Skip to content
MyHealth ← Back to MyHealth

Terms of Use — MyHealth

Version (policy_version): 1.5 Last updated: June 11, 2026 Effective date: as of the date of publication on the App Store.

In short (read this first)

MyHealth is an iPhone application that helps you organize your own health record, relying on an artificial intelligence (AI) assistant that reads the documents and photos you upload to extract and fill in records (which you confirm before saving) and offers a supportive, educational reading of your own data. Before using the application, read these Terms of Use in full. The most important points are:

These Terms of Use ("Terms") are complemented by MyHealth's Privacy Policy, which describes in detail how your data are processed. The two documents must be read together.

1. Who we are and what these Terms are

1.1 The developer

MyHealth is developed and operated by:

BAS ARTIFICIAL INTELLIGENCE LTDA ("BAS AI", "we", "our")
CNPJ: 64.106.409/0001-70
Website: www.bas-ai.com
Address: Rua Gomes de Carvalho, 911, Vila Olímpia, São Paulo/SP, CEP 04547-003, Brazil

In this document, "MyHealth", "application" or "Service" mean the MyHealth iPhone application and the backend services that support it, operated by BAS AI.

1.2 Acceptance of the Terms

These Terms form a contract between you ("you", "user", "data subject") and BAS AI. By creating an account, accepting the Terms on the sign-up screen or using the application in any way, you declare that you have read, understood and agree to these Terms and to the Privacy Policy.

If you do not agree with these Terms, do not create an account and do not use the application.

1.3 Contact

For any matter relating to these Terms, the Service or your privacy:

2. Purpose and description of the Service

2.1 What MyHealth does

MyHealth is a personal health organization and education tool. Through it you can, according to the features available in the app:

2.2 What MyHealth does NOT do

MyHealth does not provide healthcare services, does not establish a doctor-patient relationship, does not make diagnoses, does not prescribe, indicate or contraindicate treatments, medications or exams, and does not monitor you for emergency purposes. See Section 3.

2.3 Scope and languages

MyHealth is distributed through Apple's App Store and was built for global, multilingual use (at minimum Portuguese, English and Spanish). The initial launch focuses on Brazil. Where the law of your country is more protective of the consumer or the data subject, it prevails over these Terms.

3. Important medical notice — MyHealth is NOT a medical device

Read this section carefully. It is essential to the safe use of the application.

3.1 Educational, not clinical, purpose

3.2 The AI assistant's reading is educational and must be confirmed with your doctor

3.3 Health decisions are yours and your doctor's

Decisions about your health are your sole responsibility, made together with qualified healthcare professionals. BAS AI is not responsible for clinical decisions made based, in whole or in part, on the information in the application (see Sections 13 and 14).

3.4 Emergencies

MyHealth is not intended for emergency situations and does not notify anyone on your behalf. In case of an emergency or severe symptoms, seek immediate in-person medical care or call your local emergency service (in Brazil, SAMU 192, Fire Department 193 or the nearest emergency room).

3.5 Emotional crisis or risk of self-harm — MyHealth does not detect, does not monitor and does not replace specialized help

MyHealth does NOT detect, monitor or diagnose the risk of suicide, self-harm or psychiatric crisis, and does not alert anyone for you. If you or someone else is having thoughts of death, the urge to self-harm or intense distress, seek immediate help from a mental health professional or emergency care. In Brazil: CVV 188 (free, 24h, phone and chat at cvv.org.br). Outside Brazil: your country's national prevention line (international directory: findahelpline.com). In imminent risk (means at hand): SAMU 192 (Brazil) or local emergency services immediately. Never rely on the app to assess your risk or to warn anyone about you.

4. Definitions

To make reading easier, here are some terms used in this document:

5. Eligibility, age and capacity

5.1 Minimum age for your own account

To create an account and use MyHealth in your own name, you must be 18 years of age or older (or the age of majority in your country, if higher) and have full legal capacity to enter into this contract. When creating the account, you declare that you meet this requirement; sign-up by anyone under 18 is blocked and the age attestation is recorded with the server's date and time.

5.2 Data about minors (only through a legal guardian)

MyHealth is not intended for autonomous use by minors. The protection of children and adolescents complies with the Statute of the Child and Adolescent (Law 8,069/1990), Law 15,211/2025 (Digital ECA), Art. 14 of the LGPD and Art. 8 of the GDPR (EEA).

The health data of a child or adolescent may only be entered by a legal guardian (father, mother or legal representative), who manages the dependent's profile (the application provides for this managed link, the managed_by feature). When entering a minor's data, the guardian declares that they have the legal authority to do so and that the processing of such data takes place in the best interest of the child or adolescent (LGPD Art. 14). The guardian is the holder of the consent and may, at any time, export or delete the dependent's data.

In every country, we adopt the single 18-year limit for one's own account. This requirement refers to account holding and must not be confused with the GDPR's age of autonomous digital consent (Art. 8, between 13 and 16 years depending on the country). Below 18, data processing only occurs through a profile managed by an adult guardian.

Users in the United States (COPPA): MyHealth does not offer accounts to minors nor collect data directly from children. Any data about a minor is entered and controlled by a responsible adult, who exercises verifiable parental consent.

5.3 Compliance with local law

You undertake to use MyHealth in accordance with the legislation applicable to you and not to use it where the service is prohibited.

6. Account, registration and security

6.1 Account creation

To use MyHealth you create an account by providing registration data (for example, name, e-mail and, as applicable, phone number and document/CPF). You undertake to provide true, accurate and up-to-date information and to keep it updated.

6.2 Protection of your identity data

Your identification data (PII) are stored encrypted in a vault (identity_vault, with XChaCha20-Poly1305 encryption) and are only decrypted through a secure function, under the user's own identity. Your data are hosted on infrastructure in the Brazil region (São Paulo, sa-east-1), with encryption at rest, row-level access control (RLS) and the other measures described in the Privacy Policy — except for AI processing, which involves an international transfer to the United States (see Section 8.4).

6.3 Authentication and second factor (2FA)

MyHealth offers two-factor authentication (MFA/2FA via TOTP) to strengthen the protection of your account. We strongly recommend that you enable 2FA. You are responsible for keeping your credentials, your device, your second factor and your access recovery means secure.

6.4 Responsibility for the account

You are responsible for all activities carried out on your account. You undertake to:

BAS AI is not responsible for losses arising from unauthorized use of the account when this results from your failure to protect your credentials or device.

7. Acceptable use and prohibited conduct

7.1 Personal and legitimate use

MyHealth is intended for personal, non-commercial use, to organize your own health record or that of a dependent under your legal responsibility.

7.2 Prohibited conduct

When using MyHealth, you may not:

  1. Enter health data of third parties without legal authorization to do so (except for a minor under your responsibility, under the terms of Section 5.2);
  2. Use the app for unlawful, fraudulent purposes or those that violate the rights of third parties or applicable legislation;
  3. Circumvent, disable or interfere with security, authentication, encryption, access control (RLS) or consent verification mechanisms;
  4. Attempt to access other users' data, restricted areas, systems or networks of BAS AI or its subprocessors without authorization;
  5. Perform reverse engineering, decompilation or disassembly of the app, except to the extent expressly permitted by law;
  6. Enter content that contains malicious code, viruses or that aims to compromise the integrity or availability of the Service;
  7. Overload the infrastructure, perform automated scraping or use the Service in an abusive manner, including attempts to manipulate or induce the AI into improper behavior (for example, prompt injection attacks);
  8. Use the app to provide healthcare services to third parties, offer diagnosis, professional clinical advice or any regulated health activity;
  9. Resell, sublicense or commercially exploit the Service without BAS AI's written authorization;
  10. Remove or alter intellectual property notices, trademarks or legal notices from the app.

7.3 AI safeguards

The app applies data minimization and protection against prompt injection. Only the assistant chat has web search, for general knowledge. The system is instructed to formulate searches using only generic clinical terms, without your values, dates, age, names or identifiers. You acknowledge that this protection is by instruction to the model, not by an infallible technical filter, and that the search is performed by Anthropic's infrastructure. The health record analysis and document extraction functions do not perform web searches. Attempting to circumvent these safeguards is prohibited conduct.

7.4 Consequences

Failure to comply with this Section may lead to the suspension or termination of your account, without prejudice to other applicable legal measures (see Section 15).

8. AI features and their limitations

8.1 How AI works here

The AI assistant and the extraction of data from documents use artificial intelligence models from Anthropic (Claude), engaged as a subprocessor of BAS AI. Essential points:

The full description of data processing by the AI is in the Privacy Policy and on the Subprocessors page.

8.2 Important limitations of the AI

You acknowledge and agree that:

8.3 No guarantee of clinical outcome

BAS AI does not guarantee that the information generated by the AI is correct, complete, up-to-date or suitable for any specific clinical purpose. The use of the information generated by the AI is at your own risk, subject to the legal limits of liability (Section 14).

8.4 International data transfer for AI processing

AI processing is carried out by Anthropic, with infrastructure in the United States. When you authorize the AI, the content sent is subject to an international transfer of sensitive personal data. This transfer occurs only with your specific consent and will be supported by standard contractual clauses (SCC) and a DPA to be signed with Anthropic before launch, in addition to the commitment, under Anthropic's commercial terms, that your content is not used to train models. The storage of your health record remains on infrastructure in Brazil (Section 6.2); the transfer to the United States occurs only at the moment of processing. Without your consent, none of your data is transferred to Anthropic and the AI features become unavailable.

9. User Content and license

9.1 The content is yours

You remain the owner of the User Content you enter in MyHealth. BAS AI does not claim ownership of your health data.

9.2 Limited license to operate the Service

For the app to work (store, organize, display, extract data, generate the educational AI reading, export and — if you choose — share with a family member), you grant BAS AI a limited, non-exclusive, worldwide, royalty-free and revocable license to process the User Content strictly for the purpose of providing the Service to you, under the terms of the Privacy Policy and the consents you record.

This license does not authorize BAS AI to sell, rent, transfer to third parties for their own purposes, use for advertising or use to train AI models your content. The license ends when you delete the content or the account, except for what the law requires to be retained (see the Privacy Policy).

9.3 Responsibility for the content

You are solely responsible for the User Content you enter, including for having the right to enter it (in particular, data about minors under your responsibility). You declare that the content does not violate the rights of third parties or the law.

9.4 Family sharing (optional)

MyHealth may allow you to share part of your health record with a family member. This sharing is:

When sharing, you are responsible for choosing with whom you share. There is no sale of data. Family sharing depends on your specific consent (family_sharing).

10. Third-party integrations

10.1 Apple and the App Store

MyHealth is distributed through the App Store. Your use is also subject to Apple's terms. Any push notifications and, in the future, subscription payments may involve Apple's infrastructure. BAS AI does not control Apple's services and is not responsible for them.

10.2 Apple Health (HealthKit) and wearables (Oura, WHOOP) — optional

MyHealth integrates with Apple Health (HealthKit) and, optionally, with third-party wearables (Oura and WHOOP), in a revocable manner and subject to specific consent per provider:

10.3 Registered professionals and care team

The app allows you to record information about your care team (for example, doctors and professionals who treat you). These records are data informed by you, for your own organization. Registering a professional does not create any relationship between BAS AI and that professional, nor does it imply endorsement, verification or recommendation by BAS AI.

10.4 Subprocessors

To operate the Service, BAS AI currently uses: Supabase (hosting/DB/auth/storage, infrastructure in Brazil), Anthropic (AI, infrastructure in the United States — international transfer, Section 8.4), Apple (App Store, HealthKit, push and payment processing via native In-App Purchase) and Resend (transactional e-mails). Oura and WHOOP are not subprocessors: they are data sources that you connect (Section 10.2), independent controllers of their own platforms. The updated list is on the Subprocessors page and in the Privacy Policy.

11. Intellectual property

11.1 BAS AI's rights

MyHealth — including the software, code, interfaces, design, screens, texts, logos, trademarks, the health-record organization methodology, the extraction flows and the AI assistant — is owned by BAS AI or its licensors, and is protected by intellectual property laws. Nothing in these Terms transfers any right over this property to you, except for the license to use described in Section 11.2.

11.2 License to use granted to you

BAS AI grants you a personal, limited, non-exclusive, non-transferable and revocable license to install and use MyHealth on your device, exclusively for the purposes permitted by these Terms. This license does not include any right to resell, sublicense, modify, copy (beyond what is necessary for normal use) or commercially exploit the app.

11.3 Feedback

If you send suggestions or feedback about the app, BAS AI may use them freely to improve the Service, without this giving rise to any obligation or right to remuneration for you.

12. Subscriptions, credits and payments

MyHealth offers paid features: a subscription and the purchase of AI credits (as a rule, 1 credit = 1 page of an analyzed document). New users receive an initial allotment of free credits, granted only once.

13. Disclaimers of warranty

13.1 Service "as is"

To the maximum extent permitted by applicable law, MyHealth is provided "as is" and "as available", without warranties of any kind, express or implied, including (but not limited to) warranties of fitness for a particular purpose, accuracy, uninterrupted availability or freedom from errors.

13.2 No clinical warranty

BAS AI does not warrant that the information organized by the app, the trends displayed or the answers of the AI assistant are correct, complete, up-to-date or suitable for any clinical purpose. The app does not provide medical advice (see Section 3).

13.3 Availability

BAS AI makes efforts to keep the Service available and secure, but does not guarantee uninterrupted operation. The Service may suffer interruptions due to maintenance, technical failures, updates or factors beyond BAS AI's control (including failures of subprocessors or of the network). We recommend that you keep your own copies of your important documents (you can export them in FHIR and PDF).

13.4 Legal limits

Nothing in these Terms excludes or limits warranties or rights that cannot be excluded or limited by applicable law, in particular consumer rights provided for in the CDC (Brazilian Consumer Protection Code) and mandatory consumer protection rights of other jurisdictions.

14. Limitation of liability

14.1 Health decisions

BAS AI is not responsible for any decisions, conduct or consequences related to your health made based, in whole or in part, on the information provided by MyHealth (including the answers of the AI assistant). Such decisions must always be made with the guidance of a qualified healthcare professional (see Section 3).

14.2 General limitation

To the maximum extent permitted by applicable law, BAS AI and its directors, employees, partners and subprocessors are not liable for indirect, incidental, special, consequential or punitive damages, nor for lost profits, loss of data (except for BAS AI's sole fault for a security failure attributable to it), loss of opportunity or reputational harm, arising from the use or the inability to use the Service.

14.3 Liability cap

To the maximum extent permitted by applicable law, BAS AI's liability for any claim related to the Service is limited to the directly and demonstrably caused damages. In Brazil, clauses that make impossible, exonerate or mitigate the supplier's liability for defects of any nature are void (CDC (Brazilian Consumer Protection Code), Art. 51, I) — for this reason we do not stipulate a monetary cap on liability; we are liable within the limits of the law. This limitation does not exclude liability that mandatory law does not allow to be limited (next Section).

14.4 Preservation of consumer rights

The limitations of this Section do not apply to situations in which mandatory law does not allow exclusion or limitation, including cases of willful misconduct, fraud or violation of basic consumer rights. In Brazil, the mandatory rules of the CDC (Brazilian Consumer Protection Code) are observed. Nothing here limits BAS AI's liability for damages that, under applicable law, cannot be limited.

15. Indemnification

To the extent permitted by applicable law, you agree to indemnify and hold harmless BAS AI, its directors and employees from claims, losses, damages, obligations and expenses (including reasonable attorneys' fees) arising from: (a) your misuse of the Service; (b) your violation of these Terms or of the law; (c) your violation of the rights of third parties, including the entry of third-party data without authorization; or (d) content that you entered. This clause is interpreted in a manner compatible with applicable consumer rights.

16. Suspension, termination and account deletion

16.1 Termination by you

You may close your account and delete your data at any time, directly in the app (account deletion feature, available as required by Apple). The deletion follows what is described in the Privacy Policy: permanent, cascading removal of all clinical data and of the identity vault associated with your account. Deletion is an immediate operation; we can confirm its completion upon request to the Data Protection Officer (DPO) — there is no automatic deletion receipt. Copies in operational backups are overwritten in the rotation cycles, and audit metadata required by law (for example, access logs and tax records) may be retained for the legal periods.

16.2 Suspension or termination by BAS AI

BAS AI may suspend or terminate your access, in whole or in part, in the event of: (a) violation of these Terms (in particular Section 7); (b) risk to the security of the Service or of other users; (c) legal requirement; or (d) discontinuation of the Service. Whenever possible and legally admissible, BAS AI will notify you with reasonable advance notice and will allow you to export your data (FHIR and PDF) before termination.

16.3 Challenging suspension or termination by BAS AI

If BAS AI suspends or terminates your access (Section 16.2), you may challenge the decision and request its review, stating your reasons and attaching the elements you consider relevant. The channel for challenges is the Data Protection Officer (DPO), at privacy@bas-ai.com. BAS AI, in voluntary alignment with the response period provided for in the **LGPD (Art. 19, caput, II), makes efforts to respond clearly and completely within up to 15 days** counted from receipt of the request, indicating the outcome of the review and, where appropriate, restoring access. This good-faith period does not exclude or limit your other legal rights.

16.4 Discontinuation of the Service

BAS AI may, at its discretion, discontinue MyHealth (in whole or in part). Should this occur, and except in case of legal impediment or force majeure, BAS AI will:

We recommend that you export and keep your own copy of your important documents within that window.

16.5 Effects of termination

Once the account is closed, your license to use ceases. Your data are processed in accordance with the Privacy Policy (deletion upon request and retention only of the audit metadata required by law). The clauses that, by their nature, must remain in force survive termination (for example, intellectual property, disclaimers, limitation of liability, indemnification and jurisdiction).

16.6 Death of the holder

In the event of the death of the holder, the processing of the data associated with the account follows the provisions of the Privacy Policy, based on the rights of personality (Civil Code, Art. 12, sole paragraph) and the rules of succession. Requests must be addressed to the DPO (privacy@bas-ai.com), upon proof of the death and of the requester's legitimacy. BAS AI does not promise the immediate full deletion of the data: the residual retentions required by law (logs and tax/billing data, for the legal periods) are maintained.

17. Changes to these Terms and re-acceptance

BAS AI may update these Terms to reflect changes in the app, in suppliers or in the law. When this occurs:

If you do not agree with the new Terms, you may export your data and close your account. Continued use after the new version takes effect means agreement with it.

The version history of these Terms is published at https://www.bas-ai.com/myhealth/legal/versoes; each accepted version remains archived.

18. Governing law and jurisdiction

18.1 Governing law

These Terms are governed by the laws of the Federative Republic of Brazil, including the LGPD and the CDC (Brazilian Consumer Protection Code), without prejudice to the mandatory consumer protection and data protection rules of the country where you reside (for example, the GDPR, for users in the European Economic Area).

18.2 Jurisdiction

The courts of the Judicial District of São Paulo/SP are hereby elected to settle disputes arising from these Terms. For the consumer, the right to sue and be sued in the courts of their domicile is preserved, in accordance with the CDC (Brazilian Consumer Protection Code) and equivalent rules of other jurisdictions.

19. General provisions

20. Contact

MyHealth — your health record, organized and private. MyHealth organizes your health history and offers an AI assistant with an educational and non-diagnostic reading. It is NOT a medical device, does NOT make diagnoses and does NOT replace the assessment of a healthcare professional. This document will be reviewed by a human attorney before launch.