Privacy Policy

Your information & Dia

Last updated: June 22, 2026

Diastole (“Diastole,” “Dia,” “we,” “us”) is a private, invite-only personal assistant for physicians, used primarily over text message. This policy explains what we collect, how we use it, and the choices you have. Dia is built to be discreet by default: it reads and drafts, it never sends, books, deletes, or takes a real-world action without your explicit approval, and it is not for patient health information.

Information we collect

Account details you provide when you request access or sign in — your name, email address, and optionally your clinical role, specialty, and NPI. Your messages with Diaand the context Dia keeps to be useful: durable preferences and facts you tell it (“memory”), interests you select, the iMessage handle you text from, and settings such as time zone and quiet hours. Connected-service data — only if you choose to connect Google (see below).

Google user data (Calendar & Gmail)

Connecting Google is optional. If you connect it, Dia requests read access to your Google Calendar and read-and-draft access to Gmail, so it can answer questions about your schedule and mail and prepare draft replies. Dia does not send email or create, edit, or delete calendar events without your explicit approval; today it reads and drafts, and any action that changes your mail or calendar happens only at your direction.

Limited Use disclosure.Diastole's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use your Google data only to provide and improve the user-facing features you ask Dia for; we do not transfer or sell it; we do not use it for advertising; and we do not use it to train generalized or foundation AI models. Google data is used transiently to fulfill your request and is not retained beyond what is needed to provide the feature.

How we use information

To operate Dia: understand your requests, recall relevant context, and produce helpful replies, drafts, suggestions, reminders, and proactive check-ins. To process your requests we send the relevant message and context to a third-party AI provider to generate Dia's response. We do not sell your personal information. Diastole does not currently show ads or use your information for advertising; if that ever changes, we will update this policy and obtain your consent where required. (This does not apply to your Google data, which is permanently governed by the Limited Use commitment above — never used for advertising, never sold, never used to train AI models.)

What we don't do

Dia is a non-clinical personal assistant plus a general clinical reference. We do not collect or store protected health information (PHI), patient identifiers, or any electronic health record data, and Dia is instructed not to accept or act on patient-specific clinical details. Clinical answers are general educational reference only.

Storage & security

Your data is stored in our managed database (Supabase) with row-level security, accessible only to our server using server-side credentials. Connections to our services and to Google are encrypted in transit. Secret keys and access tokens are stored server-side and never exposed to your browser.

Service providers

We rely on a small number of vendors to run Dia — for example, a cloud database and authentication provider, a messaging-delivery provider, a third-party AI model provider, an email-delivery provider, and Google (for Calendar and Gmail, only if you connect them). Each processes data only to provide its service to us, and we may change providers as the product evolves.

Your choices

You can disconnect Google at any time in the Diastole app, which revokes our access to your Calendar and Gmail. You can edit or remove what Dia remembers, turn off proactive check-ins, and ask us to delete your account and associated data. To make a request, email us at the address below.

Retention

We keep your account and conversation context while your account is active so Dia stays useful. When you disconnect Google we stop accessing that data; when you delete your account we delete your associated data.

Changes to this policy

We may update this policy as Diastole evolves — for example, if we add new features or change how information is used. We'll post the updated version here with a new date, and for material changes we'll provide notice and, where required, ask for your consent. Our commitments for Google user data under the Limited Use requirements will continue to apply for as long as we use those Google scopes.

Contact

Questions or requests: privacy@diastole.ai.

Diastole · diastole.ai