Privacy

Who we are

Twicewell is run by WeldonPC (Cleveland, Ohio) at the address solar-winds.us. Questions: weldonpc.com/contact.

What we keep

• Your account: email address, a password hash (we never see your password), your first name, your time zone, optional two-step sign-in seed (encrypted).
• Your check-ins: your answers, the time each question took, how you answered (tap, typing or voice), and measures of your writing (length, word variety, pace, number of edits).
• What you add: medicines, exercises and their logs, self-check results, photos, notes, care-team members and report addresses.
• Security records: a salted, one-way code of your network (not your address) to stop password guessing, kept for a few days.
• Care-team records: who you invited, and when each of them looked at your summaries or photos (kept for a year, and included in your download).
• Email records: a copy of each email Twicewell sends for you (confirmation requests and reports), encrypted, with the address it went to and when. Each copy is deleted after 90 days, or straight away when you delete your account.

Free text (writing, notes, answers you type), medicine and exercise names, photo notes and the photos themselves are encrypted on our server with a key kept outside the website's files. Numbers you enter (blood pressure, pain, weight, scores from 1 to 5) are stored as numbers so your charts can be drawn.

Who can see it

• You.
• People you add to your care team, read only, until you remove them. You can see when they looked.
• Addresses you add for email reports. Each address must first confirm, with a button on our site, that it wants your summaries. Until it does, it gets only a short request to confirm (no health information): at most one a day, and no more than 3 in all. Emailed reports carry numbers and warning signs only, never your writing, notes or photos, and every email has a link to stop them. Reports are sent from our own server (reports@solar-winds.us). Email is not a private channel: once a report arrives, the address's email provider holds a copy.
• The site administrator can see account emails, sign-up dates and how many check-ins an account has, to run the service. The admin panel does not show answers, notes, writing, medicines or photos.

What we never do

• No advertising, no trackers, no analytics scripts, no third-party fonts or code on any page.
• We never sell your data or share it for marketing.
• No outside AI company receives your data.

AI summaries (only if you say yes)

On the Summary page you can ask for your numbers in a few plain sentences. They are written by WeldonPC's own AI server (weldonpc.tech, run by WeldonPC in Ohio), not by a third party. Nothing is sent unless you have said yes in Settings, and you can withdraw that at any time. What is sent: the summary for 7 or 14 days, as on the Summary page: the dates, how many check-ins were completed, averages compared with your usual, how many medicines were marked taken (a count, not their names), and the days and the names of any warning signs you ticked (for example "A fall"). What is never sent: your name, email address, writing, notes, medicine names or photos. When warning signs were ticked, the last sentence (who to call) is Twicewell's own fixed wording, not the AI's. Twicewell shows you the reply and does not keep it, and the AI server only writes the reply: it is not used to train any model. AI can make mistakes; the numbers on the page are what you entered, and nothing it writes is medical advice.

Voice answers

Voice answers are off unless you turn them on in Settings. They use your web browser's own speech recognition. Some browsers (for example Google Chrome) send the sound to the browser maker's servers to turn it into text; Twicewell only receives the text.

HIPAA and the FTC Health Breach Notification Rule

Twicewell is not covered by HIPAA: it is not a doctor, hospital, health plan or their business associate, and it holds no HIPAA certification. As a service that keeps a personal health record for you, it follows the U.S. Federal Trade Commission's Health Breach Notification Rule. If your unsecured health information were ever acquired by someone without your authorization (including sharing it without your permission), we would tell you without unreasonable delay and no later than 60 calendar days after finding out. If 500 or more people were affected, we would also tell the FTC at the same time as you, and, if 500 or more residents of one state, the District of Columbia or a U.S. territory were affected, prominent media serving that area. A breach affecting fewer than 500 people would be reported to the FTC within 60 days after the end of that calendar year. See the FTC's guide, Complying with FTC's Health Breach Notification Rule.

Keeping and deleting

We keep your record while your account is open. In Settings you can download everything or delete your account; deleting removes every check-in, note, photo, medicine, care-team link and report address straight away.

Backups. So that a server fault does not lose everyone's records, the server makes a copy of the database every night, an archive of the (encrypted) photos every night, and a copy of the database and program files each time the software is updated. These backups stay on the same server, readable only by the site's own account and the server's administrators, and are deleted automatically before they are 30 days old. Inside a backup, the same things are encrypted as in the live site; your email address and the numbers you entered (such as blood pressure, pain and weight) are not. If you delete your account, your data can remain in these backups until they are deleted, which is at most 30 days later. No copy of your data is kept anywhere else.

Cookies

Only three: one that keeps you signed in, one that protects forms, and one that remembers the text size you picked (it holds only the number 0, 1 or 2). No tracking cookies.