MyTrial AI
MyTrial AI

Privacy Policy

Last updated: December 2024

Introduction

MyTrial AI ("MyTrial," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinical trial discovery platform.

We handle sensitive health information with the utmost care. While we may not be a HIPAA-covered entity in our direct-to-patient model, we treat your health data with the same level of protection and respect.

Information We Collect

Information You Provide

  • Account Information: Email address, name, and password when you create an account
  • Health Profile: Medical conditions, medications, biomarkers, lab results, and other health information you share for trial matching
  • Location: City, region, or ZIP code to find nearby trial sites
  • Preferences: Trial preferences, communication preferences, and settings
  • Communications: Messages you send to us or through our platform

Information We Collect Automatically

  • Usage Data: Pages viewed, features used, and actions taken on our platform
  • Device Information: Browser type, operating system, and device identifiers
  • Log Data: IP address, access times, and referring URLs

Information We Do NOT Collect

  • Social Security Number
  • Insurance information
  • Full date of birth (only age range)
  • Financial or credit card information
  • Employer information

How We Use Your Information

We use your information to:

  • Match you with potentially relevant clinical trials
  • Explain trial eligibility criteria in plain language
  • Connect you with trial sites when you request it
  • Provide customer support and respond to inquiries
  • Improve our platform and develop new features
  • Ensure security and prevent fraud
  • Comply with legal obligations

How We Share Your Information

With Your Consent

We share your health information with clinical trial sites only when you explicitly request us to do so. You control when and with whom your data is shared.

Service Providers

We work with trusted service providers who help us operate our platform, including:

  • Cloud hosting providers (data storage)
  • Authentication services (account security)
  • Analytics services (usage analysis)
  • AI model providers (trial matching)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

Legal Requirements

We may disclose information if required by law, court order, or government request. We will notify you of such requests unless legally prohibited.

What We Never Do

  • We never sell your personal or health data
  • We never share data with advertisers
  • We never use your data to train AI models

AI and Your Data

MyTrial uses artificial intelligence to help match you with clinical trials. For complete transparency about our AI:

  • We use Claude by Anthropic as our primary AI model. See our AI Technology page for details.
  • Your conversations and health profile are used only to serve you, not to train AI models.
  • AI responses are clearly labeled and subject to human oversight.
  • We are transparent about AI limitations. See our Limitations page.

Data Security

We protect your data with industry-standard security measures:

  • Encryption at rest: AES-256 encryption for all stored data
  • Encryption in transit: TLS 1.3 for all data transfers
  • Access controls: Strict limits on who can access data
  • Audit logging: All access is logged and monitored
  • Regular security reviews: Ongoing assessment of our security practices

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You can delete your data at any time through your account settings or by contacting us.

When you request deletion, we will remove your data within 30 days. Some data may be retained longer for legal compliance purposes.

Your Rights

You have the following rights regarding your personal data. See our Your Rights page for detailed instructions.

  • Access: Request a copy of your data
  • Download: Export your data in machine-readable format
  • Correction: Update or correct inaccurate data
  • Deletion: Request permanent deletion of your data
  • Restriction: Limit how we process your data
  • Objection: Object to certain types of processing

State-Specific Rights

California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have additional rights including the right to know what personal information we collect and share, the right to delete, and the right to opt out of the sale of personal information. Note: We do not sell personal information.

Washington Residents

Under Washington's My Health My Data Act, you have specific rights regarding health data including consent, access, and deletion rights.

Children's Privacy

MyTrial is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email. Your continued use of MyTrial after changes constitutes acceptance of the updated policy.

View our Updates page for a changelog of policy changes.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Visit our AI Transparency Center for more information about how we operate.