Effective: June 1, 2026 · Last updated: June 1, 2026
1. Who We Are
Burnes Health ("we", "us", "our") is a mobile application operated by J. Burnes Research Group, Inc., a cardiac wellness and education center founded by Jacqueline A. Burnes, Ed.D., M.A. Burnes Health transforms data from clinical research trials into evidence-based, plant-based disease-prevention programs. This Privacy Policy explains how we collect, use, share, and protect information from users of the Burnes Health mobile app ("the App").
Clinical Oversight. Jacqueline A. Burnes, Ed.D., M.A. provides research-based cardiac wellness education, coaching, and program design as a health educator and applied physiologist. Diagnostic services delivered through our lab partnership with SiPhox Health — including all lab orders, biomarker panels, and result interpretations — are reviewed and released by licensed physicians employed by SiPhox as part of their regulated clinical services. Burnes Health itself does not provide medical diagnosis, treatment, or prescriptions. The app is designed to complement — not replace — the care you receive from your own licensed healthcare provider. Users should always consult their physician before making changes to diet, exercise, or medication.
Because we handle protected health information (PHI), we are a HIPAA Covered Entity and follow the U.S. Health Insurance Portability and Accountability Act Privacy and Security Rules (45 CFR §160, §162, §164).
2. Information We Collect
a. Information you provide directly:
Account: email, password (hashed), full name
Health data you log: blood pressure, weight, glucose, sleep, exercise minutes, mood, symptoms, meals, medications
Photos: meal photos for AI nutrition scanning, receipt/label scans
Voice/text: chat messages with your care team, notes
Google (Gemini 3 Pro, Gemini Nano Banana) — some meal image analysis and image generation
All providers operate under Business Associate Agreements (BAAs) or equivalent data-processing agreements compliant with HIPAA.
Your consent:
On your first use of any AI feature, the App shows a one-time consent screen explaining the above.
You can decline, which disables AI features but keeps every other function of the App working.
You can revoke consent anytime via Profile → Settings → AI Features → Turn Off.
AI providers do not use your data to train their models. We do not sell your data to anyone.
De-identification is applied where possible; direct identifiers (name, email, phone, device ID) are stripped before AI processing.
5. How We Share Your Information
With you (via the App and email digests)
With your care team at Burnes Health under HIPAA's Treatment, Payment, and Operations exception
With family members you explicitly invite to your Family Circle (only the summary you approve)
With HIPAA-compliant service providers under signed BAAs: MongoDB Atlas, Anthropic, OpenAI, Resend, Firebase Cloud Messaging
When required by law, court order, or to prevent serious harm
In anonymized, aggregated form for population-health research (never re-identifiable)
We never sell your data, share it with advertisers, or use it for targeted advertising.
Text messaging (SMS): If you opt in to text messages, you may receive customer care and/or promotional messages from Burnes Health (J. Burnes Research Group). Message frequency may vary. Msg & data rates may apply. Reply STOP to cancel or HELP for assistance. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
6. Data Security
All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
Passwords hashed with bcrypt
HIPAA-required administrative, physical, and technical safeguards
Every access to your record is logged in a tamper-evident audit trail (retained ≥6 years)
Access limited to authorized care-team members on a need-to-know basis
7. Your Rights Under HIPAA
Access your data (§164.524) — via Profile → Export my data (delivered within 30 days)
Correct inaccurate data (§164.526) — via Profile → Request correction
Restrict how we use your data (§164.522)
Accounting of Disclosures (§164.528) — email privacy@burneshealth.com
Revoke consent at any time via Profile → Consent
Delete your account via Profile → Delete account (PHI purged after HIPAA-required retention window)
File a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights without retaliation
8. Children's Privacy
Burnes Health is intended for users 18 years and older. We do not knowingly collect data from children under 13. Contact support@burneshealth.com to report and we will delete it.
9. Data Retention
Active account data: retained while your account is active
Deleted-account PHI: retained for the minimum HIPAA-required period (typically 6 years) then purged
Audit logs: retained ≥6 years
Anonymized analytics: retained indefinitely
10. International Users
The App is intended for use in the United States. If you access it from outside the U.S., your data will be transferred to and processed in the U.S.
11. Changes to This Policy
We will notify you in-app whenever we materially update this policy and require you to accept the new version before continuing.
12. Contact Us
Burnes Health — Privacy Officer
J. Burnes Research Group, Inc.
1330 Avenue of the Americas, 23rd Floor
New York, NY 10019
Phone: 1-800-745-9563
Email: privacy@burneshealth.com
Website: https://burneshealth.com
To exercise any HIPAA right listed above, please email privacy@burneshealth.com with the subject line "HIPAA Request".