DELIGHTFUL HEALTH
Privacy Policy
Effective September 23, 2026
Terms & Conditions · legal@delightfulhealth.com
Who we are
Delightful AI, Inc., doing business as Delightful Health ("Delightful," "we," or "us"), operates this website. This Privacy Policy explains how we handle information collected through our eligibility, interest, waitlist, provider, and organization inquiry forms. For privacy questions or requests, contact legal@delightfulhealth.com.
Your first step is an expression of interest
We use your responses to identify potential opportunities and follow up with you. It is not enrollment in research, not permission to request medical records, and not permission for unrestricted research or commercial use. Any later record collection or research participation requires a separate explanation and the appropriate authorization or consent.
Information we collect
You provide information directly when you complete a form or contact us. Participant information can include your name, email, medical conditions or your choice not to disclose them, health background, diagnostic journey, recent hospital stays or surgery, prescription counts, available record types, and whether you can access records. We also collect your selected opportunity or waitlist preference and any partner or referral code. Your answers may reveal health information, and the potential matches generated from them may also be health information.
Professional inquiries can include your name, email, organization, role, interests, and message. We keep submission identifiers, submission and update timestamps, and records of the permissions you provide. Our hosting and service providers may process technical information, such as IP addresses, browser information, and request logs, to operate and protect the site.
The initial forms do not retrieve medical records or connect to your patient portal. Please do not provide portal passwords, Social Security numbers, medical record files, or sensitive health details in professional inquiry messages or by email.
When your responses are saved
As you answer questions, a draft can be stored in your browser. When you select “See my study match,” your responses are saved on our servers before you provide your name or email. Selecting an opportunity updates that saved submission. If you then submit your name and email, we link those details to your saved answers so our team can follow up. Closing the page or clearing browser storage does not delete information already saved on our servers.
Provider and organization inquiry details are saved when you send the inquiry. We collect information from you and from your interactions with this website; the initial intake does not collect records from your healthcare providers.
How we use information
We use this information to provide the preliminary matching you request, maintain your interest or waitlist submission, respond to inquiries, discuss possible research opportunities or partnerships, and administer and protect our services. A potential match is preliminary and does not establish eligibility. We also use information where necessary to meet legal obligations, resolve disputes, and respond to privacy requests.
Research, de-identification, and sharing with researchers
Your intake responses are not anonymous. Before any later research participation or record collection, we will explain the project, the information needed, permitted uses, who can receive it, and applicable consent or authorization requirements.
Our research work may involve de-identifying information and sharing de-identified information with researchers for the purposes described in the applicable project materials and permissions. De-identification requires more than simply removing your name and email. It reduces the risk of identifying you but does not eliminate every privacy risk. Project-specific terms will explain any further sharing, commercial uses, retention, and limits on withdrawal or deletion. This Privacy Policy alone does not authorize retrieval of your medical records or unrestricted research, licensing, or commercial use of your health information.
Who receives information
Service providers supporting hosting, database storage, internal communications, and follow-up may process information needed to perform those services. Participant signup notifications sent to our internal Slack workspace include a name, email, and submission identifier; eligibility answers are not included in those notifications. Professional inquiry notifications can include the submitted organization, role, interest, and message.
We do not share your identifiable health answers with researchers for research merely because you submit an interest form. Further research sharing is subject to the applicable permissions and project terms. Providing a referral code does not by itself authorize us to return your health answers to a referring partner.
We may disclose information when required by law or as necessary to protect rights, safety, or the security of our services. Information may also be involved in a merger, acquisition, or similar business transaction, subject to applicable law and existing privacy obligations. We do not sell the health information collected through these initial forms or provide it to advertising platforms for ad targeting.
Cookies and browser storage
The intake uses browser storage to carry answers between pages and a first-party cookie to connect your browser to a saved submission. The draft in session storage expires after approximately one hour, and the intake cookie lasts approximately 24 hours. These time limits do not delete server records. Authentication-related cookies may be used if you access an account feature. Disabling browser storage or cookies can affect the intake experience. The current intake does not use advertising pixels to send your answers to advertising platforms.
Retention
Our retention period for incomplete eligibility submissions is one year from the first server save, and for submitted expressions of interest and waitlist submissions is one year from the contact submission. You can request earlier deletion, subject to applicable legal requirements. Routine internal updates do not restart these periods.
We retain professional inquiries for as long as needed to respond and manage the resulting relationship, and retain information longer only when needed for a legal obligation, dispute, or other legally permitted purpose. Later research projects have separately explained retention terms. Removing a browser draft does not remove server records or internal notifications. Deletion requests are reviewed across the systems where we hold the information; backup copies may remain until they are overwritten through the applicable backup cycle.
Your choices and rights
You can choose available “not sure,” no-diagnosis, or “prefer not to disclose” options, or stop before submitting. To ask to access, correct, or delete information, obtain a copy, withdraw a permission, or stop follow-up, email legal@delightfulhealth.com. You do not need to create an account to make a request. Please do not include medical records in your email. We may ask for information reasonably needed to verify your identity and locate your submission.
Depending on where you live, you may have additional rights concerning your personal or consumer health information, including confirmation of collection or sharing, information about recipients, deletion, withdrawal of consent, or an appeal of a decision. We will handle requests and appeals under applicable law and will not unlawfully discriminate against you for exercising your rights. If we cannot fulfill a request, we will explain why and any available appeal process. A later research consent will explain withdrawal and any lawful limits concerning information already used or shared.
Adults, security, and updates
This website’s intake and inquiry services are intended for adults aged 18 or older. If you believe a child has submitted information, contact legal@delightfulhealth.com. We use safeguards intended to protect information, but no transmission or storage system can be guaranteed completely secure. This notice does not represent that every activity on this website is covered by HIPAA.
We may update this policy and will post the revised effective date. Where required, we will provide additional notice or obtain consent before materially changing how previously collected information is used. An update does not itself supply new research consent.
