A plain-language summary of how Somie Health handles your information. A full legal policy will be published before launch. Updated October 2026.
What we collect
Your account details: name, email or phone number, and how you signed in.
Your patient profile, if you fill it in: phone number, date of birth, city and area (quartier).
Family members you add (first name, last name, relationship and, if you give it, date of birth). Only you can see this list; when you book a visit or a lab test, or order medicine, for one of them, the provider, lab or pharmacy sees their first name, how they are related to you and their age.
What you do on Somie Health: visit requests, chat messages in a visit, visit summaries written by your provider, reviews you write, prescriptions, lab requests and pharmacy orders.
If you turn on alerts: a code that lets your phone receive them.
If you are a provider, pharmacy, lab or hospital: your application and licence number.
Who can see it
You can see your own information.
A provider, lab or pharmacy sees only what you send them: a visit request, a test request or an order. Visit chat, visit summaries and prescriptions are visible only to you and the provider of that visit.
A pharmacy that has the code from your prescription can open that prescription. It shows medicines, the prescriber and your initials, not your name.
Our admins can see accounts, patient profiles, visit requests (who, when, which service and the note you wrote), provider applications and contact messages, to run the service and handle problems. They cannot read visit chats, visit summaries, prescriptions, lab requests or pharmacy orders from the app. The Somie Health owner can technically reach the whole database through Supabase's dashboard, and only does so to fix problems.
Reviews you write after a visit are public: anyone can see the stars and comment, but not your name. Our admins can hide a review that breaks the rules. You can delete your review at any time from your Visits page.
We do not sell your information.
Where it is stored and other services
Your data is stored with Supabase, on servers in the European Union (Paris, France), at Amazon Web Services. Login emails (confirming your address, resetting your password) are sent by Supabase.
If you choose "Google" to log in, Google shares your name and email address with us.
The website is hosted by Vercel.
Visits and page speed: Vercel counts visits to our public pages (such as the home page or a provider's profile) and measures how fast they load. It uses no cookies and stores no name or account: only the page address, the country, the type of browser and device, and the site you came from. Pages you see after logging in (your visits, chats, prescriptions, settings) are never counted, and anything after "?" in the address, such as what you searched for, is removed. If your browser asks sites not to track you ("Do Not Track" or "Global Privacy Control"), nothing is measured.
Calls: the voice goes straight between the two phones and is encrypted. To set up a call, your phone's internet address is shared with the other person and with Cloudflare's connection service. If the networks block a direct path, the call passes through a relay run by Cloudflare; it stays encrypted, so Cloudflare cannot listen.
Robot check (Cloudflare Turnstile): when you sign up, log in or reset your password, Cloudflare checks in the background that you are a person and not an automated program. Most people never see it. To do this, Cloudflare receives information about your browser and device, under its Turnstile privacy addendum.
Alerts: if you turn them on, they are delivered through your browser's own alert service (Google for Chrome, Apple for Safari, Mozilla for Firefox). They are encrypted on the way and only say something short like "New message", never names or health details.
Call quality: when you start a call, your phone sends us anonymous counts of how it went (for example "connected", "dropped and came back", roughly how long it lasted, and whether it needed the relay). We keep only daily totals, for one year at most: no name, no account, no visit, nothing said in the call. We use them to make calls work better on weak networks.
If a page crashes, an error report may be sent to Sentry so we can fix it. It contains no name, email, IP address or anything you typed: only the error message, the page address and the browser type.
Some data is deleted automatically: call set-up data one day after the call; the delivery address and map location 30 days after an order ends; contact messages and rejected applications after 6 months; problem reports after 2 years. How long visits, prescriptions and orders are kept will be set with our lawyer, as the law requires.
You can ask us to correct your information or delete your account from Settings, then Privacy, or on the Contact page. We handle these requests by hand for now.
You can turn off alerts in your browser or phone settings at any time.
Somie Health does not provide medical care and is not for emergencies. In an emergency, go to the nearest hospital.
Questions about your information? Write to us on the Contact page.