Meta pixel, a standard advertising tool, and our server sends Meta the same events through Meta’s Conversions API, so an ad blocker or a closed tab doesn’t lose them. When you visit one of those pages, Meta gets the page address (without anything after the “?”), basic browser and device details, your IP address, and Meta’s cookies. Meta may link this to your Meta account under its own privacy policy.

  • The pixel runs only on our public marketing pages. These include our pages about topics such as chronic conditions, longevity, women’s health and men’s health, so Meta can learn that you visited one of those pages, never anything you tell Gabriel. It never runs on checkout pages, our care catalogue, the Gabriel app, text messages, or anything after you sign in. On the Gabriel Shop (askgabriel.com/shop), where the bag and checkout are part of the shop’s own page, it counts your visit and your taps to join, ask Gabriel or open the app, and nothing else: never the products you look at, your bag, your checkout or your order page.
  • When someone who came through our website joins the waitlist, creates a Gabriel account, starts their first conversation with Gabriel, or pays for a Gabriel Shop order, our server tells Meta that it happened, with its time, the browser and ad click details above, and a scrambled (hashed) copy of the random visitor ID our website sets. It never says what was asked, what was ordered or what it cost, or anything about health.
  • We never send Meta your name, email, phone number, health information, what you ask Gabriel, or what you buy.
  • Our advertising partners see only combined campaign results, never information about you.
  • To opt out, use “Your privacy choices” at the bottom of any page, or turn on Global Privacy Control in your browser. We then won’t load the pixel, and our server sends Meta nothing about your visits.

Product Analytics and Session Recordings

To see how people use our public website and make it better, we record visits in two ways:

  • Our own records: Gabriel’s database keeps the pages you view, the buttons and links you tap, how far you scroll, how long a page stays open, and the campaign that brought you (its utm tags, Meta’s ad click ID, and the site that linked to you). Two first-party cookies tie a visit together: a random visitor ID kept for a year, and a visit ID that ends after 30 minutes without activity. If you then join the waitlist, create an account, start a conversation, or pay for a Gabriel Shop order, we note that too, with your account’s internal ID, so we can tell which pages and ads lead people to Gabriel.
  • PostHog: our analytics provider records taps, scrolling, and session recordings (a replay of how the page looked and moved and what was tapped) to show us heatmaps and where people get stuck. Everything you type into any field is hidden in recordings, and so are chats, lab readings, and account details. Recordings leave out network requests and anything after the “?” in page addresses, never run on links that carry a private code (like status links and Gabriel Files), and PostHog never runs in an account area or on the Gabriel Shop.
  • Neither ever stores what you ask Gabriel, lab values, health information, or your name, email, or phone number.
  • To turn this off, use “Your privacy choices” at the bottom of any page and switch off “Product analytics and session recordings.” We then load no PostHog, set no visitor ID, and count only that a page was viewed.

Mobile Information and SMS Consent

If you provide a mobile number and opt in to SMS, we use your number to send account verification codes, benefits and care navigation updates, reminders, and service messages. Message frequency varies. Message and data rates may apply. You can reply STOP to opt out or HELP for help at any time.

We do not sell or share mobile numbers or SMS consent with third parties or affiliates for their marketing or promotional purposes. Mobile information is shared only with service providers, such as our text messaging providers, as needed to deliver Gabriel Care messages and operate the service.

Practitioner Directory

Gabriel uses Google Maps Platform to retrieve current public business information, ratings, review counts, and photos when you search the practitioner directory. Google content is fetched when needed and is subject to the Google Maps Platform Terms and the Google Privacy Policy.

Legal and Regulatory Disclosures

We may disclose your information if required by law or in response to:

  • Subpoenas, court orders, or legal process
  • Requests from government agencies or regulators
  • Situations involving potential threats to safety or security

Aggregated and Anonymized Data

We may use and share aggregated, anonymized data that cannot identify you personally for research, analytics, and to improve health outcomes for our community.

3A. AI Model Providers

Gabriel is a reasoning and orchestration layer built on AI models from third-party providers.

In the Gabriel iPhone app, the AI providers that receive your information are Anthropic (Claude models) and OpenAI (GPT models), which write Gabriel's answers, and SubQ and TypeSafe, whose models help route and check those answers so Gabriel responds faster. When you chat, share a photo or file, or use voice, we send them your message, the recent conversation, any photos or files you share, and the information from your Gabriel Record that the answer needs, such as your labs, medications, Apple Health data, and genetic findings. They use it only to produce Gabriel's response.

On the web and by text, Gabriel uses the same providers and may also use other providers or privately hosted models for specific tasks. The same kinds of information are used when Gabriel reads a document you submit, transcribes a recording, or makes a phone call about your care or a claim. When you use Gabriel in ChatGPT, Section 3D explains what we send.

Providers process this information for us under their terms for business customers, which require them to protect it with the same or equal protection as this policy. We do not sell it or share it for advertising. Before the Gabriel iPhone app first sends your information to these providers, it tells you what it sends and to whom and asks your permission. If you choose Not now, chat, voice and uploads stay off until you allow it, and you can review your choice at any time in Settings > Privacy. In ChatGPT, you choose what Gabriel may use when you connect.

3B. Apple Health

If you connect Apple Health in the Gabriel iPhone app, the app asks for your permission and then reads, but never writes, the following Apple Health data: steps, resting heart rate, heart rate variability, sleep, and heartbeat series recorded by Apple Watch, and on supported iOS versions, breathing disturbances during sleep and sleep apnea and hypertension notifications. The app turns heartbeat series into a daily coherence score on your iPhone, then sends daily summaries to your Gabriel account so your Record is the same on every device.

We use Apple Health data only to provide Gabriel to you: to show your trends, to inform Gabriel's answers and suggestions, and, for Gabriel Care members, to calculate the wearable engagement bonus. We share it only to provide the service to you, including with the AI model providers in Section 3A with your permission. We do not use Apple Health data for advertising, marketing, research, or other data mining, and we never sell it. We do not store Apple Health data in iCloud.

You can turn off Gabriel's access at any time in your iPhone's Settings (Privacy & Security, then Health) or in the Health app. Turning it off stops new reads. Summaries already in your Record stay until you delete your account or ask us to delete them at privacy@askgabriel.com.

3C. Genetic Information

Importing genetic data is optional. If you import a raw DNA file (a 23andMe, AncestryDNA, or VCF file) in the Gabriel app, the app reads the file on your device, and the raw file is not uploaded. The app sends the genetic markers it recognizes to our servers, which keep a limited set of findings and discard the rest. For each finding we save the variant (rsID), the gene, your genotype, what it means, a suggested next step, and the strength of the evidence, along with the type of file, the number of markers read, and the date you imported it. If you share genetic results with Gabriel by text message, Gabriel may save them with your phone number.

We use your genetic information to personalize Gabriel's answers. Your findings are part of the Record information sent to the AI model providers described in Section 3A when you message Gabriel, and when a question relates to them, we look them up in Gabriel's clinical reference tools. Those lookups send the variant and your genotype, without your name or account details. Findings linked to disease risk are hidden until you choose to see them in the app, and Gabriel uses them in answers only after you make that choice.

If you turn on DNA insights for ChatGPT, ChatGPT can receive your DNA summaries. Section 3D explains this.

We do not sell your genetic information. We do not share it with your employer or a team sponsor, with insurers, or with data brokers. We do not use it for advertising, and we do not use it to decide your membership eligibility, price, or benefits.

We keep your genetic findings until you remove them or delete your account. You can remove them at any time in the app. The app also keeps a copy of your results on your device, which is removed when you delete the app or clear its data. Genetic results you shared by text, and past conversations or notes that mention your results, are not removed that way; email privacy@askgabriel.com and we will delete them.

3D. Gabriel in ChatGPT

Gabriel in ChatGPT is an app inside ChatGPT that connects to your Gabriel account. Gabriel Care LLC provides it. ChatGPT is a service of OpenAI. Gabriel in ChatGPT is for people in the United States who are 18 or older. This section explains what happens to your information when you connect Gabriel to ChatGPT. The rest of this policy also applies.

Connecting Your Account

You connect on a Gabriel page at askgabriel.com. You sign in with Google, with Apple, or with your Gabriel email and password. If your account uses an authenticator app, you also enter a code. If you do not have a Gabriel account yet, signing in with Google or Apple may create one. Gabriel does not use your ChatGPT account or its email address to find, choose or create a Gabriel account.

When you connect, you choose what Gabriel shares with ChatGPT. Gabriel saves your choices, the version of the wording you agreed to, and the time. ChatGPT gets a private ID for your Gabriel account. The ID does not include your name, email address or phone number.

What You Can Share

Each item has its own switch. "Your Gabriel account" is always on. The others start as shown.

  • Your Gabriel account (always on): the private ID.
  • Ask Gabriel (starts on): the questions you ask Gabriel in ChatGPT, and Gabriel's answers.
  • Your routine (starts on): your supplements and the medications you track, with doses and schedules, your dose check-ins, and your saved plans. When you ask, ChatGPT can log a dose, or add, pause, change or remove an item. You can undo a change.
  • Your health (starts on): the lab reports and biomarkers you added to Gabriel yourself, your Health Map, wearable data, sleep and energy, symptom, journal and cycle logs, your health profile, and My year and brief.
  • Your care (starts off): the doctors, practitioners and services you save, your visit and booking history and calendar, follow-up reminders for visits, refills and lab rechecks, and the treatments you log.
  • Your membership and account (starts on): your Gabriel plan, its status and benefits, your Gabriel Max member prices, the gear quotes you ask for, and your display name, notification settings and app preferences. See Membership, Prices and Quotes below.
  • Your DNA insights (starts off): summaries of the DNA findings saved in Gabriel. See DNA Insights below.

When a switch is on, you can also make changes on the Gabriel screens inside ChatGPT, such as adding a log or saving a provider. Gabriel saves those changes to your Gabriel account.

Membership, Prices and Quotes

When Your membership and account is on, the Gabriel app inside ChatGPT can show:

  • Your plan: its name and status, when you became a member, and your current benefit period.
  • Your benefits: which benefits your plan includes, your wellness balance and limits, and your wearable bonus total.
  • Your loyalty progress: how many months in a row your membership has been paid, your loyalty status, whether your membership price is locked, and the rewards you have unlocked or can unlock next.
  • Member prices: if you are a Gabriel Max member, your member prices for gear, supplements and lab tests.
  • Gear quotes: for a gear item you ask about, the item, your price, tax, shipping and total, and when the quote expires. Gabriel Care prices it for the shipping address saved in your Gabriel account and works out the tax with Stripe. ChatGPT does not get your address. Gabriel removes it before the quote leaves Gabriel. Asking for a quote does not place an order.

This information is for the Gabriel app screens. Gabriel's answers in ChatGPT do not use it. Your insurance, reimbursement records, payment details and household members are never shared.

Joining, Buying and Booking

Gabriel in ChatGPT does not take payment or complete purchases. Joining Gabriel Max opens askgabriel.com/plus in your browser. Buying a product, or booking a provider or service, opens that item in the Gabriel app in your browser, where you finish. Uploading a document and connecting a wearable also open Gabriel in your browser. ChatGPT never completes a payment, an order, a booking or an enrollment. Prescriptions are never offered in ChatGPT.

Features Gabriel Can Turn Off

Gabriel can turn some features of this app off or limit them at any time, such as membership details, member prices, gear quotes and booking links. When a feature is off, the app does not show or share that information. Prescriptions and lab results from Gabriel Care are always off in this app.

Changing Your Choices

You can turn any switch on or off, or disconnect, on the "Manage what Gabriel shares" page at askgabriel.com/connect/chatgpt/settings. You can also open that page from Settings in the Gabriel app inside ChatGPT. A change applies to ChatGPT's next request. You do not need to reconnect. Turning a switch off stops new requests for that information. It does not remove what ChatGPT already received.

What ChatGPT and OpenAI Receive

When you ask ChatGPT to use Gabriel, ChatGPT sends Gabriel a request and Gabriel sends back a result. The result appears in your conversation, and ChatGPT can use it in its replies. A result can be your routine, a summary of your health or care, your DNA summaries, or Gabriel's answer to your question. Gabriel sends your personal information only from switches that are on.

The Gabriel app inside ChatGPT also loads information for the screens you open, such as your lab history, your logs, your plan or a gear quote. This information is for the app screen. It is not given to ChatGPT to write replies, but it passes through OpenAI's systems. Before it leaves Gabriel, Gabriel removes your email address, phone number, shipping address, sign-in and payment account IDs, file and share links, and message and conversation IDs.

OpenAI handles what ChatGPT receives under OpenAI's own terms and privacy policy and your ChatGPT settings, including how long it is kept. Gabriel cannot change or delete what ChatGPT already received. To manage it, use your ChatGPT settings.

Gabriel does not use your ChatGPT account details, your location or your ChatGPT chat history. Gabriel uses only what each request needs, such as your question or the change you asked for. ChatGPT decides what goes into a request, so a request can include words from your conversation.

How Gabriel Answers Your Questions

When Ask Gabriel is on, ChatGPT sends your question to Gabriel. Gabriel uses third-party AI providers to write the answer, as described in Section 3A.

To personalize an answer, Gabriel adds information from Your routine, Your health and Your DNA insights, but only from switches that are on. If they are all off, Gabriel answers in general terms. Gabriel's answers in ChatGPT never use your care, membership or account information, even when those switches are on. Gabriel never adds your text messages or your Gabriel chat history.

To find sources, Gabriel may search its own clinical reference library with search words, such as a supplement name. These searches do not include your name or account details.

Gabriel's answer goes back to ChatGPT with its sources. An answer that uses your information can repeat it, such as a lab value. Gabriel does not add these questions or answers to your Gabriel chat history.

What Gabriel Keeps

Gabriel keeps a record of each ChatGPT connection in a separate, encrypted database. The record links the connection to your Gabriel account. It holds the private ID, which switches are on, the version of the wording you agreed to, when you connected and last made a change, and when the connection ends. Gabriel also keeps the session and token records that keep the connection secure. These records do not include your health information, email address or password. Gabriel keeps them to show the choices you made and to keep the service secure.

Each access ChatGPT gets expires after 5 minutes. ChatGPT renews it in the background while you stay connected. A connection lasts until you disconnect it, and never more than one year. After that, you can connect again.

When you ask Gabriel a question, Gabriel keeps a short usage record so it can limit how many answers each account gets. The record holds a coded reference to your account, the time and counts. It does not hold your question or the answer. Gabriel deletes usage records once they are more than 24 hours old. It checks each time it starts a new answer.

Changes you make through ChatGPT are saved to your Gabriel account, like changes in the app. They are kept and deleted as described in Section 7.

Our services keep technical logs, such as the route used and error codes. The logs are designed to leave out your health information. Our hosting providers keep them for a limited time.

Disconnecting

  • In Gabriel: open askgabriel.com/connect/chatgpt/settings and choose Disconnect. ChatGPT loses access right away.
  • In ChatGPT: you can also disconnect Gabriel in ChatGPT's settings. To make sure the connection also ends in Gabriel, disconnect it in Gabriel's settings too.
  • Signing out of Gabriel in a browser does not disconnect ChatGPT.
  • If you delete your Gabriel account, or it is suspended, the connection stops working.

Disconnecting does not delete what ChatGPT already received. OpenAI handles that under its own policies.

DNA Insights

DNA insights are off unless you turn them on, when you connect or later in settings. When they are on, ChatGPT can receive summaries of the DNA findings saved in Gabriel: the gene, the topic, what the finding may mean, a suggested next step, the strength of the evidence, and the file type and date of your import. Gabriel never shares your raw DNA file, variant IDs or genotypes with ChatGPT, and never shares APOE results. These summaries are still genetic information. When DNA insights are on, OpenAI can receive them through ChatGPT, and Gabriel's AI providers can receive them when Gabriel answers your questions. You can import or remove DNA only in the Gabriel app.

What This App Never Shares

Gabriel in ChatGPT never shares notes from your Gabriel Care team, Gabriel Care orders, lab results from Gabriel Care or a clinician, lab test requests, prescription requests, visit recordings, transcripts and visit notes, files you uploaded, share links, insurance information, payment details, reimbursement records or household members. Payment details, government IDs and insurance member numbers are never collected in ChatGPT.

No Ads, No Sale

Gabriel does not run advertising or analytics tools in the Gabriel app inside ChatGPT or on the connect and settings pages. Gabriel never sells what you share and never uses it for advertising.

Why Gabriel Uses This Information

Gabriel uses what you share with ChatGPT only to answer your questions, to show or update your information in ChatGPT when you ask, to keep your connection secure, and to limit how many answers each account gets.

Where These Services Run

Gabriel's ChatGPT connection services run on Railway, and the connection records are stored there. The connect and settings pages run on Gabriel's website. Your Gabriel Record stays in Gabriel's existing systems, described in Section 3.

Questions

Email privacy@askgabriel.com. To change what Gabriel shares, go to askgabriel.com/connect/chatgpt/settings.

3E. Gmail and Email Receipts

Connecting Gmail is optional. If you connect it in the Gabriel app (Settings, then Connections), Gabriel reads your Gmail to find your health purchases and, if you agree, mail from your health insurance, so it can show what you spend on your health, help with your plan and claims, and keep your Gabriel Record up to date. This section explains what Gabriel reads, what it keeps, and the limits on how it is used. The rest of this policy also applies.

What Gabriel Reads

You connect with Google, and Google asks you to let Gabriel read your email. Gabriel asks only for read-only access (Google's gmail.readonly permission). It cannot send, delete, move, label or change your email.

  • A narrow search: Gabriel searches the last 12 months of your mailbox, and new mail after that, for likely receipts and health emails: purchases and orders, lab tests, appointments, and mail from health stores, labs, clinics, gyms and telehealth services. It skips spam and trash.
  • Headers first: for each match, Gabriel first reads only the sender, subject and date, and Google's check that the sender is genuine. It opens a message only when it looks like a receipt from a store Gabriel knows, or a store whose address Google verified. Every other message is never opened.
  • Insurance mail: only if you agree to the version of the Gmail consent that covers insurance, Gabriel also searches for mail from health insurance companies, brokers and the Health Insurance Marketplace about your plan, claims, denials and notices, and opens it only from senders Google verified.
  • Gabriel never follows links in your email and never opens attachments, except a receipt that was forwarded as an attached email.

What Gabriel Keeps

Gabriel never stores your emails. It holds an email's text in memory only while it reads it.

  • From a receipt: only its health purchases: the store, the date, the amount, the category (such as supplements, lab tests, a gym or a clinic visit), and the names of the health items. Everything else on the order is dropped. Receipts with nothing health-related on them, and business invoices, keep nothing.
  • From insurance mail: only the details of your plan, a claim or a notice, such as the plan's name, a claim's provider, date, amounts and status, a denial's reason, a deadline, and the last 4 digits of your member ID. Gabriel removes full member IDs, Social Security numbers, group and Rx numbers, birth dates, diagnosis codes and patients' names before it reads the rest, and never keeps them.
  • Findings for you to confirm: from these, Gabriel suggests findings, like a supplement you take or a gym you go to, for you to confirm or delete.
  • The connection: Google's access token, encrypted, a scrambled (hashed) copy of your Gmail address instead of the address itself, your consent, and where Gabriel's last read stopped. While a read is underway, Gabriel keeps the IDs of the messages it has not reached yet, for at most 7 days.

Our logs record counts only, never an email address, a subject, a sender or the text of an email.

How Gabriel Uses It

Gabriel uses information from Gmail only to provide and improve the Connections features you see in Gabriel:

  • to show your health purchases and the findings for you to confirm;
  • to add what you confirm to your Gabriel Record, such as your routine, the places you train and your providers, so Gabriel's answers in the app, on the web and by text can take it into account;
  • to show your savings estimate: what a Gabriel plan would have saved you on what you already bought;
  • to save the insurance details you confirm to your insurance in Gabriel, where Gabriel's care team can see them to help you with your plan or a claim.

AI Model Providers

When Gabriel's own rules cannot read a receipt, Gabriel may send it to an AI model to pick out the health items. Before it is sent, Gabriel removes greetings, shipping and billing addresses, links, email addresses, phone numbers, card digits and long numbers, and replaces your name, email, phone, street, ZIP code and birth date wherever they still appear. The model sees the store by its web domain only. Today that model is Anthropic's Claude, which processes the text for us under business terms that do not allow Anthropic to use it to train its models. Insurance mail is never sent to an AI model. Findings you confirm become part of your Record, which is shared with the AI providers in Section 3A when you message Gabriel.

Gabriel in ChatGPT

Gabriel in ChatGPT (Section 3D) never receives anything that came from your email. That includes your emails, your Gmail connection, your health purchases, the findings Gabriel suggests, your savings estimate and your insurance details, and also the supplements and medications added to your routine from a receipt: those routine items, and their refill reminders, are left out of everything ChatGPT can see or change, even when the "Your routine" switch is on.

Limited Use of Google Data

Gabriel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, for information Gabriel receives from Gmail:

  • Features you use: we use it only to provide or improve the user-facing features described in this section.
  • No transfers: we do not transfer it to anyone, except as needed to provide or improve those features (such as the AI model provider above, and the service providers in Section 3 that host and store it for us), to comply with applicable law, to protect against security problems or abuse, or as part of a merger, acquisition or sale of assets, after telling you.
  • No human reading: no one at Gabriel reads your email or what Gabriel kept from it, unless you agree for specific items (such as the insurance details you confirm, which Gabriel's care team can see), it is needed for security purposes such as investigating abuse, it is needed to comply with applicable law, or the data has been aggregated and anonymized for our internal operations.
  • No ads, no sale: we never use it to serve ads, including retargeting, personalized or interest-based ads, and never use it to decide credit or lending. We never sell it.
  • No model training: we never use it to develop, improve or train generalized AI or machine-learning models.

Pausing, Disconnecting and Deleting

  • Pause: turn Gmail off in Settings, then Connections. Gabriel stops reading. What you already confirmed stays.
  • Disconnect and delete: in Settings, then Connections. Gabriel revokes its access at Google, deletes its encrypted token, and deletes the purchases and the unconfirmed findings it found in your email. You can also choose to delete the findings you confirmed and what they added to your dashboards. Items already added to your routine stay until you remove them from your routine.
  • At Google: you can also remove Gabriel's access in your Google Account's security settings, under third-party apps and services. Gabriel then stops reading, and what it kept stays until you disconnect and delete it in Gabriel or delete your account.
  • Deleting your account revokes Gabriel's access at Google and deletes what Gabriel kept from your email. Insurance details you confirmed and saved to Gabriel Care are kept with Gabriel Care's records as described in Section 7.

Questions go to privacy@askgabriel.com.

3F. Gabriel in Claude and Other AI Apps

You can also connect Gabriel to other AI apps that support connectors, such as Claude, a service of Anthropic, and Grok, a service of xAI, as well as AI agents you run yourself. Gabriel Care LLC provides this connection at agents.askgabriel.com. It works like Gabriel in ChatGPT, so Section 3D also applies here, with "the app" in place of ChatGPT, except where this section says otherwise. The rest of this policy also applies.

Connecting and Sharing

You add Gabriel in the AI app. Then, on a Gabriel page at askgabriel.com/connect/agents, you sign in and choose what Gabriel shares, using the same switches described in Section 3D. Gabriel saves the name the app gives itself, so you can tell your connections apart. Gabriel does not use your account with the AI app to find, choose or create a Gabriel account.

When Your care is on, these apps can also see the status of your Gabriel Care requests and agent orders.

What the App and Its Company Receive

Gabriel's results appear in your conversation, and the app can use them in its replies. Where the app supports it, Gabriel can also show its own screens in the conversation, such as an order card. The company that runs the app receives this information and handles it under its own terms, its privacy policy and your settings in that app. Gabriel cannot change or delete what an app has already received.

Agent Orders

Agent orders let a connected app order for you. They stay off until you turn them on in the Gabriel app, under Settings and then Agent orders. There you choose what an app may order, and you set a limit for each order and for each month. When agent orders are on:

  • Options and quotes: the app can ask Gabriel for supplement options and price quotes. A quote includes the products and their prices, shipping, tax and the total, what the items list for, the shipping address saved in your Gabriel account, and the brand and last four digits of your saved card. Asking for options or a quote does not place an order.
  • Supplement orders: an order is placed when you approve it, either by tapping Approve and ship on Gabriel's order card or, in an app that cannot show the card, by telling the app to place it. Gabriel charges the card saved in your Gabriel account and ships to the address saved there. The app never receives your full card number and cannot change where an order ships. Orders must fit within your limits. Gabriel texts you about every order, and you can cancel a supplement order within 15 minutes.
  • Prescription requests: the app can start a prescription request. You finish the intake and identity check in Gabriel, and a licensed clinician reviews every request and decides.

Gabriel keeps a record of each agent order, with its type, status, amount, order reference, the name of the app and the time. Gabriel uses this record to apply your limits, show you your orders and prevent misuse. These records are kept as described in Section 7.

Changing Your Choices and Disconnecting

You can turn switches on or off, or disconnect an app, at askgabriel.com/connect/agents/settings. You can turn agent orders off or change your limits at any time in the Gabriel app. Disconnecting in the AI app may not end the connection in Gabriel, so disconnect in Gabriel's settings too. Disconnecting does not delete what an app has already received.

Where These Services Run

These connection services run on Railway, separately from Gabriel in ChatGPT, and the connection records are stored there. The connect and settings pages run on Gabriel's website.

Questions

Email privacy@askgabriel.com.

4. Health Information and HIPAA

Gabriel is a consumer health service. When you chat with Gabriel, upload your own records, connect a wearable, or import genetic data, Gabriel is not acting as your healthcare provider or health plan, and the Health Insurance Portability and Accountability Act (HIPAA) generally does not apply to that information. We protect it under this Privacy Policy, using the safeguards in Section 6, and we never sell it.

When you request care through Gabriel, the licensed clinicians, pharmacies, and laboratories who provide it may be covered by HIPAA for the records they keep. If Gabriel handles your information on behalf of a provider that is covered by HIPAA, we handle it as our agreement with that provider and the law require.

Our Health Data & Privacy page explains this in more detail.

5. Your Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:

  • Right to Know: You can request details about the personal information we collect, use, and share
  • Right to Delete: You can request that we delete your personal information (subject to legal exceptions)
  • Right to Opt-Out of Sale or Sharing: We do not sell personal information. Some state laws treat advertising pixels as “sharing,” so you can opt out anytime with “Your privacy choices” at the bottom of any page or with Global Privacy Control.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@askgabriel.com.

6. Data Security

We use these safeguards to protect your information:

  • Encryption: Your information is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256), including our database, file storage, and backups. Especially sensitive values, such as bank connection tokens, are also encrypted separately inside our systems.
  • Record separation: Our systems enforce access rules that keep each member's records separate, and files you upload are kept in private storage.
  • Limited access: Only team members who need your information to help you can access it.
  • Regular backups: Automated daily backups
  • Security reviews: We review our code and systems for security issues and fix what we find.
  • Incident response: If a breach affects your information, we will notify you and the authorities as the law requires.

While we take every precaution to protect your data, no system is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information to the best of our ability.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After you cancel your membership, we retain your data for:

  • Seven (7) years: Financial and claims records (required for tax and legal compliance)
  • Anonymized permanently: Aggregated health insights used for research

You may request deletion of your account at any time by contacting privacy@askgabriel.com. We will delete your data within 30 days, except where retention is required by law. Section 3D explains what Gabriel keeps about a ChatGPT connection.

Deleting Your Account

You can delete your account in the Gabriel app (Settings, then Delete account) or by emailing privacy@askgabriel.com. Deleting your account in the app removes your sign-in and your Gabriel Record right away, including your chats, health profile, routine, lab results, wearable and Apple Health data, and the genetic findings you imported. Files you uploaded or sent by text, such as chat attachments and forms you filled or signed, are deleted within 30 days, except the Gabriel Care records described below. Deleting your account also revokes Gabriel's access to your Gmail at Google and deletes what Gabriel kept from your email, and stops any ChatGPT connection. It does not delete what ChatGPT already received. To manage that, use your ChatGPT settings.

Deleting your account does not cancel a Gabriel Care membership or change its billing, so cancel your membership separately. Records Gabriel Care keeps for your membership, claims, and reimbursements, including receipts and insurance documents you submitted for them, are kept with the financial and claims records for the seven years described above, then deleted. Text messages you exchanged with Gabriel are stored with your phone number and are not removed when you delete your account in the app; email privacy@askgabriel.com and we will delete them within 30 days, except where retention is required by law.

8. Children's Privacy

Gabriel Care is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

9. International Users

Gabriel Care is designed for US residents only. If you access Gabriel Care from outside the United States, your information may be transferred to and processed in the US. By using our services, you consent to the transfer and processing of your information in the United States.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

  • Email notification to your registered email address
  • In-app notification when you next log in
  • Posting the updated policy on this page with a new "Last updated" date

Changes will take effect 30 days after notification. Your continued use of Gabriel Care after the effective date constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Gabriel Care LLC
Email: privacy@askgabriel.com
Address: 5725 S Valley View Blvd Ste 5, Las Vegas, NV 89118

For privacy-related requests (data access, deletion, etc.), please use privacy@askgabriel.com for fastest response.

Legal

Every Gabriel policy in one place.

All legal pages

Questions about any of these? Email gabriel@askgabriel.com.