e-Zap Health Legal Information - Terms and Agreements

- Terms of Use
- End User License Agreement
- Medical Disclaimer
- A.I. Disclaimer
 

Terms of Use
Updated: 10th August 2026

Terms and conditions for the e-Zap Health mobile application

Company number: 17138117

Please read these Terms before continuing

These Terms form a contract between you and E-Zap Health Ltd. You are given an opportunity to read them before you actively accept them during verification. If you do not agree, do not accept the Terms or use the App.

The Privacy Policy is a separate notice explaining how personal information is handled. Accepting these Terms does not replace any separate consent required for Pulse AI.

Important points

  • The App is a personal record-keeping and healthcare-preparation tool. It is not a medical service, medical device, emergency service, diagnostic tool or substitute for a qualified healthcare professional.
  • Most records and Image Hub files are stored locally on your device. You are responsible for protecting the device and any copies or exports you create.
  • Pulse AI is optional. Before every Pulse review, you must separately give explicit consent to the described health-information processing.
  • On Apple devices, access is supplied through a paid App Store download. On Google Play, the download is free and a one-time in-app purchase is required at verification unless you qualify for grandfathered free access.
  • Your statutory consumer rights are not excluded or restricted by these Terms.

 

 

1. Who we are

These Terms are between you and E-Zap Health Ltd ("E-Zap Health", "we", "us" or "our"), the owner and operator of the App.

E-Zap Health Ltd is registered in England and Wales under company number 17138117.

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support, complaints and account enquiries: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com

2. Eligibility and personal use

You must be at least 16 years old to use the App. By accepting these Terms, you confirm that you meet this requirement and have legal capacity to enter into this contract.

The App is licensed for your personal, non-commercial use. It is not designed for use by a healthcare provider as a clinical record system, for occupational health decisions, insurance underwriting, medical research, or another regulated professional purpose.

Do not enter or process another person's health information unless you have lawful authority to do so and can comply with any duties that apply. A parent or guardian should not create a record for a child unless the intended use and applicable consent requirements have been properly assessed.

3. Access, verification and security

Access requires verification using an email address and a one-time code. Supabase supports authentication and secure sessions, and Resend supports delivery of verification emails. Further information appears in the Privacy Policy.

The local App PIN and your device passcode are separate protections. You must take reasonable steps to keep your device, email account, verification codes and PIN secure. Do not share a verification code or allow another person to use an unlocked App session.

Pulse may require session re-verification. Authentication, email delivery or network failures may temporarily prevent verification or access to features that depend on a secure session.

Because most records are stored locally, we may be unable to recover them if your device is lost, damaged, reset or inaccessible, if App data is removed, or if no usable backup exists.

4. Licence to use the App

Subject to these Terms and any applicable app-store rules, we grant you a limited, personal, non-exclusive, non-transferable and non-sublicensable licence to install and use the App on devices that you own or control for as long as you remain entitled to use it.

You may not copy, sell, rent, distribute, modify, create derivative works from, reverse engineer, decompile or attempt to extract source code from the App, except to the limited extent that applicable law expressly permits and does not allow that right to be excluded.

The licence does not transfer ownership of the App, branding, software, designs, databases, documentation or other intellectual property. Third-party and open-source components remain subject to their applicable licences.

5. Your records, Image Hub files and exports

5.1 Local records

The App enables you to create, organise and link information such as symptoms, diagnoses, medications, surgeries, tests and scans, appointments, profile information, wellbeing information, diet-related entries, notes and supporting images or documents.

You decide what to record and are responsible for checking the accuracy, completeness and continuing relevance of your entries. The App does not verify your records against a clinician's records and must not be treated as an authoritative medical record.

5.2 Image Hub

The Image Hub lets you select individual images or documents through your device's system picker. The current App does not scan your photo library in bulk, access images in the background or use the device camera.

Image Hub files remain locally stored. They may contain names, addresses, NHS numbers, insurance identifiers, dates of birth or other sensitive information. Consider cropping, redacting or obscuring identifiers that you do not need.

You must have the right to store and use each file. You remain responsible for files you choose to add, link, retain, export or share. We remain responsible for our own legal obligations and do not exclude liability where the law does not permit us to do so.

5.3 Reports, exports and sharing

The App may create summaries, charts or appointment-preparation documents locally. If you save, print, message, email or otherwise share an export, the copy leaves the App's local controls. You are responsible for choosing an appropriate recipient and a secure sharing method.

Deleting an App record does not delete copies already exported, printed, shared or stored elsewhere.

6. Pulse AI

6.1 Optional feature and per-review consent

Pulse AI is optional and is not required for the App's core local record functions. It operates only when you deliberately request a review.

Before each Pulse review, the App explains the information that may be processed. You must tick the separate explicit-consent statement and select “Accept and continue” before generation is enabled. That consent applies only to the individual review. A fresh consent is required for every later review.

If you cancel or do not consent, the request is not sent. You can withdraw before submission by cancelling. Withdrawal cannot undo processing already completed lawfully, but you can decline every future request.

6.2 Information used by Pulse

For a requested review, the App prepares a structured text payload from relevant records. It may include symptoms and their update histories, diagnoses, medications, surgeries, tests and scans, results, dates, relationships between records, free-text notes and recorded profile or lifestyle information.

Sensitive or identifying information that you type into a record or free-text note may be included. Avoid recording unnecessary names, addresses, NHS numbers, insurance identifiers or similar details in text that may be sent to Pulse.

The actual images and document files stored in Image Hub are not sent to or analysed by OpenAI in the current version. Pulse may receive a technical indicator that a file is linked to a record. The current scope is described more fully in the Privacy Policy and the on-screen consent notice.

6.3 Processing route

The request is routed through a Supabase Edge Function, which validates the secure session and protects the OpenAI API credential. OpenAI processes the submitted text and generates a response that is returned to the App.

OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. Provider retention and other data-handling details are explained in the Privacy Policy.

6.4 Usage and size limits

Standard Pulse access is normally limited to three completed requests within a rolling seven-day period. A different limit or a documented exemption may apply to a particular account, testing arrangement, promotional entitlement or service configuration.

We may use reasonable authentication, rate-limiting, request-monitoring and abuse-prevention controls. We may adjust a limit where reasonably necessary for security, legal compliance, infrastructure protection, service reliability or fair access. We will not use this clause to impose an undisclosed additional charge.

If the prepared payload exceeds the supported data limit, the review will not proceed. The App may ask you to review your records and remove information that you consider no longer relevant. Your local records are not changed unless you choose to edit or delete them.

6.5 Nature and limits of output

Pulse is designed to assist with organisation, chronology review, pattern awareness, record-quality observations, healthcare discussion points and suggested questions for a healthcare appointment.

  • Pulse does not diagnose, predict disease, triage, prescribe, recommend medication changes or provide a treatment plan.
  • Outputs may be incomplete, inaccurate, inconsistent, outdated, misleading or omit an important issue.
  • An output depends on the quality, completeness and wording of the records supplied.
  • An output is not clinician-reviewed and must not replace professional medical advice or clinical judgement.
  • Pulse does not make a decision that produces legal or similarly significant effects about you.

You may use a Pulse output for your personal organisation and healthcare discussions. Outputs may not be unique, and no ownership or exclusivity is promised in general information generated by an AI model.

7. Medical and emergency limitations

The App and Pulse are intended only as personal record-keeping, organisational and healthcare-preparation tools. They are not intended to be used as a medical device, healthcare service, clinical decision system or substitute for an appropriately qualified professional.

Do not use the App or Pulse to decide whether to seek care, to assess an emergency or acute deterioration, to diagnose a condition, to start or stop treatment, or to change medication.

Emergency warning

If you believe that you or another person may need emergency medical help, contact the appropriate emergency service immediately. In the United Kingdom, call 999 for an emergency. For urgent but non-emergency help, use NHS 111 or the relevant local urgent-care service. Do not wait for the App or Pulse.

8. Purchases, access entitlement and refunds

8.1 Apple App Store

On Apple devices, the App is supplied as a paid App Store download. Apple processes the purchase, payment method, receipt and store account under its terms. The price and applicable taxes are shown by Apple before purchase.

8.2 Google Play

On Google Play, the App is free to download. If you do not qualify for grandfathered free access, you must complete the applicable one-time Google Play in-app purchase during verification before full access is provided.

The Google purchase is intended to be a non-consumable, one-time access purchase rather than a recurring subscription. Google processes the payment method and transaction under its terms. The price and applicable taxes are shown in the Google Play purchase interface before you confirm.

8.3 Grandfathered free access

A person who installed and used the App while access was free may continue to qualify for free access. We may recognise that eligibility using the verified email address, authentication user ID and an entitlement record.

Deleting local App data, reinstalling the App or returning to verification should not by itself cause an eligible person to be charged again, provided the relevant entitlement can still be recognised.

You may ask for remote authentication and entitlement information to be erased. If the record used to recognise grandfathered access is erased, we may no longer be able to prove or restore that free entitlement. A later verification or reinstall may then be treated as a new access request and the applicable Google Play purchase may be required. We will explain this consequence before completing a verified erasure request where it applies.

8.4 Store records, restoration and refunds

Apple and Google control their own store accounts, payment records and purchase histories. The App's local deletion function and an erasure request sent only to us do not delete records independently controlled by a store provider.

Any purchase restoration is subject to the relevant store account, purchase status and the App's entitlement checks. Contact support@ezaphealth.com if you believe a valid entitlement has not been recognised.

Refund requests may be administered through Apple, Google or us, depending on the platform and circumstances. Store policies do not remove any cancellation, refund or other remedy that applicable consumer law gives you.

The App does not currently offer an automatically renewing subscription. If a subscription is introduced in future, its price, renewal period, cancellation method and other material terms will be disclosed before purchase and separate terms will be provided where required.

9. Acceptable use

You must not:

  • use the App unlawfully, fraudulently or in a way that infringes another person's rights;
  • attempt unauthorised access, interfere with security, probe vulnerabilities, introduce malicious code or disrupt the App or its providers;
  • automate, overload or manipulate Pulse requests, bypass usage limits or safety controls, or expose or misuse service credentials;
  • use Pulse to seek diagnosis, emergency triage, prescriptions, medication instructions or other output that the feature is not designed to provide;
  • submit unlawful, abusive or deliberately misleading material through a networked feature;
  • use another person's health information without lawful authority; or
  • copy, resell or commercially exploit the App or Pulse output except where applicable law expressly permits.

We may take proportionate steps to protect users, providers and the service, including rejecting a request, restricting a networked feature or suspending access in accordance with section 13.

10. Your content and our limited permission

You retain any rights you hold in records, notes, images and documents that you enter or select. You give the App only the permission technically necessary to store and process that content on your device and to perform the functions you request.

When you request Pulse, you give us and the relevant processors a limited permission to transmit and process the submitted payload solely to provide, secure and support that review, subject to the Privacy Policy and your per-review consent.

You confirm that you have the right to use content you enter, select, export or submit and that doing so will not unlawfully infringe another person's privacy, confidentiality or intellectual-property rights.

11. Third-party services and app stores

Some functions depend on third parties, including Apple, Google, Supabase, Resend, Firebase Crashlytics and OpenAI. Their services may be subject to their own terms and privacy notices.

You must comply with applicable app-store and device-platform rules. Mobile network or internet charges imposed by your provider are your responsibility.

Apple and Google are not parties to these Terms and do not provide our customer support. Their responsibilities for distribution, payments, refunds or warranties are governed by applicable law and their own platform terms.

If Apple supplies the App under its standard end-user licence, that licence also applies. If a custom app-store licence is adopted later, any required platform-specific provisions will be provided through the relevant store.

12. Availability, maintenance and changes to the App

We use reasonable care and skill in providing the App, but we do not promise that every function will always be available, uninterrupted or error-free. Networked features may be delayed or unavailable because of maintenance, security action, third-party outages, connectivity problems, legal requirements or circumstances outside our reasonable control.

We may release updates to fix defects, improve security, maintain compatibility, comply with law or platform rules, change providers, manage capacity or improve functionality. You may need to install an update to continue using a networked feature safely.

We may modify or discontinue a feature for a valid reason. Where a change materially reduces paid functionality, we will provide reasonable notice where practicable and respect any remedy required by consumer law. Security or legal emergencies may require immediate action.

Compatibility may change as devices and operating systems evolve. We will not deliberately misdescribe supported requirements, and this section does not exclude statutory rights concerning digital content or services.

13. Suspension, termination and ending use

You may stop using the App at any time. You can remove local data using the App's deletion control and may then uninstall the App. Ending use does not automatically erase independently held store, authentication or provider records.

We may restrict a networked feature or suspend access where we reasonably believe this is necessary because of a serious or repeated breach of these Terms, fraud, unlawful use, a security threat, abuse of Pulse, non-payment, a platform requirement or a legal obligation.

Our action will be proportionate. Where reasonably possible, we will explain the reason and allow an opportunity to correct a remediable breach. We may act immediately where delay could create legal, safety, security or service-integrity risk.

Termination does not remove rights or liabilities that arose beforehand. If paid access is withdrawn without a breach by you, any refund or other remedy required by consumer law remains available.

14. Deleting local App data and remote erasure

14.1 What the local deletion function does

The full local deletion function is designed to erase App information stored locally on the device, including symptoms, diagnoses, medications, surgeries, tests and scans, appointments, profile information, diet and wellbeing entries, Image Hub records and files, relationship data, local visibility settings, local PIN and onboarding state, and the local Supabase session.

When the process completes, you are signed out and returned to the email-verification stage.

14.2 What it does not do

  • It does not automatically delete the Supabase authentication user, verified email, remote entitlement record or Pulse usage metadata.
  • It does not delete Apple or Google store accounts, receipts, purchase history or transaction records.
  • It does not immediately delete provider logs that remain within an applicable retention period.
  • It does not delete material that you exported, printed, messaged, emailed, saved elsewhere or placed in a device or cloud backup.
  • It does not delete information held by a healthcare provider or another independent third party.

14.3 Requesting remote erasure

To request erasure of authentication or other information held under our control, email support@ezaphealth.com from the relevant address or identify it clearly. You may use “Email removal” as the subject, but no particular wording is required.

We may ask for proportionate evidence that you control the address. We will explain an important consequence, including possible permanent loss of grandfathered free access, before completing a verified request where it applies. The Privacy Policy contains further details.

15. Privacy

Our Privacy Policy explains what information is processed, why, where it is stored, who receives it, applicable retention arrangements and how to exercise data-protection rights.

You confirm separately that you have read and understood the Privacy Policy. It is available at https://www.ezaphealth.com/privacy-policy/.

Pulse requires a separate explicit consent for each review. General acceptance of these Terms is not treated as that Pulse consent.

16. Consumer rights and warranties

Nothing in these Terms affects rights and remedies that cannot lawfully be excluded. Depending on the circumstances, UK consumer law may require paid digital content to be of satisfactory quality, fit for a disclosed purpose and as described, and services to be performed with reasonable care and skill.

If the App does not conform to an applicable statutory right, you may be entitled to repair or replacement, a price reduction, a refund or compensation for qualifying damage to a device or other digital content. The available remedy depends on the facts and applicable law.

Contact support@ezaphealth.com if you believe the App is faulty or materially misdescribed. Apple or Google may administer a store refund, but responsibility cannot be excluded merely because a store processes the transaction.

17. Our responsibility to you

We are responsible for loss or damage that is a foreseeable result of our breach of these Terms or our failure to use reasonable care and skill. Loss is foreseeable if it was an obvious consequence or both you and we knew it might occur when the contract was made.

The App is supplied for personal use. We are not responsible for business losses, including lost profit, revenue, opportunity, goodwill or business interruption, arising from use that falls outside the permitted personal purpose.

We are not responsible for a loss caused solely by inaccurate or incomplete information entered by you, your failure to follow reasonable security or backup guidance, an unauthorised person using an unlocked device, or a third-party service failure outside our reasonable control. This does not apply to the extent that our breach or negligence caused or contributed to the loss.

The medical and Pulse limitations in these Terms describe the intended purpose of the App; they do not excuse us from liability that applicable law imposes.

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of your statutory consumer rights, or any other liability that cannot legally be excluded or limited.

18. Complaints and support

For support or a complaint, email support@ezaphealth.com and explain the feature involved, what happened and the outcome you seek. We will investigate and respond within a reasonable time.

A privacy complaint is handled as described in the Privacy Policy. You may also have the right to contact the Information Commissioner's Office about data protection.

Nothing in this section prevents you from using any court, regulator, app-store process or other remedy available under applicable law.

19. Changes to these Terms

We may update these Terms for a valid reason, including a change in law, regulation, security, providers, platform requirements, pricing model or App functionality, or to improve clarity and correct an error.

We will publish the updated Terms with a new effective date. Where a change is material, we will give reasonable in-App or website notice and request fresh acceptance where required. We will not use a variation clause as a blank cheque to remove accrued rights or impose an undisclosed retrospective charge.

If you do not accept a material change, you may stop using the App. Any statutory remedy connected with paid access remains unaffected.

20. Governing law and courts

These Terms are governed by the law of England and Wales. If you are a consumer resident elsewhere, you retain any mandatory protections given by the law of your home country.

The courts of England and Wales may hear disputes. If you live in Scotland, Northern Ireland or another country whose mandatory consumer law gives you the right to bring proceedings locally, you may also use those courts.

21. General legal terms

21.1 Entire agreement

These Terms, the applicable store licence and any purchase information shown before payment form the contractual framework for using the App. The Privacy Policy separately explains data handling. Nothing in this section excludes liability for fraud or removes rights arising from information that the law makes binding.

21.2 Transfer

We may transfer our rights and obligations to another organisation in connection with a genuine business transfer or reorganisation, provided this does not reduce your rights. We will notify you where required. You may transfer your rights only where applicable law or the relevant app-store rules permit.

21.3 No waiver

If either party delays enforcing a right, that does not mean the right has been waived.

21.4 Severability

If a court finds part of these Terms unlawful or unenforceable, the remaining provisions continue to apply. Any affected provision will be interpreted as narrowly as necessary to make it lawful where the law permits.

21.5 Third-party rights

Except for rights expressly granted under applicable app-store terms, a person who is not a party to these Terms has no right to enforce them.

22. Contact us

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support, complaints and account enquiries: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com


 

 

Pulse provider storage control

For each production Pulse request, E-Zap Health instructs OpenAI not to store the response as retrievable Responses application data. Separate provider security and abuse-monitoring retention may still apply for a limited period as explained in the Privacy Policy.

This safeguard does not make the submitted information anonymous. Direct account identifiers are not intentionally included, but free text may identify a person and restricted technical correlation with separate account/consent records may be possible. E-Zap Health prohibits routine access and any change that permits retrievable response storage requires prior documented privacy review and approval.

End User License Agreement
Last updated: 10th August 2026

Software licence for the e-Zap Health mobile application

Company number: 17138117

Please read this licence before using the App

This End User Licence Agreement (EULA) governs your licence to install and use the e-Zap Health software. The separate Terms of Use govern the service, purchases and user conduct. The Privacy Policy explains personal-information handling.

Where the App or an app store presents this EULA for acceptance, selecting the acceptance control indicates agreement. If you do not agree, do not install or use the App. Nothing in this EULA removes a cancellation, refund or other right that applicable law gives you.

Important licence points

  • The App is licensed, not sold. You receive a limited licence for personal, non-commercial use.
  • Most health records and Image Hub files are stored locally on your device and may be unrecoverable if no usable backup exists.
  • Pulse AI is optional and requires separate explicit consent before every individual review.
  • The App and Pulse are organisational tools, not medical, diagnostic, emergency or clinical decision services.
  • Mandatory consumer rights and applicable app-store protections continue to apply.


 

1. Parties and related documents

This EULA is between you and E-Zap Health Ltd ("E-Zap Health", "we", "us" or "our"), the owner and licensor of the App. It is not an agreement with a software-development contractor, infrastructure provider or app-store operator.

E-Zap Health Ltd is registered in England and Wales under company number 17138117. Its registered office and contact details appear in section 23.

This EULA, the Terms of Use, applicable purchase information and applicable app-store terms should be read together. The Privacy Policy is a separate notice about personal-information processing and does not replace any consent required for Pulse.

If provisions conflict, mandatory law and mandatory app-store rules take priority. Subject to that, this EULA controls the software licence, the Terms of Use control service use and purchases, and the Privacy Policy describes data handling.

2. Eligibility and authority

You must be at least 16 years old and have legal capacity to accept this EULA. You may install and use the App only for yourself unless applicable app-store rules expressly permit another authorised user, such as through Family Sharing.

The App is not licensed for use as a healthcare provider's clinical record system, for occupational-health decisions, insurance underwriting, medical research or another regulated professional purpose.

Do not enter or process another person's health information unless you have lawful authority and can comply with any duties that apply.

3. Licence grant

Subject to this EULA, the Terms of Use, applicable app-store usage rules and your continuing entitlement, we grant you a limited, personal, non-exclusive, non-transferable and non-sublicensable licence to install and use the App on compatible devices that you own or control.

The licence is for lawful, personal and non-commercial use. It includes updates that we make available to you unless an update is accompanied by a replacement licence.

The licence does not transfer ownership of the App or its intellectual property. It continues until you stop using the App or it ends in accordance with section 15. We will not treat the licence as arbitrarily revocable.

Any sharing, volume-purchase, managed-device or household use expressly allowed by a platform's usage rules is permitted to the extent required by those rules.

4. Ownership and reservation of rights

The App, including its software, source and object code, interfaces, design, branding, databases, documentation and original content framework, is owned by or licensed to E-Zap Health. Third-party and open-source components remain subject to their respective licences.

Except for the limited licence expressly granted in this EULA, all rights in the App are reserved. No right to source code, branding, trade marks, patents, designs, databases or confidential technical material is granted.

5. Licence restrictions

Except to the limited extent that applicable law or an applicable open-source licence expressly permits and does not allow the restriction to be excluded, you must not:

  • copy, reproduce, republish, distribute, sell, rent, lease, lend, sublicense or commercially exploit the App;
  • modify, translate, adapt, create derivative works from, reverse engineer, decompile, disassemble or attempt to extract the App's source code;
  • remove, obscure or alter ownership, trade-mark, copyright or other proprietary notices;
  • circumvent technical protection, authentication, payment, entitlement, usage-limit or security controls;
  • probe vulnerabilities, introduce malicious code, interfere with operation, overload networked features or gain unauthorised access to the App or related systems;
  • use the App unlawfully, fraudulently, abusively or in a way that infringes another person's rights; or
  • use the App or an output to provide a regulated professional service for which it is not designed.

6. Your records and limited permission

You retain any rights you hold in records, notes, images and documents that you enter or select. You are responsible for having the right to use that material.

You give the App only the permission technically necessary to store and process that material locally and to perform functions that you request. When you request Pulse, you give us and the relevant processors a limited permission to transmit and process the submitted text payload solely to provide, secure and support that review, subject to the Privacy Policy and your per-review consent.

This permission does not transfer ownership of your health records or permit us to use them for advertising or unrelated model training.

7. Local records, Image Hub and exports

7.1 Local storage

The App enables you to create and link information including symptoms, diagnoses, medications, surgeries, tests and scans, appointments, profile information, wellbeing and diet entries, notes and supporting files. Most of this information is stored locally on your device.

You are responsible for checking the accuracy and continuing relevance of your entries and for protecting your device. The App does not verify your entries against a clinician's record and is not an authoritative medical record.

We may be unable to recover local records if the device is lost, damaged, reset or inaccessible, if App data is removed, or if no usable device or cloud backup exists.

7.2 Image Hub

The Image Hub uses the device's system picker to let you select individual images or documents. The current App does not scan the photo library in bulk, access images in the background or use the device camera.

Image Hub files remain stored locally and may contain identifying or sensitive information. Consider cropping, redacting or obscuring information that is not needed. You remain responsible for files you add, link, retain, export or share.

7.3 Exports

If you save, print, message, email or otherwise share a report, image or document, the copy leaves the App's local controls. Choose an appropriate recipient and secure sharing method. Deleting an App record does not delete a copy already exported or stored elsewhere.

8. Pulse AI

8.1 Optional use and per-review consent

Pulse is optional and is not required for the core local record functions. It operates only when you deliberately request a review.

Before each review, the App explains the information that may be processed. You must select the separate explicit-consent statement and then select “Accept and continue” before generation is enabled. Consent applies only to that review and is requested again for each later review.

If you cancel or do not consent, the request is not sent. You may withdraw before submission by cancelling. Withdrawal cannot undo processing already completed lawfully.

8.2 Information and processing route

For a requested review, the App prepares a structured text payload from relevant records. It may include symptoms and update histories, diagnoses, medications, surgeries, tests and scans, results, dates, relationships between records, free-text notes and recorded profile or lifestyle information.

Sensitive or identifying information typed into a record or free-text note may be included. Avoid entering unnecessary names, addresses, NHS numbers, insurance identifiers or similar details in text that may be sent to Pulse.

Actual Image Hub images and document files are not sent to or analysed by OpenAI in the current version. Pulse may receive a technical indicator that a file is linked to a record.

The request is routed through a Supabase Edge Function, which validates the secure session and protects the OpenAI API credential. OpenAI processes the submitted text and returns a generated response. The Privacy Policy explains provider retention and data handling.

8.3 Usage and size limits

Standard Pulse access is normally limited to three completed requests in a rolling seven-day period. A documented exemption or different service configuration may apply to a particular account.

Reasonable authentication, rate-limiting, monitoring and abuse-prevention controls may apply. If the prepared payload exceeds the supported limit, the review will not proceed. The App may ask you to review your records, but no local record is changed unless you choose to edit or delete it.

8.4 Output limitations

Pulse is designed to assist with organisation, chronology review, pattern awareness, record-quality observations, healthcare discussion points and suggested questions.

  • Pulse does not diagnose, predict disease, triage, prescribe, recommend medication changes or provide a treatment plan.
  • Outputs may be incomplete, inaccurate, inconsistent, outdated, misleading or omit an important issue.
  • Outputs depend on the quality, completeness and wording of the records supplied.
  • Outputs are not clinician-reviewed and must not replace professional medical advice or clinical judgement.
  • Pulse does not make a decision that produces legal or similarly significant effects about you.

9. Medical and emergency limitations

The App and Pulse are intended only as personal record-keeping, organisational and healthcare-preparation tools. They are not intended to be a medical device, healthcare service, diagnostic system, emergency service, treatment tool or clinical decision system.

Do not use the App or Pulse to decide whether to seek care, assess an emergency or acute deterioration, diagnose a condition, start or stop treatment, or change medication.

Emergency warning

If you believe that you or another person may need emergency medical help, contact the appropriate emergency service immediately. In the United Kingdom, call 999 for an emergency. For urgent but non-emergency help, use NHS 111 or the relevant local urgent-care service. Do not wait for the App or Pulse.

10. Authentication and security

Access may require an email address and one-time verification code. Supabase supports authentication and secure sessions, and Resend supports verification-email delivery.

The local App PIN and your device passcode are separate protections. Keep your device, email account, verification codes and PIN secure. Do not share verification codes or allow another person to use an unlocked App session.

Pulse may require session re-verification. Authentication, network or email-delivery failures may temporarily prevent access to features that depend on a secure session.

11. Updates, compatibility and availability

We may provide updates to fix defects, improve security, maintain compatibility, comply with law or platform rules, change providers, manage capacity or improve functionality. You may need to install an update to continue using a networked feature safely.

We may modify or discontinue a feature for a valid reason. Where a change materially reduces paid functionality, we will provide reasonable notice where practicable and respect any remedy required by consumer law. Security or legal emergencies may require immediate action.

We use reasonable care and skill but do not promise that every function will always be available, uninterrupted or error-free. Networked features may be affected by maintenance, third-party outages, connectivity, security action, legal requirements or circumstances outside our reasonable control.

Compatibility may change as devices and operating systems evolve. This section does not exclude statutory rights concerning digital content or services.

12. Purchases and access entitlement

12.1 Apple

On Apple devices, the App is supplied through a paid App Store download. Apple processes the purchase, payment method, receipt and store account under its terms. The price and applicable taxes are shown before purchase.

12.2 Google Play

On Google Play, the App is free to download. Unless you qualify for grandfathered free access, full access requires a non-consumable, one-time Google Play in-app purchase during verification.

Google processes the payment method and transaction under its terms. The price and applicable taxes must be shown in the Google Play purchase interface before confirmation. The App does not currently offer an automatically renewing subscription.

12.3 Grandfathered access and restoration

A person who installed and used the App while access was free may continue to qualify for free access. Eligibility may be recognised through the verified email address, authentication user ID and an entitlement record.

Deleting local App data, reinstalling or returning to verification should not by itself cause an eligible person to be charged again if the entitlement can still be recognised.

Purchase restoration depends on the relevant store account, transaction status and entitlement checks. Apple and Google independently control their store accounts, receipts and purchase histories.

12.4 Refunds and consumer rights

Refunds may be administered through Apple, Google or us, depending on the platform and circumstances. Store policies do not remove any cancellation, refund or other remedy that applicable consumer law gives you.

13. Local deletion and remote erasure

The full local deletion function is designed to erase App information stored locally on the device, including health records, profile information, Image Hub records and files, relationship data, local settings, local PIN, onboarding state and the local Supabase session. It then signs you out and returns the App to email verification.

Local deletion does not automatically delete the Supabase authentication user, verified email, remote entitlement record, Pulse usage metadata, provider logs within an applicable retention period, store accounts, receipts, purchase histories, exports, backups or information held independently by another party.

To request erasure of authentication or other information held under our control, email support@ezaphealth.com. We may verify control of the address. If erasure would permanently remove evidence of grandfathered free access, we will explain that consequence before completing a verified request where it applies.

14. Third-party services and terms

Some functions depend on third parties, including Apple, Google, Supabase, Resend, Firebase Crashlytics and OpenAI. Their services may be subject to their own terms and privacy notices.

You must comply with applicable app-store, operating-system, network and device-provider terms when using the App. Mobile network or internet charges imposed by your provider are your responsibility.

We remain responsible for obligations that applicable law places on us and do not avoid responsibility merely by using a contractor or service provider.

15. Suspension, termination and ending use

You may stop using the App at any time. You may delete local data and uninstall the App. Ending use or uninstalling does not automatically erase independently held authentication, entitlement, provider or store records.

We may restrict a networked feature or suspend or terminate the licence where we reasonably believe this is necessary because of a serious or repeated breach, fraud, unlawful use, a security threat, abuse of Pulse, non-payment, a platform requirement, a legal obligation or discontinuation that makes continued supply impracticable.

Our action will be proportionate. Where reasonably possible, we will explain the reason and allow an opportunity to correct a remediable breach. We may act immediately where delay could create legal, safety, security or service-integrity risk.

When the licence ends, you must stop using and uninstall the App unless applicable law permits continued use. Rights and liabilities that arose beforehand survive. If paid access is withdrawn without a breach by you, any refund or remedy required by consumer law remains available.

16. Consumer rights and warranties

Nothing in this EULA affects rights and remedies that cannot lawfully be excluded. Depending on the circumstances, UK consumer law may require paid digital content to be of satisfactory quality, fit for a disclosed purpose and as described, and services to be performed with reasonable care and skill.

If the App does not conform to an applicable statutory right, you may be entitled to repair or replacement, a price reduction, refund or compensation for qualifying damage. The remedy depends on the facts and applicable law.

Contact support@ezaphealth.com if you believe the App is faulty or materially misdescribed.

For an Apple-distributed copy, if the App fails to conform to an applicable warranty, you may notify Apple and Apple may refund the App's purchase price under its terms. To the maximum extent permitted by law, Apple has no other warranty obligation for the App. E-Zap Health remains responsible for other claims, losses or obligations attributable to a failure to conform to an applicable warranty.

17. Our responsibility to you

We are responsible for loss or damage that is a foreseeable result of our breach of this EULA or our failure to use reasonable care and skill. Loss is foreseeable if it was an obvious consequence or both you and we knew it might occur when the contract was made.

The App is licensed for personal use. We are not responsible for business losses, including lost profit, revenue, opportunity, goodwill or business interruption, arising from use outside that permitted purpose.

We are not responsible for loss caused solely by inaccurate or incomplete information entered by you, failure to follow reasonable security or backup guidance, an unauthorised person using an unlocked device, or a third-party failure outside our reasonable control. This does not apply to the extent that our breach or negligence caused or contributed to the loss.

The medical and Pulse limitations describe the App's intended purpose; they do not excuse us from liability imposed by law.

Nothing excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of statutory consumer rights, or another liability that cannot legally be excluded or limited.

18. Platform-specific provisions

18.1 Apple-distributed copies

This EULA is between you and E-Zap Health, not Apple. E-Zap Health, not Apple, is responsible for the App and its content. Unless E-Zap Health separately adopts a custom EULA through App Store Connect, Apple's Standard EULA also applies to an Apple-distributed copy.

The licence for an Apple-distributed copy is limited to use on Apple-branded products that you own or control, as permitted by the Apple Media Services Terms and Conditions and applicable Usage Rules. Access through Family Sharing, volume purchasing, Legacy Contacts or another Apple-authorised arrangement is permitted to the extent required by those rules.

E-Zap Health is responsible for maintenance and support required by this EULA or applicable law. Apple has no obligation to provide maintenance or support for the App.

E-Zap Health, not Apple, is responsible for addressing claims relating to the App or its possession or use, including product-liability claims, claims that the App fails to comply with law, and consumer-protection, privacy or similar claims.

If a third party claims that the App or its possession or use infringes intellectual-property rights, E-Zap Health, not Apple, is responsible for investigating, defending, settling and discharging that claim, subject to applicable law.

Apple and its subsidiaries are third-party beneficiaries of this EULA for an Apple-distributed copy and may enforce the applicable provisions against you after acceptance.

18.2 Google Play copies

This EULA is between you and E-Zap Health, not Google. Google is not responsible for maintenance, support, medical or AI outputs, or claims concerning the App, except for obligations imposed on Google by its own terms or applicable law.

Use of a Google Play copy must comply with Google Play's terms. Google controls its store account, billing interface, purchase history and any purchase process that it administers.

19. Legal and trade compliance

You must not use or export the App in breach of applicable sanctions, export-control or trade laws.

For an Apple-distributed copy, you represent that you are not located in a country or region subject to a United States Government embargo or designated as supporting terrorism, and are not listed on a United States Government prohibited- or restricted-party list.

20. Changes to this EULA

We may update this EULA for a valid reason, including a change in law, security, providers, platform requirements, pricing model or App functionality, or to improve clarity and correct an error.

We will publish the updated EULA with a new effective date. Where a change is material, we will provide reasonable in-App, app-store or website notice and request fresh acceptance where required. We will not use this clause to remove accrued rights or impose an undisclosed retrospective charge.

If you do not accept a material change, you may stop using the App. Statutory remedies connected with paid access remain unaffected.

21. Governing law and courts

This EULA is governed by the law of England and Wales. If you are a consumer resident elsewhere, you retain mandatory protections given by the law of your home country.

The courts of England and Wales may hear disputes. If you live in Scotland, Northern Ireland or another country whose mandatory consumer law gives you the right to bring proceedings locally, you may also use those courts.

22. General legal terms

22.1 Entire licence agreement

This EULA and applicable app-store usage rules form the agreement concerning your software licence. The Terms of Use separately govern the service and purchases, and the Privacy Policy separately explains data handling. Nothing excludes liability for fraud or removes rights arising from information that the law makes binding.

22.2 Transfer

We may transfer our rights and obligations to another organisation in connection with a genuine business transfer or reorganisation, provided this does not reduce your rights. We will notify you where required. You may transfer your rights only where applicable law or app-store rules permit.

22.3 No waiver

If either party delays enforcing a right, that does not mean the right has been waived.

22.4 Severability

If a court finds part of this EULA unlawful or unenforceable, the remaining provisions continue to apply. An affected provision will be interpreted as narrowly as necessary to make it lawful where the law permits.

22.5 Third-party rights

Except for Apple and its subsidiaries as described in section 18.1, and any right expressly granted under mandatory app-store terms, a person who is not a party to this EULA has no right to enforce it.

23. Contact us

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support, complaints and licence enquiries: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com


 

Pulse provider storage control

For each production Pulse request, E-Zap Health instructs OpenAI not to store the response as retrievable Responses application data. Separate provider security and abuse-monitoring retention may still apply for a limited period as explained in the Privacy Policy.

This safeguard does not make the submitted information anonymous. Direct account identifiers are not intentionally included, but free text may identify a person and restricted technical correlation with separate account/consent records may be possible. E-Zap Health prohibits routine access and any change that permits retrievable response storage requires prior documented privacy review and approval.

Medical Disclaimer
Last updated: 27th July 2026

Company number: 17138117

Please read this safety information before using the App
This notice explains the intended medical role and important limitations of e-Zap Health and Pulse AI. It should be read with the Terms of Use, End User Licence Agreement, Privacy Policy and the separate consent information shown before each Pulse review. It is not a blanket exclusion of E-Zap Health's legal responsibilities or your statutory rights.

Key safety points

The App is a personal record-keeping, organisation and healthcare-preparation tool. It is not a healthcare service or substitute for professional care.

The App and Pulse do not diagnose, predict disease, triage, prescribe, confirm medication safety or provide a treatment plan.

Pulse output is generated automatically and is not reviewed or approved by a doctor or other healthcare professional.

The App does not continuously monitor you, detect deterioration, contact a clinician or summon emergency assistance.

Do not delay seeking care, change medication or disregard professional instructions because of anything shown—or not shown—in the App.

For a life-threatening emergency in the United Kingdom, call 999. For urgent help that is not an emergency, use NHS 111 or the appropriate local urgent-care service.

1. Purpose and scope of this notice

This Medical Disclaimer and Safety Notice describes the intended medical role and safety limitations of the e-Zap Health mobile application (the App), including its optional Pulse AI feature.

The App enables an individual to record, organise, update and link information such as symptoms, diagnoses, medications, surgeries, tests and scans, appointments, profile and lifestyle information, wellbeing and diet entries, notes and supporting files. It can display timelines, summaries, charts, relationships and documents prepared from information recorded by the user.

Those functions are intended to support personal record-keeping and preparation for healthcare conversations. They do not turn the App into an authoritative clinical record, medical assessment, diagnostic system, treatment service or emergency service.

The App is licensed for personal use. It is not intended to be used by a healthcare provider as its clinical record system or as the basis for regulated professional decision-making.

2. Not medical advice or clinical decision support

Nothing in the App or Pulse is medical advice. A label, summary, timeline, chart, relationship, pattern observation, discussion point, suggested question or generated report must not be interpreted as:

a diagnosis or confirmation that a condition is present or absent;

an assessment of urgency, deterioration, prognosis or personal medical risk;

a prescription, treatment plan or recommendation to start, stop or change treatment;

confirmation that a medicine, dose, test, screening programme or procedure is appropriate or safe; or

a substitute for examination, investigation or judgement by a qualified healthcare professional.

A healthcare professional can consider information that you choose to share, but must independently verify it and use their own clinical judgement. If App content conflicts with professional advice, a prescription, a medicines label or an official care plan, follow the professional or official instruction and seek clarification from the relevant clinician or pharmacist.

3. Pulse AI: intended role

Pulse is an optional, user-initiated feature. It is not required for the App's core local record functions. Before each review, the App presents separate information and requests explicit consent for that individual review.

For a requested review, the App prepares a structured text payload from relevant records. Depending on what has been recorded, this may include symptoms and update histories, diagnoses, medications, surgeries, tests and scans, results, dates, relationships between records, free-text notes and profile or lifestyle information. Actual Image Hub images and document files are not sent to or analysed by OpenAI in the current version, although a technical indicator that a file is linked to a record may be included.

Pulse is designed to help organise chronology, identify record patterns or gaps, highlight matters that may be useful to discuss and suggest questions for a healthcare appointment. It may use careful phrases such as 'may be worth discussing'. Such wording is an invitation to ask a qualified professional, not a medical recommendation or conclusion.

Pulse is not designed to:

diagnose or rule out a disease or condition;

calculate or communicate a patient-specific probability, prognosis or risk score;

provide emergency or urgency triage;

recommend a medicine, dose, treatment, investigation or procedure;

determine eligibility for screening, treatment or referral;

replace a consultation, physical examination, test interpretation or clinician review; or

make a decision that produces legal or similarly significant effects about the user.

4. Limitations of AI-generated output

Pulse output is produced automatically by statistical and machine-learning systems. No doctor, pharmacist, nurse or other healthcare professional reviews or approves an individual Pulse response before it is shown.

AI-generated output may:

be inaccurate, incomplete, inconsistent, ambiguous, outdated or misleading;

omit an important event, symptom, relationship, contraindication, red flag or alternative explanation;

give undue weight to an entry or identify a pattern that is coincidental or not clinically meaningful;

fail to identify a pattern that a qualified professional would consider important;

misunderstand shorthand, spelling, dates, context, negation or free-text notes;

vary between requests even where the underlying records are similar; and

refer to general healthcare concepts that are not appropriate to the user's individual circumstances.

Pulse does not have a complete clinical picture. It cannot examine the user, ask all clinically necessary follow-up questions, verify entries against NHS or clinician records, or know information that has not been recorded. It may not have access to the most recent clinical guidance or local service arrangements.

The absence of a warning, observation or discussion point is not reassurance that a record is complete, a condition is absent, a symptom is safe or no medical attention is needed.

5. No monitoring, alerts or emergency response

The App does not continuously monitor health, vital signs, behaviour, location or device sensors. It does not watch for deterioration in the background and does not guarantee that it will recognise urgent symptoms, abnormal values, dangerous combinations or a medical emergency.

The App and Pulse do not contact a GP, pharmacist, hospital, emergency service, family member or carer. They do not summon an ambulance or create a monitored clinical alert. Do not wait for an App notification or Pulse response before seeking help.

Emergency and urgent care
If you believe that you or another person may need emergency medical help, call the appropriate emergency service immediately. In the United Kingdom, call 999 for a life-threatening emergency. For urgent medical help that is not an emergency, use NHS 111 or the relevant local urgent-care service. If you are outside the United Kingdom, use the emergency and urgent-care services for your location.

6. Medication safety

The App can store medication names, dose information, dates, links and user-recorded adherence information. Recording or displaying that information does not verify that a medicine or dose was prescribed, entered correctly, taken correctly or remains suitable.

The App and Pulse do not reliably check or confirm:

medicine identity, strength, formulation, route, timing or dose;

interactions between medicines, supplements, food, alcohol or health conditions;

allergies, contraindications, side effects or pregnancy and breastfeeding considerations;

kidney, liver or other factors that may affect medication safety;

whether a missed, repeated or exceeded dose requires a particular action; or

whether a medicine should be started, stopped, continued or changed.

Never start, stop, repeat, reduce, increase or otherwise change medication because of App content or a Pulse response. Ask a qualified prescriber or pharmacist. If you suspect an overdose, serious reaction or medical emergency, seek urgent professional help immediately.

7. Symptoms, diagnoses, tests, scans and procedures

Symptoms, diagnoses, tests, scan details, results, surgeries and procedures are recorded or selected by the user. Their presence in the App does not mean that E-Zap Health, Pulse or a healthcare professional has verified them.

The App does not independently diagnose symptoms, confirm a diagnosis, interpret an actual medical image or document, validate a laboratory reference range, or determine the clinical significance of a test or scan result. A result recorded as normal does not rule out illness, and a result recorded as abnormal does not by itself establish a diagnosis.

Dates, status labels and relationships between records are organisational. A linked record does not prove causation, and an unlinked record does not prove that no clinical relationship exists. Editing, deleting or failing to link a record can change the context available to summaries and Pulse.

8. Profile, lifestyle, wellbeing and diet information

Profile, age, lifestyle, wellbeing, diet, blood-pressure and similar entries may be self-reported, manually entered or calculated from user-provided values. They are not independently measured or clinically validated by E-Zap Health.

Pulse may use such entries as context for a cautious discussion point. This does not establish causation, diagnose a condition, determine that a lifestyle factor is safe or unsafe, or provide a personalised diet, exercise, weight-management or prevention programme.

9. Accuracy and completeness of personal records

The usefulness of the App depends on the accuracy, completeness, dates, wording and continuing relevance of information recorded by the user. Errors, omissions, duplicate entries, outdated information, ambiguous notes or incorrect links may produce misleading displays, reports or Pulse output.

Review important information before relying on it for a healthcare conversation or sharing it. Correct mistakes and keep relevant records current. The App does not replace the records held by a GP, hospital, pharmacy or other healthcare provider and should not be the only source of critical information such as allergies, current medicines or emergency details.

Local records may be unavailable if a device is lost, damaged, reset or inaccessible, if App data is deleted, or if no usable backup exists. Separate information about storage, deletion, exports and backups appears in the Terms of Use, EULA and Privacy Policy.

10. No healthcare-professional relationship or supervision

Using the App or Pulse does not create a doctor-patient, pharmacist-patient, clinician-patient, fiduciary or other professional healthcare relationship between the user and E-Zap Health Ltd, its personnel, OpenAI, Supabase or another technology or infrastructure provider.

E-Zap Health support personnel provide administrative or technical support only. They do not provide medical advice, monitor records or respond as an emergency service. Do not send an urgent medical request to an E-Zap Health support address.

A healthcare professional who receives an App report or Pulse output remains responsible for independently verifying the information and applying their own professional judgement.

11. User responsibility and safe use

To use the App safely, you should:

seek qualified professional advice for symptoms, diagnoses, medicines, test results, treatment and care decisions;

not delay seeking care or disregard professional advice because of App content or the absence of an App warning;

review automatically generated material before saving, printing, emailing or showing it to another person;

tell a healthcare professional that an App or Pulse summary was generated from user-recorded information and may be incomplete;

use the current compatible App version and report a suspected technical or content error to E-Zap Health; and

stop relying on a feature if it appears incomplete, inconsistent, unavailable or incorrect.

12. Reports, exports and sharing

Summaries, appointment-preparation documents, charts, images, reports and Pulse output are intended to support organisation and conversation. They are not certified medical records, clinical letters, prescriptions, referrals or professional reports.

Review an export before sharing it and use an appropriate secure method. Once shared, the copy leaves the App's local controls. Deleting or correcting an App record does not update or delete a copy already exported, printed, messaged, emailed or stored elsewhere.

13. Availability and technical limitations

A feature may be unavailable, delayed, interrupted or incomplete because of connectivity, device compatibility, maintenance, provider outages, session verification, security controls, rate limits, payload-size limits or other technical conditions. A failed request, missing output or unavailable feature must not be treated as medical reassurance.

If the App behaves unexpectedly or displays information that appears unsafe or incorrect, do not rely on it. Use an authoritative source or qualified healthcare professional and report the problem to support@ezaphealth.com.

14. Intended regulatory position

E-Zap Health intends the current App and Pulse to operate as personal record-keeping, organisation and healthcare-preparation tools. They are not intended by E-Zap Health to perform a medical purpose such as diagnosis, prevention, monitoring, prediction, prognosis, treatment, alleviation of disease or injury, or patient-specific clinical decision-making.

Whether software is legally regulated as a medical device depends on its actual intended purpose, functionality, presentation and claims under applicable law. This notice does not determine regulatory classification or override legal requirements. E-Zap Health must reassess the position if the functionality, claims or intended purpose materially changes.

No statement in this notice should be interpreted as a claim that the App is UKCA- or CE-marked as a medical device.

15. Consumer rights and responsibility

This notice explains intended use and foreseeable limitations. It does not exclude or restrict a right or remedy that cannot lawfully be excluded, including applicable statutory rights concerning digital content or services.

Nothing in this notice excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of statutory consumer rights, or another liability that cannot legally be excluded or limited.

The medical limitations in this notice do not excuse E-Zap Health from responsibility where its breach of contract, negligence or other legal fault causes or contributes to a loss for which the law makes it responsible.

16. Related documents, updates and contact

The Terms of Use govern the service, purchases and user conduct. The EULA governs the software licence. The Privacy Policy explains personal-information handling. The separate Pulse notice and consent control explain the information that may be processed for each requested review.

This safety notice may be updated when functionality, providers, law or safety information changes. A material change will be communicated and fresh acceptance requested where required under the Terms of Use or applicable law.

Administrative and technical support is available from support@ezaphealth.com. General enquiries may be sent to enquiries@ezaphealth.com. These addresses are not monitored as medical or emergency services.

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com

Page

A.I. Transparency Notice & Disclaimer
Last updated: 10th August, 2026

Pulse AI in the e-Zap Health mobile application

Company number: 17138117

What this notice does
This notice explains when Pulse uses artificial intelligence, what information is processed, how a review is produced, the role of OpenAI and Supabase, the principal limitations and the safeguards intended to reduce foreseeable harm. It should be read with the Privacy Policy, Terms of Use, End User Licence Agreement, Medical Disclaimer and the consent information shown before every Pulse review.

Key facts

  • Pulse is optional. The App's core local record functions remain available if you do not use it.
  • Every Pulse review is initiated by the user and requires a fresh, explicit consent action.
  • Pulse uses a general-purpose generative AI model supplied through the OpenAI API. The output is AI-generated and is not reviewed by a clinician before display.
  • Pulse currently prepares information from across the supported record categories; it does not offer record-by-record selection for an individual review.
  • The current payload may include health records, complete symptom update histories, free-text notes and recorded profile information. Identifying information typed into those fields may be included.
  • Actual Image Hub images and document files, appointment records, detailed diet tracker entries and detailed wellbeing tracker entries are not currently sent to OpenAI.
  • Pulse does not diagnose, triage, prescribe, predict personal disease risk, make treatment decisions or make decisions producing legal or similarly significant effects.
  • AI output may be wrong, incomplete, biased, inconsistent or misleading. It must be checked and must not replace qualified professional judgement.

1. Purpose and status of this notice

This notice applies to Pulse, the optional AI-assisted review feature within the e-Zap Health mobile application (the App). References to 'we', 'us' or 'E-Zap Health' mean E-Zap Health Ltd.

It is intended to provide a clear, accessible explanation of the current feature. It is not a complete privacy notice, contractual licence or medical disclaimer. Data-protection purposes, lawful bases, retention periods, international transfers and individual rights are addressed more fully in the Privacy Policy.

This document describes the current version as at its effective date. It does not promise that the feature, model or provider will never change. Material changes must be assessed and the notice, consent flow and related documents updated where necessary.

2. What Pulse is—and what it is not

Pulse is designed to organise user-recorded information into a concise healthcare-preparation review. It can identify chronology, recurrence, change over time, explicit links between records, potentially useful discussion areas, suggested questions and practical record-quality gaps.

Pulse may use cautious wording such as 'may be worth discussing' or 'could be useful to review'. This means that a topic may be suitable to raise with a qualified healthcare professional. It is not a clinical finding, instruction or recommendation.

Pulse is not intended or authorised to:

  • diagnose, confirm, exclude, prevent, monitor, predict, treat or alleviate a disease or injury;
  • calculate or communicate a patient-specific probability, prognosis or medical risk score;
  • assess an emergency, urgency or deterioration, or decide whether the user should seek care;
  • recommend a medicine, dose, treatment, screening test, investigation, referral or procedure;
  • interpret an actual medical image, document or raw diagnostic file;
  • replace a clinician, pharmacist, examination, test interpretation or professional decision; or
  • make eligibility, insurance, employment, credit, legal or other similarly significant decisions about a person.

3. User choice and per-review explicit consent

Pulse does not run continuously or review records in the background. A review begins only after the user opens Pulse, reads the processing information, ticks the explicit-consent checkbox, selects 'Accept and continue' and then selects the generate control.

The consent applies only to that review. A new consent action is required for every later review. Cancelling or leaving the consent unticked prevents the generate control from being used. Declining Pulse does not prevent use of the App's core local record features.

Consent may be withdrawn before submission by cancelling. Once a request has been submitted and processing has occurred, withdrawal cannot reverse processing already completed lawfully, but the user may decline all future reviews.

The App is intended for people aged 16 and over. A person must not submit another person's health information without lawful authority and an appropriate basis for doing so.

4. Information used for a Pulse review

4.1 Current review scope

The current version does not provide a control for choosing individual records one by one. When a review is requested, the App prepares a structured text payload from the supported information recorded on the device. Empty or unavailable fields are omitted, but the review is otherwise drawn from across the supported categories.

Depending on what the user has recorded, the payload may include:

  • symptoms, severity, dates, duration, frequency, locations, status, providers and complete symptom update histories;
  • free-text notes, including notes entered in symptom updates;
  • diagnoses, medications, dose information, user-recorded dose-status entries and links between records;
  • surgeries or procedures, recovery and follow-up information;
  • tests and scans, recorded results, follow-up status and links to other records;
  • record dates, calculated durations, historical categories and technical local identifiers used to preserve relationships;
  • age in years, biological sex, height, weight, calculated body mass index, blood-pressure history, allergies, smoking information, alcohol use and work type where recorded; and
  • locally derived chronology, relationship and signal summaries prepared to help structure the AI request.

4.2 Information not currently included as content

The current Pulse payload does not include:

  • the actual image or document files stored in Image Hub;
  • raw PDFs, photographs, scans or screenshots for visual analysis;
  • appointment records;
  • detailed diet tracker entries or detailed wellbeing tracker entries;
  • a dedicated date-of-birth field;
  • the verification email address, optional username or authentication credentials as intentional payload fields; or
  • a purpose-built NHS number, insurance identifier or postal-address field.

Pulse may receive a technical indicator or local identifier showing that an image or document is linked to a record, but it does not receive or analyse the file itself in the current version.

Free text can contain identifiers
The App cannot guarantee that a Pulse payload is anonymous or de-identified. A name, address, date of birth, NHS number, insurance identifier or other sensitive detail typed into a record or free-text note may be transmitted. Users should avoid recording unnecessary identifiers in text that may be sent to Pulse.

5. How a Pulse review is produced

The current processing sequence is:

  • The App reads the supported local records after the user has consented and requested a review.
  • Local code structures the information and derives organisational context such as durations, chronology, explicit relationships, record counts and rule-based signal summaries.
  • The App sends the structured request through a Supabase Edge Function. Supabase validates the authenticated session, protects the OpenAI credential, checks operational limits and routes an eligible request.
  • The Edge Function sends the text request to the OpenAI Responses API. A general-purpose OpenAI model generates a structured response under E-Zap Health's safety and output instructions.
  • The response is checked for the required machine-readable structure and returned to the App for display.

The local relationship and signal stages apply programmed rules to user-recorded information. The generative stage is probabilistic: it predicts suitable text from the supplied context and instructions rather than retrieving a verified clinical conclusion from an authoritative patient record.

Pulse requests are standalone. The current feature is not a conversational chatbot and does not use a previous Pulse conversation as chat memory for a later review.

6. Providers and roles

E-Zap Health Ltd

E-Zap Health defines Pulse's intended purpose, selects the service configuration, builds the payload and safety instructions, presents the output, determines the user controls and remains responsible for its own legal and product-governance obligations.

Supabase

Supabase provides authentication, secure-session validation, Edge Function routing and limited usage-control infrastructure. The Edge Function is not designed to write the health payload or generated review into a central Supabase health-record database. Limited request, user-ID, timestamp, security and usage metadata may nevertheless be processed.

OpenAI

OpenAI provides the API and general-purpose model that processes the submitted text and generates the review. E-Zap Health does not train the underlying model, control its training data or independently inspect every source from which the model learned.

OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. E-Zap Health does not authorise Pulse data for advertising or unrelated model training. The Privacy Policy contains the fuller provider and international-transfer information.

7. What the output contains

A successful response may contain:

  • a concise overview;
  • key healthcare journeys or record patterns;
  • priority discussion points;
  • suggested questions for a clinician or pharmacist;
  • record-quality observations; and
  • a safety note.

A confidence label describes how clearly the supplied records support a generated organisational pattern. A priority label indicates possible usefulness for a healthcare discussion. Neither is a validated clinical score, disease probability, urgency rating or prediction of personal medical risk.

The order, wording and number of observations may vary between requests. The absence of a topic does not mean it is unimportant, safe, clinically excluded or already considered by a professional.

8. Important limitations and foreseeable risks

Pulse may:

  • produce inaccurate, fabricated, incomplete, inconsistent, ambiguous or outdated statements;
  • misunderstand spelling, shorthand, dates, negation, chronology or the meaning of a free-text note;
  • omit a relevant symptom, interaction, contraindication, alternative explanation or record relationship;
  • give undue weight to an entry or describe a coincidental pattern as meaningful;
  • fail to identify a pattern that a qualified professional would consider important;
  • repeat or amplify an error, omission or bias in the user-entered records, local rules, model or underlying training data;
  • perform unevenly for uncommon conditions, unusual presentations, limited records, different language styles or groups under-represented in model training;
  • use general healthcare concepts that are inappropriate for the individual's circumstances; and
  • produce a different answer when the same or similar information is submitted again.

Pulse cannot examine the user, verify an identity, ask all clinically necessary follow-up questions, confirm entries against NHS or clinician records, access information that was not recorded, or guarantee access to the latest clinical guidance or local service arrangements.

Input accuracy is therefore critical. Incorrect dates, outdated records, duplicate entries, unclear links and incomplete notes can produce a misleading review. Automatically calculated or categorised information, including BMI, durations and relationship strength, can also be affected by inaccurate inputs.

9. Human oversight and automated decision-making

No doctor, pharmacist, nurse or other healthcare professional reviews or approves an individual Pulse response before it is displayed. E-Zap Health personnel do not routinely monitor the user's records or review the output in real time.

The user provides the immediate human review and must decide whether an observation is relevant enough to raise with a qualified professional. A clinician who sees a Pulse output must independently verify the underlying information and apply their own professional judgement.

Pulse is not used by E-Zap Health to make a solely automated decision producing legal or similarly significant effects about the user. It does not determine access to employment, insurance, credit, healthcare, benefits or another service. It is not used to create an advertising profile, social score or eligibility decision.

10. Medical safety and appropriate use

Pulse output is healthcare-preparation material, not medical advice. Do not use it to decide whether to seek care, assess urgency, diagnose a condition, interpret a test independently, start or stop treatment, or change medication.

Do not delay seeking professional help because Pulse is unavailable, produces no warning, omits a concern or appears reassuring. The App does not continuously monitor the user, detect deterioration, contact a clinician or summon emergency assistance.

Emergency and urgent care
For a life-threatening emergency in the United Kingdom, call 999. For urgent medical help that is not an emergency, use NHS 111 or the relevant local urgent-care service. Outside the United Kingdom, use the emergency and urgent-care services for the user's location. Do not wait for Pulse.

11. Data protection, retention and user rights

Pulse health information is special category personal data. E-Zap Health relies on the user's per-review consent and explicit consent for the processing described in the Privacy Policy. Consent must be freely given, specific, informed and affirmative. The user can decline Pulse without losing the core local record functions.

The production Pulse service instructs OpenAI not to store the response as retrievable Responses application data. A controlled fictional request completed on 10 August 2026 without creating a new retrievable dashboard record. OpenAI may nevertheless retain limited API content in separate abuse-monitoring or security logs, generally for up to 30 days, and may retain limited information for longer where required or permitted by law or needed to address security or abuse. E-Zap Health therefore does not claim guaranteed zero retention.

Supabase and E-Zap Health may process limited request and usage metadata to authenticate requests, enforce the rolling limit, protect the service, investigate failures and demonstrate operation. The current Edge Function is not designed to store the submitted health payload as a Supabase health record.

The Privacy Policy explains lawful bases, retention, transfers, access, erasure, objection, restriction, complaints and the limits of local-data rights. It is available at https://www.ezaphealth.com/privacy-policy/.

12. Operational safeguards and service limits

Current safeguards include:

  • a separate explicit-consent step for each review;
  • authenticated Supabase session validation and occasional session re-verification;
  • server-side protection of the OpenAI API credential;
  • a constrained system prompt and rules prohibiting diagnosis, risk prediction, medication changes, emergency triage and invented facts;
  • structured-output validation and a required safety-note field;
  • timeouts, limited retry handling and safe fallback responses;
  • a payload-size check before an oversized request is sent onward to OpenAI;
  • a standard limit of three completed Pulse requests in a rolling seven-day period, subject to a documented account exemption or changed service configuration; and
  • limited logs and usage metadata for security, reliability, fair use and incident investigation.

These controls reduce risk but cannot eliminate model error, provider failure, unauthorised access, security incidents or unsuitable output. A technical control must not be treated as clinical validation.

If a prepared payload exceeds the supported limit, the request is rejected before it is sent onward to OpenAI. The health payload has nevertheless reached the Supabase Edge Function for the size check. No local record is changed unless the user separately chooses to edit or delete it.

13. Accuracy, fairness and responsible review

E-Zap Health aims to constrain Pulse to the recorded evidence and to use calm, non-judgemental language. The instructions prohibit shame, blame, unsupported certainty and invented clinical facts. Those instructions are safeguards, not a guarantee that every output will comply.

Users should critically review the output, compare it with the underlying records and consider whether language relating to age, sex, weight, smoking, alcohol, work, disability or another characteristic appears inaccurate, stereotyped or unfair. A suspected error, unsafe output or discriminatory pattern should be reported to support@ezaphealth.com with no more health information than necessary.

E-Zap Health should monitor incidents and material changes, test foreseeable misuse, review whether data collection remains necessary and proportionate, and reassess the feature when the model, provider, purpose, outputs or user population changes materially.

14. Intended regulatory position

E-Zap Health intends Pulse to operate as a personal record-organisation and healthcare-preparation feature. It is not intended by E-Zap Health to perform a medical purpose such as diagnosis, prevention, monitoring, prediction, prognosis, treatment, alleviation of disease or injury, or patient-specific clinical decision-making.

Regulatory classification depends on the actual intended purpose, functionality, presentation, instructions and promotional claims under the law that applies. This notice does not determine classification, create an exemption or override regulatory requirements. E-Zap Health must reassess the position if functionality or claims materially change.

No statement in this notice should be interpreted as a claim that Pulse is UKCA- or CE-marked as a medical device. Where the App is offered in another jurisdiction, additional AI, consumer, privacy, accessibility or medical-software obligations may apply.

15. Transparency when using or sharing output

The App identifies the feature as Pulse AI and presents the returned material as an AI-generated review. A user who shares, copies or relies on an output should not present it as a clinician-authored report, verified medical record or professional conclusion.

Before showing an output to another person, review it for accuracy and unnecessary personal information. Once copied, photographed, printed, messaged, emailed or otherwise shared, that copy is outside the App's local controls.

16. Changes, accountability and contact

E-Zap Health may change the OpenAI model, prompts, local derivation rules, output format, limits, provider configuration or other feature details for a valid reason, including safety, security, reliability, legal compliance or service improvement. A material change to purpose, data scope or risk must be assessed before deployment and communicated where required.

Questions, suspected errors, safety concerns and privacy requests may be sent to support@ezaphealth.com. General enquiries may be sent to enquiries@ezaphealth.com. These addresses are not medical or emergency services.

A data-protection complaint may also be made to the UK Information Commissioner's Office. Information is available at https://ico.org.uk/make-a-complaint/.

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com


 

Non-retention, administrative access and accountability

The production non-retention instruction is a mandatory server-side safeguard. It is verified through source review, deployed-version comparison and controlled fictional testing. It is not presented as a user-selectable dashboard preference.

The intentional payload excludes email, username, Supabase authentication UUID and credentials. The payload is not anonymous: free text may identify a person, and restricted correlation with separately held consent/Auth records is technically possible. E-Zap Health prohibits routine viewing or correlation and uses non-identifying evidence for checks.

Enabling retrievable response storage would be a material high-risk change and is prohibited unless a documented DPIA, lawful-basis and Article 9 review, retention/deletion design, access-control review, transparency update and signed approval are completed before activation.

©Copyright. All rights reserved.

Information icon

We need your consent to load the translations

We use a third-party service to translate the website content that may collect data about your activity. Please review the details in the privacy policy and accept the service to view the translations.