Privacy Policy

Ratatui is operated by You Squared LLC. Ratatui is built for HIPAA-compliant handling of protected health information. We sign a Business Associate Agreement (BAA) with covered clinics, and we maintain administrative, physical, and technical safeguards for protected health information.

• Encrypted in transit (TLS 1.3) and at rest (AES-256).
• Every read and write to patient data is audit-logged.
• Access is consent-based — no clinician or vendor sees data a patient has not explicitly shared.
• We never sell personal or health information.

• Account information: name, email, and an encrypted password.
• Health tracking you enter: medications, dose records, injection sites, weight, height/BMI, and optional dose notes.
• Connection records: the clinicians you connect with and the data categories you share with each.
• Device and push-notification identifiers, where you enable reminders.

We use your information to operate the app, save your tracking history, deliver reminders you enable, and show the specific data you have consented to share with a connected clinician.

You are the owner of your data. When you invite a clinician, you choose exactly which categories they can see, such as dose history and weight records, and you can change or revoke that access at any time from Profile → Care Team. Revoking access stops further data from being shared immediately.

You can access and export your data and delete your account at any time. See the account & data deletion page for details. For privacy requests, contact hi@ratatui.ai.

We retain your data while your account is active. When you delete your account, your profile is disabled and your sessions are revoked; tracking data is removed or de-identified except where retention is required for legal, security, or audit-log obligations.

Questions about this policy? Email hi@ratatui.ai.