The Pivot Protocol Companion — Barefoot Medicine LLC
Last updated: August 6, 2026
You type questions into a chat box. Those questions, and the answers you receive, are stored for three years. Many people type health details into that box, so we treat what you type as sensitive.
We do not sell your data. We do not use it for advertising. We do not use your conversations to train AI models. You can ask us to delete your conversations at any time by emailing info@pivotprotocol.com.
The rest of this document is the detail behind those statements.
Barefoot Medicine LLC is not a healthcare provider, health plan, or healthcare clearinghouse. We are not a HIPAA-covered entity, and the Service is not a medical record.
Information you type into the Service does not receive HIPAA protection. This is a meaningful difference from information you give your doctor. Please take it into account when deciding what to type.
Being outside HIPAA does not mean we treat your information carelessly. The commitments in this policy are binding on us. But you should understand the legal posture rather than assume protections that do not apply.
Questions and answers. Every question you submit and every answer the Service returns is stored, along with a timestamp and the last eight characters of your access credential. We keep these for three years.
We store them for two reasons: to investigate and correct problems with the Service, and because if a user ever claims the Service told them something harmful, the actual record of what was said is the only way to establish what happened. That record protects both of us.
Health information you volunteer. We do not ask for health information. But questions about digestive symptoms often contain it. Anything you type is stored as part of the conversation record described above. You control what you type. You can ask the Service general questions about the framework without describing your own symptoms, and it will answer them.
Purchase information. Payments are processed by Stripe. We receive confirmation that a payment succeeded, the amount, and the product purchased. We never receive or store your full card number. Stripe's handling of your payment data is governed by Stripe's own privacy policy.
Access credential. A token identifying your purchase is stored in your browser's local storage. It stays on your device.
Technical data. Our infrastructure provider processes standard request data such as IP address and browser type as an ordinary part of serving web traffic and blocking abuse.
— We do not sell your personal information, and we have not sold or shared personal information in the preceding twelve months.
— We do not use your information for advertising or marketing profiling.
— We do not use your conversations to train, fine-tune, or improve any AI model.
— We do not run advertising trackers or third-party analytics on the app.
— We do not require an account, a name, or a mailing address to use the Service.
To answer your question, its text is transmitted to the following providers, each acting as our service provider:
Cloudflare — hosts the application and stores the conversation record.
Voyage AI — converts your question into a numeric representation used to search the materials.
Pinecone — searches the teaching materials for relevant passages.
Anthropic — generates the answer text from your question and the retrieved passages. Anthropic does not train its models on data submitted through its business API.
Stripe — processes payment.
These providers are contractually limited to processing data on our behalf. We do not authorize them to use your information for their own purposes.
Conversations: three years from the date of the conversation, then automatically deleted.
Access credential validation records: for as long as your access remains active.
Payment records: as required by tax and accounting law, typically seven years, held by Stripe and in our financial records.
Access to the Service requires a verified purchase. Conversation records are stored in access-controlled infrastructure. Data is encrypted in transit.
No system is perfectly secure. We cannot guarantee that a determined attacker will never obtain data, and you should weigh that against how much personal detail you choose to type.
Regardless of where you live, you may ask us to:
— Access the conversation records associated with your credential.
— Delete your conversation records.
— Correct inaccurate information we hold about you.
— Obtain a copy of your data in a portable format.
Email info@pivotprotocol.com with the request. We will respond within 30 days. We will not charge you for a reasonable request and we will not degrade your access because you made one.
Deleting your conversation records does not cancel your access to the Service, and does not entitle you to a refund.
Some states regulate "consumer health data" separately and more strictly than other personal information. Information you type into the Service about your symptoms or condition may qualify.
For residents of those states, we confirm: we collect consumer health data only to provide the Service you purchased; we do not sell it; we do not share it with third parties other than the service providers listed in Section 5; and we will delete it on request under Section 8. We do not use consumer health data to target advertising, and we do not operate a geofence around any healthcare facility.
Under the California Consumer Privacy Act, you have the rights described in Section 8, plus the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CCPA. The categories of personal information we collect are described in Section 3, and we collect them for the business purposes described there.
The Service is operated from and hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, which may have different data protection laws than your country.
If you are in the European Economic Area or the United Kingdom, our lawful basis for processing your questions and answers is performance of our contract with you (providing the Service you purchased) and our legitimate interest in maintaining a record for safety and dispute resolution. You have the rights described in Section 8, plus the right to object to processing and to lodge a complaint with your local supervisory authority.
The Service is for adults 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has used the Service, email info@pivotprotocol.com and we will delete the records.
If we make a material change, we will post the updated policy with a new "Last updated" date. If the change materially affects how we handle information already collected, we will make a reasonable effort to notify purchasers directly.
Barefoot Medicine LLC
c/o Christian Nix
410 Ave Monte Sol, Suite 14, PMB 55
Fajardo, PR 00738
Puerto Rico
Email: info@pivotprotocol.com
To exercise any right described in Section 8, email us or write to the address above.