Last updated 22 August 2026
Your health record is stored on your phone. There is no account, no sign-in and no analytics, and no server holds your history. When you ask Elucra to explain a document, that one document is sent away to be read by an AI service. That is the only time your health information leaves your device, and it only happens when you ask for it.
All of it, by default. Your health profile, saved reports and their explanations, vaccine records, medications, appointments and saved places are written to your device's own storage. Your health card is held in the operating system's encrypted keychain and unlocked with Face ID, Touch ID or your device passcode.
Deleting the app deletes all of it. There is no copy elsewhere, and no way for anyone to restore it for you. The app offers an export file for exactly this reason.
Each service below receives only what is named, only for the feature named, and only when you use that feature.
| Service | What it receives | When |
|---|---|---|
Elucra API proxyclairity-api.clairity.workers.dev |
The document you chose, on its way to Anthropic. The proxy exists so the Anthropic credentials are not inside the app. It does not store documents or explanations. It does keep a count of requests per IP address for up to one hour, to stop one caller exhausting the service. Run on Cloudflare Workers. | Only when you scan a document or a health card |
Anthropic (Claude)api.anthropic.com |
When you scan a document or a health card: the photo or PDF, and nothing
else. No part of your profile is sent with it.
When you build a summary for your doctor: your age, gender, conditions, allergies and medications, so the summary reflects you. Your name is never sent, and neither is your province, smoking or alcohol status, occupation, family history or surgeries. Reached through the proxy above rather than directly. |
When you scan a document, or build a doctor summary |
Photon (OpenStreetMap)photon.komoot.io |
What you type into a clinic or location field, and your approximate coordinates if you tap the near-me control | While you type a place name |
Geoapifyapi.geoapify.com |
The same, if the app has been configured to use it instead of Photon | While you type a place name |
US National Library of Medicinerxnav.nlm.nih.gov, clinicaltables.nlm.nih.gov |
A medication name, to check its spelling and standard form | While you type a medication name |
openFDAapi.fda.gov |
A medication name, to look up its generic and brand names | When you save a medication |
Microsoft Azure Translatorapi.cognitive.microsofttranslator.com |
The text of an explanation, if you have chosen another language and the app has been configured with a translation key. Otherwise translation is done by Claude and nothing is sent to Microsoft. | Only when translating a report |
CDC and REST Countrieswwwnc.cdc.gov, restcountries.com |
A country name, for travel vaccine guidance. No health information. | When you open Travel |
Each of these is a third party with its own privacy policy, and what they do with what they receive is governed by their terms rather than this one.
Location is never requested unless you tap the near-me control on a place field, and it is used for one thing: ranking search results so a nearby clinic appears before one in another province. The coordinates are not saved, not written into any field, and not attached to any appointment. Declining the permission leaves everything working, just unranked.
Elucra is not directed at children under 13, and their information is not knowingly collected. A parent may of course keep a child's records on their own device.
Elucra explains what a document says. It does not diagnose, it does not decide what you should do, and it is not a substitute for your doctor, nurse or pharmacist. Explanations are generated by software and can be wrong. Every fact it shows links back to the place on the page it came from so that you can check it. Please do, especially for doses and numbers, and speak to a qualified clinician about anything that matters.
If this policy changes in a way that affects what leaves your device, the date at the top will change and the new version will be published here before the change ships.
Questions, or anything here that looks wrong: clairity.health@gmail.com