Assistant Privacy Notice

Last updated: October 9, 2026

KRACE Assistant is an optional information and coordination tool operated by RnPT Inc. This notice supplements the Privacy Policy. The separate booking and consultation consents continue to apply to those services.

What KRACE collects and why

When you open an Assistant session, KRACE creates a random session ID and a 24-hour access token. It records the language, selected hospital (if any), creation time, and your account ID if you are signed in or link the session to your account. For security and usage limits, KRACE stores a hash of the access token and a keyed hash derived from your IP address. It stores the questions you submit, answers shown to you, your consent record, and any coordinator handoff record. A pending cost reservation temporarily uses the session and member IDs to authorize one request. When that request is dispatched or the reservation is released, KRACE removes those IDs from the cost record. Dispatched, settled and released cost records contain request identifiers, hashes and token or cost counters without session or member IDs.

KRACE uses this information to answer your inquiry, show your recent conversation, prevent misuse, account for service costs, and arrange a coordinator handoff if requested. Authorized administrators may access conversation records for a handoff or support; transcript access is audited. Do not include information about another person unless you are authorized to provide it.

Selecting a public information option does not require the three Assistant consents below. Free text and recommendations that use your input require the consents before submission.

Separate choices shown before your first free-text message

Assistant conversation collection and use:

I agree to KRACE collecting my Assistant questions and responses to answer my inquiry, keep conversation history, and arrange a coordinator handoff. Guest conversation content is deleted after 90 days; member content is deleted on withdrawal of Assistant consent or account deletion. I can decline and use public information or contact a coordinator instead.

Sensitive health information collection and use:

I separately agree to KRACE collecting and using health concerns, symptoms, treatments, medications, allergies, and other health details that I choose to type into Assistant for my inquiry and related coordinator handoff. This is optional; I can decline and avoid entering health information, use public information, or contact a coordinator instead.

Overseas transfer for AI processing:

I separately agree to KRACE sending my current Assistant question, selected public information, and any health details I type to Anthropic, PBC in the United States through its API to generate a response. Processing may occur in other countries where Anthropic or its subprocessors operate. Anthropic normally deletes API inputs and outputs within 30 days, with usage-policy, legal, and contractual exceptions. I can decline and use public information or contact a coordinator instead.

These choices concern Assistant only. They do not authorize sharing your information with a hospital for a booking. A booking requires its own consent. Declining an Assistant choice leaves the public information options and external coordinator contact available. KRACE does not send a free-text question to Anthropic without the applicable Assistant consents.

Anthropic processing and overseas transfer details

  • Recipient and contact — Anthropic, PBC; privacy@anthropic.com; 548 Market St, PMB 90375, San Francisco, CA 94104, United States
  • Purpose and method — Generate an Assistant answer; encrypted API transmission when you submit a question
  • Data sent — Your current question, the selected public information options and recent option identifiers, and health details you include in that question. Past raw questions are not resent for follow-up answers.
  • Location — Anthropic stores API data in the United States. It may route processing to countries in the United States, Europe, Asia, and Australia and use listed subprocessors. A fixed processing country cannot be promised for every request.
  • Recipient retention — Anthropic says API inputs and outputs are normally deleted within 30 days. Data flagged for a Usage Policy violation may be retained for up to two years, with classification scores for up to seven years. Longer retention can also apply under law or the applicable contract.
  • Refusal — You may decline overseas transfer before free-text use. Public information options and the external coordinator route remain available.

Anthropic says commercial API inputs and outputs are not used for model training by default. Voluntarily submitted feedback or explicit permission can be exceptions, subject to the applicable Commercial Terms and contract. Its retention explanation describes exceptions for policy enforcement, law, agreed terms, and submitted feedback. Its data location explanation describes processing outside the United States. KRACE does not select a guaranteed single-country processing location for this feature.

KRACE retention and your choices

KRACE deletes guest Assistant conversation content 90 days after session creation. For members, it deletes conversation content when Assistant consent is withdrawn or the account is deleted. The session access token expires after 24 hours. After conversation content is purged, KRACE keeps Assistant consent evidence and a minimal deleted-session record that may still link to an account for up to 1,095 days, then deletes them. KRACE uses this period as an internal verification and dispute-resolution policy; it does not claim that every such record must be kept by law. Security access logs have a separate two-year period under the Privacy Policy. The Assistant content schedule is separate from the seven-day period that applies to certain health information sent to a selected clinic for a booking. Deleting content at KRACE does not change Anthropic's separate retention exceptions described above.

You may withdraw Assistant consent through the Assistant session or request access, correction, deletion, or suspension of processing at support@kracecare.com. If the session is no longer accessible, contact KRACE and provide enough information for us to locate your record. Withdrawal prevents further free-text processing for that session and starts deletion of its content. For an existing booking or a clinic's independent records, the separate booking notice and the clinic's policy apply.

Assistant answers can be inaccurate and do not provide medical diagnosis or treatment advice. Check important facts with the clinic or a qualified professional.