DoctorVault
Terms of service

Terms for using DoctorVault

By using the vault on this site, you agree to these terms. They are written in plain language so you know what you are — and are not — signing up for.

Last updated July 5, 2026. Plain language for clarity — not a substitute for professional legal advice.

Part 1

What this product is

DoctorVault is a personal health information and AI guidance tool. It helps you organize health records and ask questions to a multi-specialist AI panel. It is not a licensed medical provider, hospital, insurer, or emergency service.

The software is provided for personal, non-clinical use unless you obtain independent legal and compliance advice for another purpose.

Part 2

Not medical advice

All outputs are AI-generated and may be wrong, incomplete, or outdated. They are not medical advice, diagnosis, treatment, or a substitute for care from a qualified healthcare professional.

Do not delay or disregard professional medical advice because of something you read in this app. For emergencies, call your local emergency number immediately — this product does not detect emergencies or contact emergency services.

Do not use the app to make decisions about prescribing, stopping, or changing medications without a clinician.

Part 3

HIPAA and regulatory scope

DoctorVault is not HIPAA-compliant and is not offered as a business associate service. It is not designed for covered entities, providers, or employers handling protected health information under HIPAA, GDPR-as-clinical, or similar regulated regimes without a separate compliance program and contracts.

If you are a clinician, clinic, or vendor subject to healthcare regulation, do not use this product for patient records until you have completed an appropriate legal and compliance review.

Part 4

Your data responsibilities (BYOS + BYOK)

You are responsible for:

  • Storage you configure— securing your S3 bucket or Google account, backups, access controls, and compliance with your storage provider's terms.
  • Vault credentials — your passphrase and recovery code. We cannot recover your vault if you lose both.
  • LLM API keys and providers — keys you enter are used browser-direct to send chat context (which may include health information) to Anthropic, OpenAI, or other providers you choose. Their terms and privacy policies apply.
  • Accuracy of records — information you enter or upload, and any AI-assisted extractions you confirm.

See our Privacy Policy for how data flows technically.

Part 5

What we provide

We host the open application shell that runs in your browser. We do not store your health records, encryption keys, or storage credentials on our servers, as described in our privacy policy.

We may update the application from time to time. You trust the code we serve; we do not guarantee it will be error-free or available without interruption.

Part 6

AI limitations

AI systems can hallucinate, reflect biases in training data, and misinterpret medical context. Retrieval over your records improves relevance but does not guarantee correctness. You are responsible for evaluating outputs critically.

We do not guarantee any particular health outcome from using the product.

Part 7

Disclaimers and limitation of liability

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS, OR HEALTH OUTCOMES, ARISING FROM YOUR USE OF THE SERVICE — INCLUDING RELIANCE ON AI OUTPUTS OR LOSS OF VAULT CREDENTIALS.

Some jurisdictions do not allow certain limitations; in those cases our liability is limited to the greatest extent permitted by law.

Part 8

Changes

We may update these terms or the privacy policy. Material changes will be reflected by the “Last updated” date. Continued use after changes constitutes acceptance. The vault may prompt you to re-acknowledge updated policies on this device.

Part 9

Contact

Questions about these terms or the privacy policy should be directed through the project's public repository or the contact channel published by the operator hosting this instance.