- Terms of Use
- End User License Agreement
- Medical Disclaimer
- A.I. Disclaimer

Terms of Use
Updated: 24th September 2026

Version: 2.4

Company number: 17138117

Please read these Terms before continuing

These Terms form a contract between you and E-Zap Health Ltd. You are given an opportunity to read them before you actively accept them during verification. If you do not agree, do not accept the Terms or use the App.

The Privacy Policy is a separate notice explaining how personal information is handled. Accepting these Terms does not replace any separate consent required for Pulse AI.

Important points

The App is a personal record-keeping and healthcare-preparation tool. It is not a medical service, medical device, emergency service, diagnostic tool or substitute for a qualified healthcare professional.
Most records and Image Hub files are stored locally on your device. You are responsible for protecting the device and any copies or exports you create.
One verified Primary Account can contain a Primary profile and up to four additional local profiles. Additional profiles are separate record areas, not separate accounts or security boundaries. All profiles share the account email, authenticated session and local PIN.
Pulse AI is optional and available only for the Primary profile. Additional-profile records are excluded from Pulse. Before every eligible written Pulse review or Pulse Body Map request, you must separately give explicit consent to the described health-information processing.
On Apple devices, access is supplied through a paid App Store download. On Google Play, the download is free and a one-time in-app purchase is required at verification unless you qualify for grandfathered free access.
The App interface can be used in English, French, Spanish or Simplified Chinese. The full Terms and Privacy Policy are provided in English during verification; an alternative interface language is an optional convenience and does not translate or change these Terms.
Appointment-preparation reports are generated locally. English-only UK reports and bilingual reports have different content rules. A bilingual report is patient-prepared information, not a verified clinical record, certified translation, diagnosis, medical advice or treatment recommendation.
Your statutory consumer rights are not excluded or restricted by these Terms.

1. Who we are

These Terms are between you and E-Zap Health Ltd ("E-Zap Health", "we", "us" or "our"), the owner and operator of the App.

E-Zap Health Ltd is registered in England and Wales under company number 17138117.

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support, complaints and account enquiries: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com

2. Eligibility, profiles and personal use

You must be at least 16 years old to create and control the Primary Account. By accepting these Terms, you confirm that you meet this requirement and have legal capacity to enter into this contract. If you are 16 or 17, you may use the Primary profile for yourself but must not create or manage a profile for another person.

The App is licensed for your personal, non-commercial use. It is not designed for use by a healthcare provider as a clinical record system, for occupational health decisions, insurance underwriting, medical research, or another regulated professional purpose.

A Primary Account may contain the Primary profile and up to four additional local profiles. An additional profile is not a separate account, login, licence holder or party to these Terms. You must not create or manage another person’s profile unless you have lawful authority and can comply with applicable privacy, confidentiality, consent, capacity and best-interests duties. For another adult, obtain their permission or hold another valid authority. For a child, you must be at least 18 and have parental responsibility or another lawful authority. The App does not verify identity, age, relationship, capacity or authority.

3. Access, verification and security

Access requires verification using an email address and a one-time code. Supabase supports authentication and secure sessions, and Resend supports delivery of verification emails. Further information appears in the Privacy Policy.

The local App PIN and your device passcode are separate protections. The same PIN and unlocked App session provide access to every profile, and profile selection is not a security boundary. You must take reasonable steps to keep your device, email account, verification codes and PIN secure, supervise access where appropriate, and protect every profile subject’s confidentiality. Do not share a verification code or allow an unauthorised person to use an unlocked App session.

Pulse may require session re-verification. Authentication, email delivery or network failures may temporarily prevent verification or access to features that depend on a secure session.

Because most records are stored locally, we may be unable to recover them if your device is lost, damaged, reset or inaccessible, if App data is removed, or if no usable backup exists.

4. Licence to use the App

Subject to these Terms and any applicable app-store rules, we grant you a limited, personal, non-exclusive, non-transferable and non-sublicensable licence to install and use the App on devices that you own or control for as long as you remain entitled to use it.

You may not copy, sell, rent, distribute, modify, create derivative works from, reverse engineer, decompile or attempt to extract source code from the App, except to the limited extent that applicable law expressly permits and does not allow that right to be excluded.

The licence does not transfer ownership of the App, branding, software, designs, databases, documentation or other intellectual property. Third-party and open-source components remain subject to their applicable licences.

5. Your records, languages, Image Hub files and exports

5.1 Local records

The App enables you to create, organise and link information such as symptoms, diagnoses, medications, surgeries, tests and scans, appointments, calendars, profile information, wellbeing information, diet-related entries, insights, notes and supporting images or documents. The Primary profile and each additional profile use separate local record areas.

You decide what to record and are responsible for checking the accuracy, completeness and continuing relevance of your entries. The App does not verify your records against a clinician's records and must not be treated as an authoritative medical record.

You are also responsible for selecting the correct profile before viewing, entering, editing, exporting, sharing or deleting information. A display name is an organisational label and should not be treated as verified identity. Use only the information reasonably needed for the profile subject and avoid unnecessary identifiers.

5.2 Image Hub

The Image Hub lets you select individual images or documents through your device's system picker. The current App does not scan your photo library in bulk, access images in the background or use the device camera.

Image Hub files remain locally stored. They may contain names, addresses, NHS numbers, insurance identifiers, dates of birth or other sensitive information. Consider cropping, redacting or obscuring identifiers that you do not need.

You must have the right to store and use each file. You remain responsible for files you choose to add, link, retain, export or share. We remain responsible for our own legal obligations and do not exclude liability where the law does not permit us to do so.

5.3 Reports, exports and sharing

The App may create summaries, charts or appointment-preparation documents locally. If you save, print, message, email or otherwise share an export, the copy leaves the App's local controls. You are responsible for choosing an appropriate recipient and a secure sharing method.

Deleting an App record does not delete copies already exported, printed, shared or stored elsewhere.

5.4 App language and legal documents

The full Terms of Use and Privacy Policy are presented in English during verification before you can select an alternative App interface language. The App can then display reviewed interface and catalogue wording in English, French, Spanish or Simplified Chinese. Portuguese and Italian are currently available only as travel-report languages, not as complete App interface languages.

French, Spanish and Simplified Chinese are optional interface settings for users who have had the opportunity to read and understand the English legal documents. If you do not understand these Terms, do not accept them until you have obtained appropriate assistance. Changing the App language does not translate, replace, amend or reduce these Terms, your legal rights or our legal obligations. The English Terms supplied by E-Zap Health remain the governing version, except to the extent that mandatory applicable law requires otherwise.

Changing the App language changes supported interface labels and catalogue displays. It does not automatically translate, rewrite or replace your saved free-text records. Free text is kept as entered, including text entered using a supported device keyboard. A structured catalogue item may retain a canonical English value while the App displays a reviewed local-language label. Where a safe reviewed translation is unavailable, a term may remain in English or an optional unsupported entry may be omitted from a bilingual report rather than being guessed.

Pulse written reviews and Pulse Body Map are currently available only while the Primary profile is selected in English App mode. The appointment-preparation tools available to additional profiles or in French, Spanish or Simplified-Chinese mode are separate local functions and do not make Pulse or other AI functions available in those contexts.

5.5 Appointment-preparation reports

The App can assemble appointment-preparation information locally from records already stored on your device. Generating or previewing a report does not send its contents to E-Zap Health, Pulse, OpenAI or an online translation provider. These report-generation functions do not themselves require an AI or online translation connection. The report does not alter your saved records and does not count towards a Pulse usage limit. Other App access, system sharing or backup actions may still depend on your device, settings, network or chosen service.

In English App mode, an English-only UK appointment report may include supported selected symptoms, diagnoses, medications, surgeries, profile information and either the previous one month or three months of symptom-update notes and severity changes, according to the choices and current rules shown in the App.

French-, Spanish- and Simplified-Chinese-interface users can prepare a bilingual report in their App language alongside English for a UK healthcare discussion. English-interface users can prepare English alongside one selected travel language—Spanish, French, Portuguese, Simplified Chinese or Italian—for a healthcare discussion abroad.

A bilingual report uses reviewed fixed in-App labels and structured mappings. It does not use generative AI or unrestricted machine translation. To reduce translation ambiguity, it uses a narrower data set than the English-only UK report and excludes free-text symptom-update notes, medication notes, provider names, custom comments, tests and scans, uploaded images and documents, and other unsupported or translation-sensitive details.

A supported catalogue value may be shown in both languages. An unsupported core clinical term may remain in English and be identified as untranslated. An unsupported optional, custom or mixed-language entry may be omitted rather than partially translated or guessed. The report may state that an entry was provided but excluded, so that the omission is not silent.

Medication names are not machine-translated into a presumed equivalent. Depending on the report route, a medication name is kept exactly as entered in English or excluded if a suitable English name has not been supplied. You should compare medication names, active ingredients, form, strength, dose and frequency with the current packaging or prescription and correct any error before relying on or sharing a report.

You may keep supporting medication photographs in Image Hub and show them separately at an appointment. Image Hub images and documents are not embedded in or processed by the appointment-report generator. A photograph is supporting information only and is not proof that a medicine is current, prescribed or being taken as recorded.

Every appointment-preparation report is assembled from information entered or selected by the user. E-Zap Health does not verify the underlying diagnoses, symptoms, medication, surgery history, profile information, dates, relationships or translations. The report may be incomplete, inaccurate, outdated or omit an important detail. It is not an NHS or clinician record, certified translation, clinical letter, referral, prescription, diagnosis, medical advice, triage, interpretation or treatment recommendation. Important information should be confirmed directly with the user and relevant source records, using a qualified interpreter where appropriate.

A report remains under the App's local controls until you deliberately save, print, show, message, email or otherwise share it. You are responsible for checking the selected records, language and visible output; deciding whether it is appropriate to share; choosing the recipient and sharing method; and keeping or deleting any exported copy. A recipient or external service may retain, use or transfer a copy under its own rules. Deleting the App record later does not delete copies held elsewhere.

6. Pulse AI

6.1 Optional feature and per-review consent

Pulse AI is optional, is not required for the App's core local record functions, and operates only from the Primary profile when you deliberately request a written Pulse review or Pulse Body Map. Additional profiles retain their local appointment-preparation and insights tools but cannot access Pulse, and their records are excluded from the Primary profile’s Pulse payload.

Before each written Pulse review or Pulse Body Map request, the App explains the information that may be processed. You must tick the separate explicit-consent statement and select “Accept and continue” before generation is enabled. That consent applies only to the individual request. A fresh consent is required for every later Pulse action.

If you cancel or do not consent, the request is not sent. You can withdraw before submission by cancelling. Withdrawal cannot undo processing already completed lawfully, but you can decline every future request.

6.2 Information used by Pulse

For a requested written Pulse review or Body Map, the App prepares a structured text payload from relevant Primary-profile records. It may include symptoms and their update histories, diagnoses, medications, surgeries, tests and scans, results, dates, relationships between records, free-text notes and recorded profile or lifestyle information. Additional-profile records are not included.

Sensitive or identifying information that you type into a record or free-text note may be included. Avoid recording unnecessary names, addresses, NHS numbers, insurance identifiers or similar details in text that may be sent to Pulse.

The actual images and document files stored in Image Hub are not sent to or analysed by OpenAI in the current version. Pulse may receive a technical indicator that a file is linked to a record. The current scope is described more fully in the Privacy Policy and the on-screen consent notice.

6.3 Processing route

The request is routed through a Supabase Edge Function, which validates the secure session and protects the OpenAI API credential. OpenAI processes the submitted text and generates a written-review response or structured Body Map response that is returned to the App. Body Map results are temporary unless you choose to save, export or share a copy.

OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. Provider retention and other data-handling details are explained in the Privacy Policy.

6.4 Provider response-storage and access controls

For each production Pulse request, E-Zap Health instructs OpenAI not to store the response as retrievable Responses application data. Separate provider security and abuse-monitoring retention may still apply for a limited period as explained in the Privacy Policy.

This safeguard does not make the submitted information anonymous. Direct account identifiers are not intentionally included, but free text may identify a person and restricted technical correlation with separate account or consent records may be possible. E-Zap Health prohibits routine access. Any change that permits retrievable response storage requires prior documented privacy review and approval.

6.5 Usage and size limits

Written Pulse reviews and Pulse Body Map requests share a combined limit of four completed Pulse actions within a rolling seven-day period. A different limit or a documented exemption may apply to a particular account, testing arrangement, promotional entitlement or service configuration.

We may use reasonable authentication, rate-limiting, request-monitoring and abuse-prevention controls. We may adjust a limit where reasonably necessary for security, legal compliance, infrastructure protection, service reliability or fair access. We will not use this clause to impose an undisclosed additional charge.

If the prepared payload exceeds the supported data limit, the review will not proceed. The App may ask you to review your records and remove information that you consider no longer relevant. Your local records are not changed unless you choose to edit or delete them.

6.6 Nature and limits of output

Pulse is designed to assist with organisation, chronology review, pattern awareness, record-quality observations, healthcare discussion points and suggested questions for a healthcare appointment. The optional Body Map is a visual organisational presentation of submitted records and is not a diagnosis, clinical image interpretation or confirmation that an item affects a particular body region.

Pulse does not diagnose, predict disease, triage, prescribe, recommend medication changes or provide a treatment plan.
Outputs may be incomplete, inaccurate, inconsistent, outdated, misleading or omit an important issue.
An output depends on the quality, completeness and wording of the records supplied.
An output is not clinician-reviewed and must not replace professional medical advice or clinical judgement.
Pulse does not make a decision that produces legal or similarly significant effects about you.

You may use a Pulse output for your personal organisation and healthcare discussions. Outputs may not be unique, and no ownership or exclusivity is promised in general information generated by an AI model.

7. Medical and emergency limitations

The App and Pulse are intended only as personal record-keeping, organisational and healthcare-preparation tools. They are not intended to be used as a medical device, healthcare service, clinical decision system or substitute for an appropriately qualified professional.

Do not use the App or Pulse to decide whether to seek care, to assess an emergency or acute deterioration, to diagnose a condition, to start or stop treatment, or to change medication.

Emergency warning

If you believe that you or another person may need emergency medical help, contact the appropriate emergency service immediately. In the United Kingdom, call 999 for an emergency. For urgent but non-emergency help, use NHS 111 or the relevant local urgent-care service. If you are outside the United Kingdom, use the emergency or urgent-care service for your location. Do not wait for the App, Pulse or an appointment-preparation report.

8. Purchases, access entitlement and refunds

8.1 Apple App Store

On Apple devices, the App is supplied as a paid App Store download. Apple processes the purchase, payment method, receipt and store account under its terms. The price and applicable taxes are shown by Apple before purchase.

8.2 Google Play

On Google Play, the App is free to download. If you do not qualify for grandfathered free access, you must complete the applicable one-time Google Play in-app purchase during verification before full access is provided.

The Google purchase is intended to be a non-consumable, one-time access purchase rather than a recurring subscription. Google processes the payment method and transaction under its terms. The price and applicable taxes are shown in the Google Play purchase interface before you confirm.

8.3 Grandfathered free access

A person who installed and used the App while access was free may continue to qualify for free access. We may recognise that eligibility using the verified email address, authentication user ID and an entitlement record.

Deleting local App data, reinstalling the App or returning to verification should not by itself cause an eligible person to be charged again, provided the relevant entitlement can still be recognised.

You may ask for remote authentication and entitlement information to be erased. If the record used to recognise grandfathered access is erased, we may no longer be able to prove or restore that free entitlement. A later verification or reinstall may then be treated as a new access request and the applicable Google Play purchase may be required. We will explain this consequence before completing a verified erasure request where it applies.

8.4 Store records, restoration and refunds

Apple and Google control their own store accounts, payment records and purchase histories. The App's local deletion function and an erasure request sent only to us do not delete records independently controlled by a store provider.

Any purchase restoration is subject to the relevant store account, purchase status and the App's entitlement checks. Contact support@ezaphealth.com if you believe a valid entitlement has not been recognised.

Refund requests may be administered through Apple, Google or us, depending on the platform and circumstances. Store policies do not remove any cancellation, refund or other remedy that applicable consumer law gives you.

The App does not currently offer an automatically renewing subscription. If a subscription is introduced in future, its price, renewal period, cancellation method and other material terms will be disclosed before purchase and separate terms will be provided where required.

9. Acceptable use

You must not:

use the App unlawfully, fraudulently or in a way that infringes another person's rights;
attempt unauthorised access, interfere with security, probe vulnerabilities, introduce malicious code or disrupt the App or its providers;
automate, overload or manipulate Pulse requests, bypass usage limits or safety controls, or expose or misuse service credentials;
use Pulse to seek diagnosis, emergency triage, prescriptions, medication instructions or other output that the feature is not designed to provide;
submit unlawful, abusive or deliberately misleading material through a networked feature;
create, access, use, export, share or erase another person’s profile or health information without lawful authority; or
copy, resell or commercially exploit the App or Pulse output except where applicable law expressly permits.

We may take proportionate steps to protect users, providers and the service, including rejecting a request, restricting a networked feature or suspending access in accordance with section 13.

10. Your content and our limited permission

You retain any rights you hold in records, notes, images and documents that you enter or select. Where content concerns another profile subject, you confirm that you have authority to provide the permissions needed for the App functions you request. You give the App only the permission technically necessary to store and process that content on your device and to perform those functions.

When you request Pulse, you give us and the relevant processors a limited permission to transmit and process the submitted payload solely to provide, secure and support that review, subject to the Privacy Policy and your per-review consent.

You confirm that you have the right to use content you enter, select, export or submit and that doing so will not unlawfully infringe another person's privacy, confidentiality or intellectual-property rights.

11. Third-party services and app stores

Some functions depend on third parties, including Apple, Google, Supabase, Resend, Firebase Crashlytics and OpenAI. Their services may be subject to their own terms and privacy notices.

You must comply with applicable app-store and device-platform rules. Mobile network or internet charges imposed by your provider are your responsibility.

Apple and Google are not parties to these Terms and do not provide our customer support. Their responsibilities for distribution, payments, refunds or warranties are governed by applicable law and their own platform terms.

If Apple supplies the App under its standard end-user licence, that licence also applies. If a custom app-store licence is adopted later, any required platform-specific provisions will be provided through the relevant store.

12. Availability, maintenance and changes to the App

We use reasonable care and skill in providing the App, but we do not promise that every function will always be available, uninterrupted or error-free. Networked features may be delayed or unavailable because of maintenance, security action, third-party outages, connectivity problems, legal requirements or circumstances outside our reasonable control.

We may release updates to fix defects, improve security, maintain compatibility, comply with law or platform rules, change providers, manage capacity or improve functionality. You may need to install an update to continue using a networked feature safely.

We may modify or discontinue a feature for a valid reason. Where a change materially reduces paid functionality, we will provide reasonable notice where practicable and respect any remedy required by consumer law. Security or legal emergencies may require immediate action.

Compatibility may change as devices and operating systems evolve. We will not deliberately misdescribe supported requirements, and this section does not exclude statutory rights concerning digital content or services.

13. Suspension, termination and ending use

You may stop using the App at any time. You can remove local data using the App's deletion control and may then uninstall the App. Ending use does not automatically erase independently held store, authentication or provider records.

We may restrict a networked feature or suspend access where we reasonably believe this is necessary because of a serious or repeated breach of these Terms, fraud, unlawful use, a security threat, abuse of Pulse, non-payment, a platform requirement or a legal obligation.

Our action will be proportionate. Where reasonably possible, we will explain the reason and allow an opportunity to correct a remediable breach. We may act immediately where delay could create legal, safety, security or service-integrity risk.

Termination does not remove rights or liabilities that arose beforehand. If paid access is withdrawn without a breach by you, any refund or other remedy required by consumer law remains available.

14. Deleting local App data and remote erasure

14.1 What the local deletion function does

An additional profile's wipe control is designed to erase only that profile's local records, including health records, appointments, calendar, profile information, diet and wellbeing entries, insights, Image Hub records and files, relationship data and profile-specific settings. It restores the profile’s default name and returns to that profile’s Home page. It does not sign out, change the shared PIN, delete another profile or erase the Primary Account. The Primary Account’s full local deletion function is designed to erase local App information for every profile, including the same record categories, local visibility and language settings, local language-feature acknowledgements, local report previews, the shared PIN and onboarding state, and the local Supabase session.

When the Primary Account’s full deletion process completes, you are signed out and returned to the email-verification stage.

14.2 What it does not do

It does not automatically delete the Supabase authentication user, verified email, remote entitlement record or Pulse usage metadata.
It does not delete Apple or Google store accounts, receipts, purchase history or transaction records.
It does not immediately delete provider logs that remain within an applicable retention period.
It does not delete material that you exported, printed, messaged, emailed, saved elsewhere or placed in a device or cloud backup.
It does not delete information held by a healthcare provider or another independent third party.

14.3 Requesting remote erasure

To request erasure of authentication or other information held under our control, email support@ezaphealth.com from the relevant address or identify it clearly. You may use “Email removal” as the subject, but no particular wording is required.

We may ask for proportionate evidence that you control the address. We will explain an important consequence, including possible permanent loss of grandfathered free access, before completing a verified request where it applies. The Privacy Policy contains further details.

15. Privacy

Our Privacy Policy explains what information is processed, why, where it is stored, who receives it, applicable retention arrangements and how to exercise data-protection rights.

You confirm separately that you have read and understood the Privacy Policy. It is available at https://www.ezaphealth.com/privacy-policy/.

Pulse requires a separate explicit consent for each review. General acceptance of these Terms is not treated as that Pulse consent.

16. Consumer rights and warranties

Nothing in these Terms affects rights and remedies that cannot lawfully be excluded. Depending on the circumstances, UK consumer law may require paid digital content to be of satisfactory quality, fit for a disclosed purpose and as described, and services to be performed with reasonable care and skill.

If the App does not conform to an applicable statutory right, you may be entitled to repair or replacement, a price reduction, a refund or compensation for qualifying damage to a device or other digital content. The available remedy depends on the facts and applicable law.

Contact support@ezaphealth.com if you believe the App is faulty or materially misdescribed. Apple or Google may administer a store refund, but responsibility cannot be excluded merely because a store processes the transaction.

17. Our responsibility to you

We are responsible for loss or damage that is a foreseeable result of our breach of these Terms or our failure to use reasonable care and skill. Loss is foreseeable if it was an obvious consequence or both you and we knew it might occur when the contract was made.

The App is supplied for personal use. We are not responsible for business losses, including lost profit, revenue, opportunity, goodwill or business interruption, arising from use that falls outside the permitted personal purpose.

We are not responsible for a loss caused solely by inaccurate or incomplete information entered by you, selection of the wrong profile, your lack of authority to manage another person’s information, your failure to follow reasonable security or backup guidance, an unauthorised person using an unlocked device or shared PIN, or a third-party service failure outside our reasonable control. This does not apply to the extent that our breach or negligence caused or contributed to the loss.

The medical and Pulse limitations in these Terms describe the intended purpose of the App; they do not excuse us from liability that applicable law imposes.

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of your statutory consumer rights, or any other liability that cannot legally be excluded or limited.

18. Complaints and support

For support or a complaint, email support@ezaphealth.com and explain the feature involved, what happened and the outcome you seek. We will investigate and respond within a reasonable time.

A privacy complaint is handled as described in the Privacy Policy. You may also have the right to contact the Information Commissioner's Office about data protection.

Nothing in this section prevents you from using any court, regulator, app-store process or other remedy available under applicable law.

19. Changes to these Terms

We may update these Terms for a valid reason, including a change in law, regulation, security, providers, platform requirements, pricing model or App functionality, or to improve clarity and correct an error.

We will publish the updated Terms with a new effective date. Where a change is material, we will give reasonable in-App or website notice and request fresh acceptance where required. We will not use a variation clause as a blank cheque to remove accrued rights or impose an undisclosed retrospective charge.

If you do not accept a material change, you may stop using the App. Any statutory remedy connected with paid access remains unaffected.

Version 2.4 preserves and consolidates every still-relevant term carried forward through Version 2.3. It adds the implemented Primary Account and additional-profile model, authority requirements for another adult or child, separate local profile areas, the shared email, session and PIN boundary, correct-profile responsibilities, additional-profile wipe behaviour, Primary Account full deletion, and the restriction of written Pulse reviews and Pulse Body Maps to the Primary profile. It retains the existing provisions on purchases, entitlement, languages, appointment preparation, exports, consumer rights, liability, complaints and governing law.

20. Governing law and courts

These Terms are governed by the law of England and Wales. If you are a consumer resident elsewhere, you retain any mandatory protections given by the law of your home country.

The courts of England and Wales may hear disputes. If you live in Scotland, Northern Ireland or another country whose mandatory consumer law gives you the right to bring proceedings locally, you may also use those courts.

21. General legal terms

21.1 Entire agreement

These Terms, the applicable store licence and any purchase information shown before payment form the contractual framework for using the App. The Privacy Policy separately explains data handling. Nothing in this section excludes liability for fraud or removes rights arising from information that the law makes binding.

21.2 Transfer

We may transfer our rights and obligations to another organisation in connection with a genuine business transfer or reorganisation, provided this does not reduce your rights. We will notify you where required. You may transfer your rights only where applicable law or the relevant app-store rules permit.

21.3 No waiver

If either party delays enforcing a right, that does not mean the right has been waived.

21.4 Severability

If a court finds part of these Terms unlawful or unenforceable, the remaining provisions continue to apply. Any affected provision will be interpreted as narrowly as necessary to make it lawful where the law permits.

21.5 Third-party rights

Except for rights expressly granted under applicable app-store terms, a person who is not a party to these Terms has no right to enforce them.

22. Contact us

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support, complaints and account enquiries: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com

End User License Agreement
Last updated: 24th September 2026

Version: 2.5

Company number: 17138117

Please read this licence before using the App

This End User Licence Agreement (EULA) governs your licence to install and use the e-Zap Health software. The separate Terms of Use govern the service, purchases and user conduct. The Privacy Policy explains personal-information handling.

Where the App or an app store presents this EULA for acceptance, selecting the acceptance control indicates agreement. If you do not agree, do not install or use the App. Nothing in this EULA removes a cancellation, refund or other right that applicable law gives you.

Important licence points

The App is licensed, not sold. You receive a limited licence for personal, non-commercial use.
Most health records and Image Hub files are stored locally on your device and may be unrecoverable if no usable backup exists.

One verified Primary Account can contain a Primary profile and up to four additional local profiles. They share the account email, authenticated session and PIN; profile selection is not a separate security boundary.

Pulse AI is optional, is licensed only for use from the Primary profile, excludes additional-profile records, and requires separate explicit consent before every individual review.
The App and Pulse are organisational tools, not medical, diagnostic, emergency or clinical decision services.
The App interface can be used in English, French, Spanish or Simplified Chinese. Changing the interface language changes supported labels and catalogue displays; it does not translate or amend this English EULA or replace saved free text.
English-only and bilingual appointment-preparation reports are assembled locally by deterministic App code. They are not Pulse or AI outputs, certified translations or verified clinical records.
Mandatory consumer rights and applicable app-store protections continue to apply.

1. Parties and related documents

This EULA is between you and E-Zap Health Ltd ("E-Zap Health", "we", "us" or "our"), the owner and licensor of the App. It is not an agreement with a software-development contractor, infrastructure provider or app-store operator.

E-Zap Health Ltd is registered in England and Wales under company number 17138117. Its registered office and contact details appear in section 23.

This EULA, the Terms of Use, applicable purchase information and applicable app-store terms should be read together. The Privacy Policy is a separate notice about personal-information processing and does not replace any consent required for Pulse.

The full Terms of Use and Privacy Policy are presented in English during verification. This EULA and the other public legal documents are available in English through the App's legal-documents section and the E-Zap Health website. French, Spanish and Simplified Chinese are optional interface settings for users who have had an opportunity to understand the English legal documents. Portuguese and Italian are currently report-language options rather than complete App interface languages.

Selecting an alternative interface or report language does not translate, replace, amend or reduce this EULA, your legal rights or our legal obligations. The English EULA supplied by E-Zap Health remains the version that we provide, except to the extent that mandatory applicable law requires otherwise. If you do not understand this EULA, do not agree to it until you have obtained appropriate assistance.

If provisions conflict, mandatory law and mandatory app-store rules take priority. Subject to that, this EULA controls the software licence, the Terms of Use control service use and purchases, and the Privacy Policy describes data handling.

2. Eligibility and authority

You must be at least 16 years old and have legal capacity to accept this EULA and control the Primary Account. If you are 16 or 17, you may use the Primary profile for yourself but must not create or manage a profile for another person. An adult aged 18 or over may use the App’s additional-profile function for another adult who has given permission, or for a child where the adult has parental responsibility or another lawful authority. An additional profile is a local record area inside the Primary Account, not a separate licence, account or login. It is distinct from Apple Family Sharing or another app-store household-access arrangement.

The App is not licensed for use as a healthcare provider's clinical record system, for occupational-health decisions, insurance underwriting, medical research or another regulated professional purpose.

Do not create, access, enter, process, export, share or erase another person’s health information unless you have lawful authority and can comply with all privacy, confidentiality, consent, capacity and best-interests duties that apply. The App does not verify identity, age, relationship, capacity or authority.

3. Licence grant

Subject to this EULA, the Terms of Use, applicable app-store usage rules and your continuing entitlement, we grant you a limited, personal, non-exclusive, non-transferable and non-sublicensable licence to install and use the App on compatible devices that you own or control.

The licence is for lawful, personal and non-commercial use. It includes updates that we make available to you unless an update is accompanied by a replacement licence.

The licence does not transfer ownership of the App or its intellectual property. It continues until you stop using the App or it ends in accordance with section 15. We will not treat the licence as arbitrarily revocable.

Any sharing, volume-purchase, managed-device or household use expressly allowed by a platform’s usage rules is permitted to the extent required by those rules. Platform-level sharing does not create an e-Zap Health additional profile, grant authority to manage another person’s health information or provide separate in-App authentication.

4. Ownership and reservation of rights

The App, including its software, source and object code, interfaces, design, branding, databases, documentation and original content framework, is owned by or licensed to E-Zap Health. Third-party and open-source components remain subject to their respective licences.

Except for the limited licence expressly granted in this EULA, all rights in the App are reserved. No right to source code, branding, trade marks, patents, designs, databases or confidential technical material is granted.

5. Licence restrictions

Except to the limited extent that applicable law or an applicable open-source licence expressly permits and does not allow the restriction to be excluded, you must not:

copy, reproduce, republish, distribute, sell, rent, lease, lend, sublicense or commercially exploit the App;
modify, translate, adapt, create derivative works from, reverse engineer, decompile, disassemble or attempt to extract the App's source code;
remove, obscure or alter ownership, trade-mark, copyright or other proprietary notices;
circumvent technical protection, authentication, payment, entitlement, usage-limit or security controls;
probe vulnerabilities, introduce malicious code, interfere with operation, overload networked features or gain unauthorised access to the App or related systems;
use the App unlawfully, fraudulently, abusively or in a way that infringes another person's rights; or
use the App or an output to provide a regulated professional service for which it is not designed.

6. Your records and limited permission

You retain any rights you hold in records, notes, images and documents that you enter or select. You are responsible for having the right and lawful authority to use that material, including material relating to an additional-profile subject.

You give the App only the permission technically necessary to store and process that material locally and to perform functions that you request. Creating an English-only or bilingual appointment-preparation report does not grant E-Zap Health, OpenAI or an online translation provider permission to receive its contents. If you deliberately save, print, show, message, email or otherwise share a report, you direct the device and chosen receiving service to handle that copy.

When you request a written Pulse review or Pulse Body Map from the Primary profile, you give us and the relevant processors a separate, limited permission to transmit and process the submitted Primary-profile text payload solely to provide, secure and support that selected Pulse action, subject to the Privacy Policy and your per-request consent. Additional profiles cannot request Pulse and their records are excluded from the payload.

This permission does not transfer ownership of your health records or permit us to use them for advertising or unrelated model training.

7. Local records, Image Hub and exports

7.1 Local storage

The App enables you to create and link information including symptoms, diagnoses, medications, surgeries, tests and scans, appointments, calendars, profile information, wellbeing and diet entries, insights, notes and supporting files. Most of this information is stored locally on your device in separate namespaces for the Primary profile and each additional profile.

You are responsible for checking the accuracy and continuing relevance of your entries and for protecting your device. The App does not verify your entries against a clinician's record and is not an authoritative medical record.

You are responsible for selecting the correct profile before viewing, entering, editing, exporting, sharing or deleting information. A profile display name is an organisational label, not verified identity. All profiles share the Primary Account’s email, authenticated session and PIN, so anyone with access to the unlocked App may be able to switch profiles.

We may be unable to recover local records if the device is lost, damaged, reset or inaccessible, if App data is removed, or if no usable device or cloud backup exists.

7.2 Image Hub

The Image Hub uses the device's system picker to let you select individual images or documents. The current App does not scan the photo library in bulk, access images in the background or use the device camera.

Image Hub files remain stored locally and may contain identifying or sensitive information. Consider cropping, redacting or obscuring information that is not needed. You remain responsible for files you add, link, retain, export or share.

7.3 App languages and localised display

The App can display reviewed interface and catalogue wording in English, French, Spanish or Simplified Chinese. The selected language and any applicable local language-feature acknowledgement are stored on the device. Changing the interface language does not itself call an AI model, translate saved free text or send health records to E-Zap Health, OpenAI or an online translation provider.

Free text remains as entered, including text entered with a supported device keyboard. A structured catalogue item may retain a canonical English value while the App displays a reviewed local-language label. If no safe reviewed translation is available, a term may remain in English or an optional unsupported entry may be omitted from a bilingual report rather than being guessed.

Written Pulse reviews and Pulse Body Map are currently available only while the Primary profile is selected in English App mode. Appointment preparation available to additional profiles or in French, Spanish or Simplified-Chinese mode is a separate local report function and does not make Pulse or another AI function available in those contexts.

7.4 Appointment-preparation reports

The App can assemble appointment-preparation information locally from records already stored on the device. Generating or previewing a report does not send its contents to E-Zap Health, Pulse, OpenAI, a Supabase Edge Function or an online translation provider. The report function does not use a generative model or unrestricted machine translation, does not use a Pulse consent receipt and does not count towards the Pulse request limit. It does not alter saved records. Other App access, backup or sharing actions may still depend on the device, settings, network or chosen service.

In English App mode, an English-only UK appointment report may include supported selected records and either the previous one month or three months of symptom-update notes and severity changes. English-interface users can instead prepare English alongside Spanish, French, Portuguese, Simplified Chinese or Italian for a healthcare discussion abroad. French-, Spanish- and Simplified-Chinese-interface users can prepare their App language alongside English for a UK healthcare discussion.

A bilingual report uses reviewed fixed labels and a narrower structured-data set. It excludes translation-sensitive free text, tests and scans, uploaded images and documents, and unsupported optional details. An unsupported core clinical term may remain in English and be identified as untranslated; an unsupported optional, custom or mixed-language entry may be omitted and disclosed as excluded rather than partially translated or guessed. Medication names are not machine-translated into a presumed equivalent.

An appointment report depends on user-entered records, selected items and the available fixed mappings. It may be incomplete, inaccurate, outdated or misleading. It is patient-prepared information, not an NHS or clinician record, certified translation, clinical letter, referral, prescription, diagnosis, medical advice, triage, interpretation or treatment recommendation. Important information should be checked against source records and medication packaging, using a qualified interpreter where appropriate.

7.5 Exports and sharing

A report, image or document remains under the App's local controls until you deliberately save, print, show, message, email or otherwise share it. Before sharing, check the selected records, language, visible output and unnecessary personal information. Choose an appropriate recipient and secure sharing method. A receiving person or external service may retain, use or transfer the copy under its own rules. Deleting an App record does not delete a copy already exported, photographed, printed, shared, backed up or stored elsewhere.

8. Pulse AI

8.1 Optional use and per-review consent

Pulse is optional and is not required for the core local record functions or local appointment-report functions. It operates only when the Primary profile is selected and you deliberately request a written Pulse review or Pulse Body Map in English App mode. Additional profiles retain non-AI appointment preparation and insights but cannot use Pulse, and their records are excluded from a Primary-profile Pulse request.

Before each written Pulse review or Pulse Body Map request, the App explains the information that may be processed. You must select the separate explicit-consent statement and then select 'Accept and continue' before generation is enabled. Consent applies only to that request and is requested again for each later Pulse action.

When you accept, Supabase records minimal consent evidence and issues a short-lived, one-time receipt. The receipt must be validated before a Pulse health payload is sent onward to OpenAI, expires after a short period, is bound to one request and cannot be reused. The consent record does not contain the Pulse health payload, free-text notes or AI response.

If you cancel or do not consent, the request is not sent. You may withdraw before submission by cancelling. Withdrawal cannot undo processing already completed lawfully.

8.2 Information and processing route

For a requested written Pulse review or Pulse Body Map, the App prepares a structured text payload from relevant Primary-profile records. It may include symptoms and update histories, diagnoses, medications, surgeries, tests and scans, results, dates, relationships between records, free-text notes and recorded profile or lifestyle information. Additional-profile records are not included.

Sensitive or identifying information typed into a record or free-text note may be included. Avoid entering unnecessary names, addresses, NHS numbers, insurance identifiers or similar details in text that may be sent to Pulse.

Actual Image Hub images and document files are not sent to or analysed by OpenAI in the current version. Pulse may receive a technical indicator that a file is linked to a record.

Records used only for an English-only or bilingual appointment-preparation report are not included in a Pulse payload merely because that report was created. A separate deliberate Pulse action and valid per-request consent receipt are required before Pulse information is sent onward to OpenAI.

The production written-Pulse and Pulse Body Map services set the OpenAI Responses API request to store: false so that the response is not kept as retrievable Responses application data. Separate provider security and abuse-monitoring retention may still apply for a limited period as explained in the Privacy Policy. The payload is pseudonymous rather than guaranteed anonymous: free text may identify a person and restricted technical correlation with separate consent or account records may be possible. E-Zap Health prohibits routine access. Enabling retrievable response storage requires prior documented privacy review and approval.

After you select Generate, the App prepares the supported text payload. The request is routed through a Supabase Edge Function, which validates the secure session and one-time consent receipt, protects the OpenAI API credential and applies operational controls. OpenAI processes the submitted text and returns a generated written review or structured Body Map response for temporary display. A Body Map is not automatically added to health records or a central database; a PDF, image or screenshot copy is created only when you choose it.

8.3 Usage and size limits

Written Pulse reviews and Pulse Body Map requests share a combined limit of four completed Pulse actions in a rolling seven-day period. A documented exemption or different service configuration may apply to a particular account.

Reasonable authentication, rate-limiting, monitoring and abuse-prevention controls may apply. If the prepared payload exceeds the supported limit, the review will not proceed. The App may ask you to review your records, but no local record is changed unless you choose to edit or delete it.

8.4 Output limitations

Pulse is designed to assist with organisation, chronology review, pattern awareness, record-quality observations, healthcare discussion points and suggested questions. The optional Body Map is a visual organisational presentation of submitted records and is not a diagnosis, clinical image interpretation or confirmation that an item affects a particular body region.

Pulse does not diagnose, predict disease, triage, prescribe, recommend medication changes or provide a treatment plan.
Outputs may be incomplete, inaccurate, inconsistent, outdated, misleading, biased, map an item to an unsuitable body region or omit an important issue. A fluent, structured or confident presentation must not be mistaken for accuracy.
Outputs depend on the quality, completeness and wording of the records supplied.
Outputs are not clinician-reviewed and must not replace professional medical advice or clinical judgement.
Pulse does not make a decision that produces legal or similarly significant effects about you.

9. Medical and emergency limitations

The App and Pulse are intended only as personal record-keeping, organisational and healthcare-preparation tools. They are not intended to be a medical device, healthcare service, diagnostic system, emergency service, treatment tool or clinical decision system.

Do not use the App, Pulse or an appointment-preparation report to decide whether to seek care, assess an emergency or acute deterioration, diagnose a condition, start or stop treatment, or change medication. Do not treat a bilingual report as a substitute for a qualified interpreter where accurate communication is important.

Emergency warning

If you believe that you or another person may need emergency medical help, contact the appropriate emergency service immediately. In the United Kingdom, call 999 for an emergency. For urgent but non-emergency help, use NHS 111 or the relevant local urgent-care service. Outside the United Kingdom, use the emergency or urgent-care service for your location. Do not wait for the App, Pulse or an appointment-preparation report.

10. Authentication and security

Access may require an email address and one-time verification code. Supabase supports authentication and secure sessions, and Resend supports verification-email delivery.

The local App PIN and your device passcode are separate protections. One PIN and unlocked session provide access to every profile; profile selection is not a security boundary. Keep your device, email account, verification codes and PIN secure, supervise access where appropriate and protect every profile subject’s confidentiality. Do not share verification codes or allow an unauthorised person to use an unlocked App session.

The selected interface language and any applicable language-feature acknowledgement are local settings. Anyone who can access an unlocked device or App session may be able to switch profiles and view locally stored records or reports across profiles.

Pulse may require session re-verification. Authentication, network or email-delivery failures may temporarily prevent access to features that depend on a secure session.

11. Updates, compatibility and availability

We may provide updates to fix defects, improve security, maintain compatibility, comply with law or platform rules, revise reviewed language mappings, change providers, manage capacity or improve functionality. You may need to install an update to continue using a networked feature safely or to receive corrected interface or report wording.

We use reasonable care and skill but do not promise that every function will always be available, uninterrupted or error-free. Networked features may be affected by maintenance, third-party outages, connectivity, security action, legal requirements or circumstances outside our reasonable control.

Compatibility may change as devices and operating systems evolve. This section does not exclude statutory rights concerning digital content or services.

12. Purchases and access entitlement

12.1 Apple

On Apple devices, the App is supplied through a paid App Store download. Apple processes the purchase, payment method, receipt and store account under its terms. The price and applicable taxes are shown before purchase.

12.2 Google Play

On Google Play, the App is free to download. Unless you qualify for grandfathered free access, full access requires a non-consumable, one-time Google Play in-app purchase during verification.

Google processes the payment method and transaction under its terms. The price and applicable taxes must be shown in the Google Play purchase interface before confirmation. The App does not currently offer an automatically renewing subscription.

12.3 Grandfathered access and restoration

A person who installed and used the App while access was free may continue to qualify for free access. Eligibility may be recognised through the verified email address, authentication user ID and an entitlement record.

Deleting local App data, reinstalling or returning to verification should not by itself cause an eligible person to be charged again if the entitlement can still be recognised.

Purchase restoration depends on the relevant store account, transaction status and entitlement checks. Apple and Google independently control their store accounts, receipts and purchase histories.

12.4 Refunds and consumer rights

Refunds may be administered through Apple, Google or us, depending on the platform and circumstances. Store policies do not remove any cancellation, refund or other remedy that applicable consumer law gives you.

13. Local deletion and remote erasure

An additional profile's wipe control is designed to erase only that profile's local health records, profile fields, appointments, calendar, trackers, insights, Image Hub records and files, relationship data and profile-specific settings, restore its default name and return to that profile's Home page. It does not sign out, change the shared PIN, delete another profile or erase the Primary Account. The Primary Account's full local deletion function is designed to erase local App information for every profile, including health records, profile information, Image Hub records and files, relationship data, local visibility and language settings, language-feature acknowledgements, the shared PIN, onboarding state and local Supabase session. It then signs you out and returns the App to email verification.

Local deletion does not automatically delete the Supabase authentication user, verified email, remote entitlement record, Pulse usage metadata, Pulse consent evidence, provider logs within an applicable retention period, store accounts, receipts, purchase histories, exported reports, backups or information held independently by another party.

To request erasure of authentication or other information held under our control, email support@ezaphealth.com. We may verify control of the address. If erasure would permanently remove evidence of grandfathered free access, we will explain that consequence before completing a verified request where it applies.

14. Third-party services and terms

Changing the App language and generating or previewing a local appointment-preparation report do not themselves appoint an additional AI or translation provider or send the report content to an external recipient. A recipient or external service becomes involved only when you deliberately save, back up or share a copy through that person or service.

Some functions depend on third parties, including Apple, Google, Supabase, Resend, Firebase Crashlytics and OpenAI. Their services may be subject to their own terms and privacy notices.

You must comply with applicable app-store, operating-system, network and device-provider terms when using the App. Mobile network or internet charges imposed by your provider are your responsibility.

We remain responsible for obligations that applicable law places on us and do not avoid responsibility merely by using a contractor or service provider.

15. Suspension, termination and ending use

You may stop using the App at any time. You may delete local data and uninstall the App. Ending use or uninstalling does not automatically erase independently held authentication, entitlement, provider or store records.

We may restrict a networked feature or suspend or terminate the licence where we reasonably believe this is necessary because of a serious or repeated breach, fraud, unlawful use, a security threat, abuse of Pulse, non-payment, a platform requirement, a legal obligation or discontinuation that makes continued supply impracticable.

When the licence ends, you must stop using and uninstall the App unless applicable law permits continued use. Rights and liabilities that arose beforehand survive. If paid access is withdrawn without a breach by you, any refund or remedy required by consumer law remains available.

16. Consumer rights and warranties

Nothing in this EULA affects rights and remedies that cannot lawfully be excluded. Depending on the circumstances, UK consumer law may require paid digital content to be of satisfactory quality, fit for a disclosed purpose and as described, and services to be performed with reasonable care and skill.

If the App does not conform to an applicable statutory right, you may be entitled to repair or replacement, a price reduction, refund or compensation for qualifying damage. The remedy depends on the facts and applicable law.

Contact support@ezaphealth.com if you believe the App is faulty or materially misdescribed.

For an Apple-distributed copy, if the App fails to conform to an applicable warranty, you may notify Apple and Apple may refund the App's purchase price under its terms. To the maximum extent permitted by law, Apple has no other warranty obligation for the App. E-Zap Health remains responsible for other claims, losses or obligations attributable to a failure to conform to an applicable warranty.

17. Our responsibility to you

We are responsible for loss or damage that is a foreseeable result of our breach of this EULA or our failure to use reasonable care and skill. Loss is foreseeable if it was an obvious consequence or both you and we knew it might occur when the contract was made.

The App is licensed for personal use. We are not responsible for business losses, including lost profit, revenue, opportunity, goodwill or business interruption, arising from use outside that permitted purpose.

We are not responsible for loss caused solely by inaccurate or incomplete information entered by you, failure to follow reasonable security or backup guidance, an unauthorised person using an unlocked device, or a third-party failure outside our reasonable control. This does not apply to the extent that our breach or negligence caused or contributed to the loss.

We are not responsible for a loss caused solely by a user presenting a report as a certified translation or verified clinical record, failing to check an untranslated or excluded entry, or sharing a report with an unintended recipient. This does not apply to the extent that our breach or negligence caused or contributed to the loss.

The medical and Pulse limitations describe the App's intended purpose; they do not excuse us from liability imposed by law.

Nothing excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of statutory consumer rights, or another liability that cannot legally be excluded or limited.

18. Platform-specific provisions

18.1 Apple-distributed copies

For an Apple-distributed copy, this EULA is the custom end-user licence agreement made available through App Store Connect. This EULA is between you and E-Zap Health, not Apple. Applicable Apple Media Services Terms, Usage Rules and mandatory platform protections continue to apply. E-Zap Health, not Apple, is responsible for the App and its content.

The licence for an Apple-distributed copy is limited to use on Apple-branded products that you own or control, as permitted by the Apple Media Services Terms and Conditions and applicable Usage Rules. Access through Family Sharing, volume purchasing, Legacy Contacts or another Apple-authorised arrangement is permitted to the extent required by those rules.

E-Zap Health is responsible for maintenance and support required by this EULA or applicable law. Apple has no obligation to provide maintenance or support for the App.

E-Zap Health, not Apple, is responsible for addressing claims relating to the App or its possession or use, including product-liability claims, claims that the App fails to comply with law, and consumer-protection, privacy or similar claims.

If a third party claims that the App or its possession or use infringes intellectual-property rights, E-Zap Health, not Apple, is responsible for investigating, defending, settling and discharging that claim, subject to applicable law.

Apple and its subsidiaries are third-party beneficiaries of this EULA for an Apple-distributed copy and may enforce the applicable provisions against you after acceptance.

18.2 Google Play copies

This EULA is between you and E-Zap Health, not Google. Google is not responsible for maintenance, support, medical or AI outputs, or claims concerning the App, except for obligations imposed on Google by its own terms or applicable law.

Use of a Google Play copy must comply with Google Play's terms. Google controls its store account, billing interface, purchase history and any purchase process that it administers.

19. Legal and trade compliance

You must not use or export the App in breach of applicable sanctions, export-control or trade laws.

For an Apple-distributed copy, you represent that you are not located in a country or region subject to a United States Government embargo or designated as supporting terrorism, and are not listed on a United States Government prohibited- or restricted-party list.

20. Changes to this EULA

We may update this EULA for a valid reason, including a change in law, security, providers, platform requirements, pricing model or App functionality, or to improve clarity and correct an error.

We will publish the updated EULA with a new effective date. Where a change is material, we will provide reasonable in-App, app-store or website notice and request fresh acceptance where required. We will not use this clause to remove accrued rights or impose an undisclosed retrospective charge.

Version 2.5 preserves and consolidates every still-relevant licence protection carried forward through Version 2.4. It adds the implemented Primary Account and additional-profile model, authority requirements for another adult or child, the shared email, session and PIN boundary, separate local profile namespaces, correct-profile responsibilities, additional-profile wipe behaviour, Primary Account full deletion, the Primary-only Pulse restriction and the distinction between in-App profiles and platform Family Sharing. It retains the Apple custom-licence provisions, telephone contact detail, multilingual and appointment-report provisions, export responsibilities, Pulse consent controls and provider response-storage safeguards.

If you do not accept a material change, you may stop using the App. Statutory remedies connected with paid access remain unaffected.

21. Governing law and courts

This EULA is governed by the law of England and Wales. If you are a consumer resident elsewhere, you retain mandatory protections given by the law of your home country.

22. General legal terms

22.1 Entire licence agreement

This EULA and applicable app-store usage rules form the agreement concerning your software licence. The Terms of Use separately govern the service and purchases, and the Privacy Policy separately explains data handling. Nothing excludes liability for fraud or removes rights arising from information that the law makes binding.

22.2 Transfer

22.3 No waiver

If either party delays enforcing a right, that does not mean the right has been waived.

22.4 Severability

If a court finds part of this EULA unlawful or unenforceable, the remaining provisions continue to apply. An affected provision will be interpreted as narrowly as necessary to make it lawful where the law permits.

22.5 Third-party rights

Except for Apple and its subsidiaries as described in section 18.1, and any right expressly granted under mandatory app-store terms, a person who is not a party to this EULA has no right to enforce it.

23. Contact us

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support, complaints and licence enquiries: support@ezaphealth.com

Telephone: +44 (0)7949 732 622

General enquiries: enquiries@ezaphealth.com

Medical Disclaimer
Last updated: 24th September 2026

Version: 2.2

Company number: 17138117

Please read this safety information before using the App
This notice explains the intended medical role and important limitations of e-Zap Health, its multilingual interfaces and appointment-preparation reports, and the optional written Pulse review and Pulse Body Map. It should be read with the Terms of Use, End User Licence Agreement, Privacy Policy, AI Transparency and Safety Notice and the separate consent information shown before each Pulse action. It is not a blanket exclusion of E-Zap Health's legal responsibilities or your statutory rights.

Key safety points

The App is a personal record-keeping, organisation and healthcare-preparation tool. It is not a healthcare service, authoritative clinical record or substitute for professional care.
A Primary Account may hold separate local profiles for other people. The account holder must select the correct profile, act with lawful authority, protect confidentiality and check information for the person whose profile is being used.
The App, appointment reports and Pulse do not diagnose, predict disease, triage, prescribe, confirm medication safety or provide a treatment plan.
A written Pulse review or Pulse Body Map is available only for the Primary profile, is generated automatically and is not reviewed or approved by a doctor or other healthcare professional. Additional-profile records are excluded from Pulse.
English-only and bilingual appointment-preparation reports are assembled locally by fixed App logic. They are patient-prepared information, not AI output, certified translations or verified clinical records.
Alternative-language labels may remain in English or be disclosed as excluded where no safe reviewed mapping is available. Use a qualified interpreter where accurate communication is important.
The App does not continuously monitor you, detect deterioration, contact a clinician or summon emergency assistance.
Do not delay seeking care, change medication or disregard professional instructions because of anything shown—or not shown—in the App.
For a life-threatening emergency in the United Kingdom, call 999. For urgent help that is not an emergency, use NHS 111 or the appropriate local urgent-care service. Outside the United Kingdom, use the emergency and urgent-care services for your location.

1. Purpose and scope of this notice

This Medical Disclaimer and Safety Notice describes the intended medical role and safety limitations of the e-Zap Health mobile application (the App), including its multilingual interfaces, local appointment-preparation reports and optional written Pulse review and Pulse Body Map.

The App enables a Primary Account holder to record, organise, update and link information for a Primary profile and up to four additional local profiles, including symptoms, diagnoses, medications, surgeries, tests and scans, appointments, calendars, profile and lifestyle information, wellbeing and diet entries, insights, notes and supporting files. It can display timelines, summaries, charts, relationships and English-only or bilingual appointment-preparation documents from information recorded or selected for the active profile. Written Pulse reviews and Pulse Body Maps are available only for the Primary profile.

Those functions are intended to support personal record-keeping and preparation for healthcare conversations. A translated label, bilingual report or Body Map remains an organisational presentation. None of those functions turns the App into an authoritative clinical record, certified translation, medical assessment, diagnostic system, treatment service or emergency service.

The App is licensed for personal use. It is not intended to be used by a healthcare provider as its clinical record system or as the basis for regulated professional decision-making.

An additional profile is an organisational record area, not a separate account, verified identity, medical record or independent safety control. All profiles share the Primary Account’s email, authenticated session and PIN. The account holder must be at least 18 and have parental responsibility or another lawful authority before managing a child profile, and must have permission or another valid authority before managing another adult’s profile.

2. Not medical advice or clinical decision support

Nothing in the App, a local appointment report, a written Pulse review or a Pulse Body Map is medical advice. A translated label, summary, timeline, chart, relationship, mapped body region, pattern observation, discussion point, suggested question or generated report must not be interpreted as:

a diagnosis or confirmation that a condition is present or absent;
an assessment of urgency, deterioration, prognosis or personal medical risk;
a prescription, treatment plan or recommendation to start, stop or change treatment;
confirmation that a medicine, dose, test, screening programme or procedure is appropriate or safe; or
a substitute for examination, investigation or judgement by a qualified healthcare professional.

A healthcare professional can consider information that you choose to share, but must independently verify the underlying information and use their own clinical judgement. A bilingual report does not replace a qualified interpreter. If App content conflicts with professional advice, a prescription, medicine packaging or an official care plan, follow the professional or official instruction and seek clarification from the relevant clinician or pharmacist.

3. Pulse AI: intended role

Pulse is an optional, user-initiated feature available only for the Primary profile in English App mode. It is not required for the App's core local record, insights or appointment-report functions. Additional profiles cannot access Pulse and their records are excluded from a Primary-profile Pulse request. Before each eligible written Pulse review or Pulse Body Map, the App presents separate information and requests explicit consent for that individual action.

For a requested written review or Body Map, the App prepares a structured text payload from relevant Primary-profile records. Depending on what has been recorded, this may include symptoms and complete update histories, diagnoses, medications, surgeries, tests and scans, results, dates, relationships between records, free-text notes and profile or lifestyle information. Additional-profile records are not included. Actual Image Hub images and document files are not sent to or analysed by OpenAI in the current version, although a technical indicator that a file is linked to a Primary-profile record may be included.

Supabase records minimal evidence of each accepted Pulse consent action and issues a short-lived, one-time receipt that must be validated before the health payload is sent onward to OpenAI. The consent record does not contain the Pulse health payload, free-text notes or AI response.

A written Pulse review is designed to help organise chronology, identify record patterns or gaps, highlight matters that may be useful to discuss and suggest questions for a healthcare appointment. It may use careful phrases such as 'may be worth discussing'. Such wording is an invitation to ask a qualified professional, not a medical recommendation or conclusion.

A Pulse Body Map is a temporary visual organisation of submitted records. A marker or label on a body region does not confirm anatomy, causation, diagnosis, disease location, severity or clinical significance. It is not automatically added to health records; a PDF, image or screenshot copy is created only when the user chooses it.

Pulse is not designed to:

diagnose or rule out a disease or condition;
calculate or communicate a patient-specific probability, prognosis or risk score;
provide emergency or urgency triage;
recommend a medicine, dose, treatment, investigation or procedure;
determine eligibility for screening, treatment or referral;
replace a consultation, physical examination, test interpretation or clinician review; or
make a decision that produces legal or similarly significant effects about the user;
interpret an actual medical image or confirm that an item affects a particular body region.

4. Limitations of AI-generated output

Written Pulse reviews and Body Maps are produced automatically by statistical and machine-learning systems. No doctor, pharmacist, nurse or other healthcare professional reviews or approves an individual Pulse response before it is shown.

AI-generated output may:

be inaccurate, incomplete, inconsistent, ambiguous, biased, outdated or misleading;
omit an important event, symptom, relationship, contraindication, red flag or alternative explanation;
give undue weight to an entry or identify a pattern that is coincidental or not clinically meaningful;
fail to identify a pattern that a qualified professional would consider important;
place, label or omit an item on an unsuitable body region;
appear more accurate or authoritative than it is because the presentation is fluent, structured or visual;
misunderstand shorthand, spelling, dates, context, negation or free-text notes;
vary between requests even where the underlying records are similar; and
refer to general healthcare concepts that are not appropriate to the user's individual circumstances.

Pulse does not have a complete clinical picture. It cannot examine the user, ask all clinically necessary follow-up questions, verify entries against NHS or clinician records, or know information that has not been recorded. It may not have access to the most recent clinical guidance or local service arrangements. The quality and safety of output depend on the completeness, accuracy, dates, wording and context of submitted records.

The absence of a warning, observation or discussion point is not reassurance that a record is complete, a condition is absent, a symptom is safe or no medical attention is needed.

Written Pulse reviews and Pulse Body Map requests share a combined standard limit of four completed Pulse actions in a rolling seven-day period, subject to a documented exemption or changed service configuration. A usage limit, failed request or unavailable response must never delay professional or emergency care.

5. No monitoring, alerts or emergency response

The App does not continuously monitor health, vital signs, behaviour, location or device sensors. It does not watch for deterioration in the background and does not guarantee that it will recognise urgent symptoms, abnormal values, dangerous combinations or a medical emergency.

The App, appointment reports and Pulse do not contact a GP, pharmacist, hospital, emergency service, family member or carer. They do not summon an ambulance or create a monitored clinical alert. Do not wait for an App notification, report or Pulse response before seeking help.

Emergency and urgent care
If you believe that you or another person may need emergency medical help, call the appropriate emergency service immediately. In the United Kingdom, call 999 for a life-threatening emergency. For urgent medical help that is not an emergency, use NHS 111 or the relevant local urgent-care service. If you are outside the United Kingdom, use the emergency and urgent-care services for your location.

6. Medication safety

The App can store medication names, dose information, dates, links and user-recorded adherence information. Recording or displaying that information does not verify that a medicine or dose was prescribed, entered correctly, taken correctly or remains suitable.

For a bilingual appointment report, a standard catalogue or already-English medication name may be reproduced. A Chinese-, French- or Spanish-language custom medication name is not machine-translated into a presumed English or generic equivalent. An unsupported or mixed-language name may be excluded and disclosed as excluded. This reduces guessing but can make the medication list incomplete.

Where possible, check medication information against the original packaging or prescription and show the medicine name, strength and active ingredient to the healthcare professional. A photograph stored separately in Image Hub is supporting information only and is not proof that the medicine is current, correctly identified or being taken as prescribed.

The App and Pulse do not reliably check or confirm:

medicine identity, strength, formulation, route, timing or dose;
interactions between medicines, supplements, food, alcohol or health conditions;
allergies, contraindications, side effects or pregnancy and breastfeeding considerations;
kidney, liver or other factors that may affect medication safety;
whether a missed, repeated or exceeded dose requires a particular action; or
whether a medicine should be started, stopped, continued or changed.

Never start, stop, repeat, reduce, increase or otherwise change medication because of App content or a Pulse response. Ask a qualified prescriber or pharmacist. If you suspect an overdose, serious reaction or medical emergency, seek urgent professional help immediately.

7. Symptoms, diagnoses, tests, scans and procedures

Symptoms, diagnoses, tests, scan details, results, surgeries and procedures are recorded or selected by the user. Their presence in the App does not mean that E-Zap Health, Pulse or a healthcare professional has verified them.

A reviewed interface or report label is a display mapping for organisation. It does not verify that the original term was selected correctly, that the translated label is clinically appropriate in every context or that two language variants are exact clinical equivalents. Where no safe reviewed mapping is available, a core term may remain in English and be identified as untranslated, or an unsupported optional entry may be omitted and disclosed.

The App does not independently diagnose symptoms, confirm a diagnosis, interpret an actual medical image or document, validate a laboratory reference range, or determine the clinical significance of a test or scan result. A result recorded as normal does not rule out illness, and a result recorded as abnormal does not by itself establish a diagnosis.

Dates, status labels and relationships between records are organisational. A linked record does not prove causation, and an unlinked record does not prove that no clinical relationship exists. Editing, deleting or failing to link a record can change the context available to summaries and Pulse.

8. Profile, lifestyle, wellbeing and diet information

Profile, age, lifestyle, wellbeing, diet, blood-pressure and similar entries may be self-reported, entered by the Primary Account holder for a profile subject, or calculated from user-provided values. They are not independently measured, identity-checked or clinically validated by E-Zap Health. A profile name or age field does not verify who the information concerns or whether a user has authority to manage it.

For the Primary profile only, Pulse may use such entries as context for a cautious discussion point. Additional-profile insights are local non-AI tools. Neither form of output establishes causation, diagnoses a condition, determines that a lifestyle factor is safe or unsafe, or provides a personalised diet, exercise, weight-management or prevention programme.

9. Accuracy and completeness of personal records

The usefulness of the App depends on selection of the correct profile and the accuracy, completeness, dates, wording, selected language and continuing relevance of information recorded by the user. A record entered, linked, exported or erased in the wrong profile can create a misleading or incomplete history. Errors, omissions, duplicate entries, outdated information, ambiguous or mixed-language notes, incorrect links or unsupported terms may produce misleading displays, incomplete reports or, for the Primary profile, misleading Pulse output.

Review important information, exclusions, untranslated terms and medication details before using or sharing it for a healthcare conversation. Correct mistakes and keep relevant records current. The App does not replace the records held by a GP, hospital, pharmacy or other healthcare provider and should not be the only source of critical information such as allergies, current medicines or emergency details.

Local records may be unavailable if a device is lost, damaged, reset or inaccessible, if App data is deleted, or if no usable backup exists. Separate information about storage, deletion, exports and backups appears in the Terms of Use, EULA and Privacy Policy.

10. No healthcare-professional relationship or supervision

Using the App, a local appointment report or Pulse does not create a doctor-patient, pharmacist-patient, clinician-patient, interpreter-client, fiduciary or other professional healthcare relationship between the user and E-Zap Health Ltd, its personnel, OpenAI, Supabase or another technology or infrastructure provider.

E-Zap Health support personnel provide administrative or technical support only. They do not provide medical advice, monitor records or respond as an emergency service. Do not send an urgent medical request to an E-Zap Health support address.

A healthcare professional who receives an App report, Body Map or written Pulse output remains responsible for independently verifying the source information and applying their own professional judgement. The App does not impose a clinical conclusion or determine the patient's outcome.

11. User responsibility and safe use

To use the App safely, you should:

confirm the active profile before viewing, entering, editing, linking, exporting, sharing or deleting information;
manage another person’s profile only with lawful authority, involve them where appropriate, and protect their confidentiality because one PIN and unlocked session provide access to every profile;
seek qualified professional advice for symptoms, diagnoses, medicines, test results, treatment and care decisions;
not delay seeking care or disregard professional advice because of App content or the absence of an App warning;
review automatically generated Pulse material and every appointment report before saving, printing, emailing or showing it to another person;
check translated labels, untranslated terms, exclusions, medication names and source records, and do not fill a gap by guessing;
use a qualified interpreter where accurate clinical communication is important and do not present a bilingual report as a certified translation;
tell a healthcare professional that an appointment report, Body Map or written Pulse review was prepared from user-recorded information and may be incomplete;
use the current compatible App version and report a suspected technical or content error to E-Zap Health; and
stop relying on a feature if it appears incomplete, inconsistent, unavailable or incorrect.

12. App languages, appointment reports, exports and sharing

12.1 App language and fixed mappings

The App can display reviewed interface and catalogue wording in English, French, Spanish or Simplified Chinese. Portuguese and Italian are currently appointment-report language options rather than complete App interface languages. Changing the interface language changes supported labels and catalogue displays; it does not translate saved free text, validate the clinical meaning of an entry or send health records to an AI or online translation provider.

Free text remains as entered. A catalogue entry may retain a canonical English value while a reviewed local-language label is displayed. If no safe reviewed mapping is available, a term may remain in English or an optional unsupported entry may be omitted rather than guessed. A user should not assume that a displayed label is an exact translation for every clinical context.

12.2 Appointment-preparation reports

The App assembles appointment-preparation reports locally from records already stored on the device. Generating or previewing a report does not send its contents to E-Zap Health, Pulse, OpenAI, a Supabase Edge Function or an online translation provider. The report function uses deterministic App code and reviewed fixed mappings, not a generative model or unrestricted machine translation. It does not alter the underlying records.

Bilingual reports use a narrower structured-data set. They exclude translation-sensitive free text, tests and scans, uploaded images and documents, and unsupported optional details. An unsupported core clinical term may remain in English and be identified as untranslated; an unsupported optional, custom or mixed-language entry may be omitted and disclosed as excluded. Medication names are not machine-translated into a presumed equivalent.

An appointment report depends on user-entered records, selected items and available fixed mappings. It may be incomplete, inaccurate, outdated or misleading. It is patient-prepared information, not an NHS or clinician record, certified translation, clinical letter, referral, prescription, diagnosis, medical advice, triage, interpretation or treatment recommendation. Important information should be checked against source records and medication packaging, using a qualified interpreter where appropriate.

12.3 Pulse outputs, exports and sharing

Summaries, appointment-preparation documents, charts, images, reports, written Pulse reviews and Body Maps are intended to support organisation and conversation. They are not certified medical records, clinical letters, prescriptions, referrals or professional reports.

Review the selected records, report language, exclusions, untranslated terms and visible output before sharing, and use an appropriate secure method. Once a report, PDF, image or screenshot is saved, printed, photographed, messaged, emailed or otherwise shared, the copy leaves the App's local controls. Deleting or correcting an App record does not update or delete a copy already exported or stored elsewhere.

13. Availability and technical limitations

A feature may be unavailable, delayed, interrupted or incomplete because of connectivity, device compatibility, maintenance, provider outages, session verification, security controls, rate limits, payload-size limits or other technical conditions. Local report generation may not require a network connection, but saving, backing up or sharing through an external service may depend on the device, settings or connectivity. A failed request, missing output or unavailable feature must not be treated as medical reassurance.

If the App behaves unexpectedly or displays information that appears unsafe or incorrect, do not rely on it. Use an authoritative source or qualified healthcare professional and report the problem to support@ezaphealth.com.

14. Intended regulatory position

E-Zap Health intends the current App, multilingual interfaces, appointment-preparation reports, written Pulse reviews and Pulse Body Maps to operate as personal record-keeping, organisation and healthcare-preparation tools. They are not intended by E-Zap Health to perform a medical purpose such as diagnosis, prevention, monitoring, prediction, prognosis, treatment, alleviation of disease or injury, or patient-specific clinical decision-making. The report and Body Map functions present user-entered information and do not determine a diagnosis, urgency, treatment or healthcare outcome.

Whether software is legally regulated as a medical device depends on its actual intended purpose, functionality, presentation and claims under applicable law. Adding a disclaimer does not by itself determine regulatory classification. This notice does not override legal requirements, and E-Zap Health must reassess the position if the functionality, language claims, outputs or intended purpose materially changes.

No statement in this notice should be interpreted as a claim that the App is UKCA- or CE-marked as a medical device.

15. Consumer rights and responsibility

This notice explains intended use and foreseeable limitations. It does not exclude or restrict a right or remedy that cannot lawfully be excluded, including applicable statutory rights concerning digital content or services.

Nothing in this notice excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of statutory consumer rights, or another liability that cannot legally be excluded or limited.

The medical limitations in this notice do not excuse E-Zap Health from responsibility where its breach of contract, negligence or other legal fault causes or contributes to a loss for which the law makes it responsible.

16. Related documents, updates and contact

The Terms of Use govern the service, purchases and user conduct. The EULA governs the software licence. The Privacy Policy explains personal-information handling. The AI Transparency and Safety Notice explains AI and non-AI boundaries. The separate Pulse notice and consent control explain the information that may be processed for each requested written review or Body Map.

This safety notice may be updated when functionality, providers, law or safety information changes. A material change will be communicated and fresh acceptance requested where required under the Terms of Use or applicable law.

Version 2.2 preserves every still-relevant safety statement carried forward through Version 2.1. It adds the implemented Primary Account and additional-profile model, correct-profile and confidentiality responsibilities, authority requirements for another adult or child, the shared PIN and session boundary, the Primary-only Pulse restriction and the exclusion of additional-profile records from Pulse. It retains the existing multilingual, appointment-report, medication, interpreter, Body Map, consent and export safeguards.

Administrative and technical support is available from support@ezaphealth.com. General enquiries may be sent to enquiries@ezaphealth.com. These addresses are not monitored as medical or emergency services.

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support: support@ezaphealth.com | General enquiries: enquiries@ezaphealth.com

A.I. Transparency Notice & Disclaimer
Last updated: 24th September 2026

Version: 2.5

Company number: 17138117

What this notice does
This notice explains which e-Zap Health functions use artificial intelligence, which functions do not, what information Pulse processes, how a written Pulse review or Pulse Body Map is produced, the roles of OpenAI and Supabase, the principal limitations and the safeguards intended to reduce foreseeable harm. It should be read with the Privacy Policy, Terms of Use, End User Licence Agreement, Medical Disclaimer and the consent information shown before every Pulse request.

Key facts

Only the written Pulse review and Pulse Body Map use generative AI in the current App. They are currently available only for the Primary profile in English App mode. Additional-profile records are excluded from Pulse.
The multilingual App interfaces and all English-only or bilingual appointment-preparation reports are local, deterministic software functions. They do not send report content to OpenAI, Pulse or an online translation provider.
Pulse is optional. The App's core local record functions remain available if you do not use it. Additional profiles retain local appointment preparation and insights but do not have Pulse controls.
Every written Pulse review and Pulse Body Map request is initiated by the user and requires a fresh, explicit consent action.
Supabase records minimal evidence of each accepted Pulse consent action and issues a short-lived, one-time receipt. A Pulse health payload is not sent to OpenAI unless that receipt is valid, subject only to a controlled legacy transition configuration where lawfully maintained for an older App build.
Pulse uses a general-purpose generative AI model supplied through the OpenAI API. The output is AI-generated and is not reviewed by a clinician before display.
Pulse currently prepares information from across the supported record categories; it does not offer record-by-record selection for an individual review.
The current payload may include health records, complete symptom update histories, free-text notes and recorded profile information. Identifying information typed into those fields may be included.
Actual Image Hub images and document files, appointment records, detailed diet tracker entries and detailed wellbeing tracker entries are not currently sent to OpenAI.
Pulse does not diagnose, triage, prescribe, predict personal disease risk, make treatment decisions or make decisions producing legal or similarly significant effects.
A bilingual appointment report is patient-prepared information produced from reviewed fixed mappings. It is not AI-generated, a certified translation, a verified clinical record, medical advice or a treatment recommendation.
AI output may be wrong, incomplete, biased, inconsistent or misleading. It must be checked and must not replace qualified professional judgement.

1. Purpose and status of this notice

This notice applies primarily to Pulse, the optional generative-AI feature within the e-Zap Health mobile application (the App), and also explains which related App functions do not use AI. References to 'we', 'us' or 'E-Zap Health' mean E-Zap Health Ltd.

It is intended to provide a clear, accessible explanation of the current feature. It is not a complete privacy notice, contractual licence or medical disclaimer. Data-protection purposes, lawful bases, retention periods, international transfers and individual rights are addressed more fully in the Privacy Policy.

This document describes the current version as at its effective date. It does not promise that the feature, model or provider will never change. Material changes must be assessed and the notice, consent flow and related documents updated where necessary.

2. What Pulse is—and what it is not

Pulse is designed to organise user-recorded information into a concise healthcare-preparation review. It can identify chronology, recurrence, change over time, explicit links between records, potentially useful discussion areas, suggested questions and practical record-quality gaps. The optional Pulse Body Map uses the same submitted record information to present an AI-organised visual summary of mapped body regions and supporting details.

Pulse may use cautious wording such as 'may be worth discussing' or 'could be useful to review'. This means that a topic may be suitable to raise with a qualified healthcare professional. It is not a clinical finding, instruction or recommendation.

Pulse is not intended or authorised to:

diagnose, confirm, exclude, prevent, monitor, predict, treat or alleviate a disease or injury;
calculate or communicate a patient-specific probability, prognosis or medical risk score;
assess an emergency, urgency or deterioration, or decide whether the user should seek care;
recommend a medicine, dose, treatment, screening test, investigation, referral or procedure;
interpret an actual medical image, document or raw diagnostic file;
replace a clinician, pharmacist, examination, test interpretation or professional decision; or
make eligibility, insurance, employment, credit, legal or other similarly significant decisions about a person.

2.1 Functions that do not use AI

The App can display reviewed interface and catalogue wording in English, French, Spanish or Simplified Chinese. Changing the interface language is a localised display function. It does not itself call an AI model, translate saved free text or send records to OpenAI. Portuguese and Italian are currently available as travel-report languages rather than complete App interface languages.

Pulse written reviews and Pulse Body Map are currently available only while the Primary profile is selected in English App mode. Additional profiles, and French-, Spanish- and Simplified-Chinese-interface users, can access appointment preparation from the My AI area, but the location and name of that navigation area do not make the report generator or local insights an AI feature.

The English-only UK appointment report and every bilingual appointment report are assembled locally by deterministic App code from records already stored on the device. These functions do not use a generative model, unrestricted machine translation, Pulse, a Supabase Edge Function, OpenAI or an online translation provider. They do not use the Pulse consent receipt, do not count towards the Pulse request limit and do not themselves require an AI or online translation connection. Other App access, system sharing or backup actions may still depend on the device, settings, network or chosen service.

In English App mode, an English-only UK report may include the selected previous one month or three months of symptom-update notes and severity changes. English-interface users can alternatively create English alongside Spanish, French, Portuguese, Simplified Chinese or Italian for a healthcare discussion abroad. French-, Spanish- and Simplified-Chinese-interface users can create a report in their App language alongside English for a UK healthcare discussion.

Bilingual reports use a narrower structured-data set and reviewed fixed labels. They exclude translation-sensitive free text, tests and scans, uploaded images and documents, and unsupported optional details. An unsupported core clinical term may remain in English and be identified as untranslated; an unsupported optional, custom or mixed-language entry may be omitted and disclosed as excluded rather than guessed. Medication names are not machine-translated into a presumed equivalent.

A local appointment report may still be incomplete, inaccurate, outdated or misleading because it depends on user-entered records, selected items and the available fixed mappings. It is not an NHS or clinician record, certified translation, clinical letter, referral, prescription, diagnosis, medical advice, triage, interpretation or treatment recommendation. Important information should be checked against source records and medication packaging, using a qualified interpreter where appropriate.

3. User choice and per-review explicit consent

Pulse does not run continuously or review records in the background. It is unavailable while an additional profile is selected. A written Pulse review or Body Map request begins only from the Primary profile after the user opens Pulse, reads the processing information, ticks the explicit-consent checkbox, selects 'Accept and continue' and then selects the relevant generate control.

The consent applies only to that review. A new consent action is required for every later review. Cancelling or leaving the consent unticked prevents the generate control from being used. Declining Pulse does not prevent use of the App's core local record features.

When the user selects 'Accept and continue', Supabase records the authenticated user ID, server timestamp, exact consent-notice version and hash, App version and build, platform, receipt identifier and later request status. It does not put the Pulse health payload, free-text notes or AI response into this consent record. The receipt expires after a short period, is bound to one request and cannot be reused for another Pulse action.

Consent may be withdrawn before submission by cancelling. Once a request has been submitted and processing has occurred, withdrawal cannot reverse processing already completed lawfully, but the user may decline all future reviews.

The Primary Account holder must be at least 16. A person aged 16 or 17 may use the Primary profile for themselves but must not create or manage another person’s profile. An adult aged 18 or over may create an additional profile only with lawful authority, including parental responsibility or another lawful authority for a child, or permission or another valid authority for an adult. Additional-profile information cannot be submitted to Pulse through the intended interface.

4. Information used for a Pulse review

4.1 Current review scope

The current version does not provide a control for choosing individual records one by one. When an eligible review is requested from the Primary profile, the App prepares a structured text payload from the supported Primary-profile information recorded on the device. Empty or unavailable fields are omitted, but the review is otherwise drawn from across the supported Primary-profile categories. Additional-profile namespaces are excluded.

Depending on what the user has recorded, the payload may include:

symptoms, severity, dates, duration, frequency, locations, status, providers and complete symptom update histories;
free-text notes, including notes entered in symptom updates;
diagnoses, medications, dose information, user-recorded dose-status entries and links between records;
surgeries or procedures, recovery and follow-up information;
tests and scans, recorded results, follow-up status and links to other records;
record dates, calculated durations, historical categories and technical local identifiers used to preserve relationships;
age in years, biological sex, height, weight, calculated body mass index, blood-pressure history, allergies, smoking information, alcohol use and work type where recorded; and
locally derived chronology, relationship and signal summaries prepared to help structure the AI request.

4.2 Information not currently included as content

The current Pulse payload does not include:

records stored in any additional profile;
the actual image or document files stored in Image Hub;
raw PDFs, photographs, scans or screenshots for visual analysis;
appointment records;
detailed diet tracker entries or detailed wellbeing tracker entries;
a dedicated date-of-birth field;
the verification email address, optional username or authentication credentials as intentional payload fields; or
a purpose-built NHS number, insurance identifier or postal-address field.

Pulse may receive a technical indicator or local identifier showing that an image or document is linked to a record, but it does not receive or analyse the file itself in the current version.

Records used only to generate an English-only or bilingual appointment-preparation report are not included in a Pulse payload merely because that report was created. A separate, deliberate Pulse action and valid per-request consent receipt are required before Pulse information is sent onward to OpenAI.

Free text can contain identifiers
The App cannot guarantee that a Pulse payload is anonymous or de-identified. A name, address, date of birth, NHS number, insurance identifier or other sensitive detail typed into a record or free-text note may be transmitted. Users should avoid recording unnecessary identifiers in text that may be sent to Pulse.

5. How a Pulse review is produced

The current processing sequence is:

After the user accepts the consent notice, Supabase records minimal consent evidence and issues a short-lived, one-time receipt.
When the user selects Generate from the Primary profile, the App reads the supported Primary-profile records and prepares the selected written Pulse review or Pulse Body Map. Additional-profile namespaces are excluded.
Local code structures the information and derives organisational context such as durations, chronology, explicit relationships, record counts and rule-based signal summaries.
The App sends the structured request through a Supabase Edge Function. Supabase validates the authenticated session and consent receipt, protects the OpenAI credential, checks operational limits and routes an eligible request.
The Edge Function sends the text request to the OpenAI Responses API. A general-purpose OpenAI model generates a structured response under E-Zap Health's safety and output instructions.
The response is checked for the required machine-readable structure and returned to the App for temporary display. A Body Map is not automatically saved to health records or a central database; a PDF, image or screenshot copy is created only when the user chooses it.

The local relationship and signal stages apply programmed rules to user-recorded information. The generative stage is probabilistic: it predicts suitable text from the supplied context and instructions rather than retrieving a verified clinical conclusion from an authoritative patient record.

Pulse requests are standalone. The current feature is not a conversational chatbot and does not use a previous Pulse conversation as chat memory for a later review.

6. Providers and roles

E-Zap Health Ltd

E-Zap Health defines Pulse's intended purpose, selects the service configuration, builds the payload and safety instructions, presents the output, determines the user controls and remains responsible for its own legal and product-governance obligations.

Supabase

Supabase provides authentication, secure-session validation, consent-receipt storage and validation, Edge Function routing and limited usage-control infrastructure. The Edge Function is not designed to write the Pulse health payload or generated response into a central Supabase health-record database. Limited consent, request, user-ID, timestamp, security and usage metadata may nevertheless be processed.

OpenAI

OpenAI provides the API and general-purpose model that processes the submitted text and generates the written Pulse review or structured Body Map output. E-Zap Health does not train the underlying model, control its training data or independently inspect every source from which the model learned.

OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. E-Zap Health does not authorise Pulse data for advertising or unrelated model training. The Privacy Policy contains the fuller provider and international-transfer information.

7. What the output contains

A successful response may contain:

a concise overview;
key healthcare journeys or record patterns;
priority discussion points;
suggested questions for a clinician or pharmacist;
record-quality observations;
a safety note; and
where the user chooses the optional Body Map, mapped body-region cards and separate supporting symptom and medication details. A record that cannot be placed safely may be shown as not mapped rather than forced into a body region.

A confidence label describes how clearly the supplied records support a generated organisational pattern. A priority label indicates possible usefulness for a healthcare discussion. Neither is a validated clinical score, disease probability, urgency rating or prediction of personal medical risk.

The order, wording and number of observations may vary between requests. The absence of a topic does not mean it is unimportant, safe, clinically excluded or already considered by a professional.

8. Important limitations and foreseeable risks

Pulse may:

produce inaccurate, fabricated, incomplete, inconsistent, ambiguous or outdated statements;
place an item in an unsuitable region, fail to map it, or present a visual arrangement that must not be treated as clinical confirmation of anatomy, causation or severity;
misunderstand spelling, shorthand, dates, negation, chronology, a language other than English, mixed-language content or the meaning of a free-text note;
omit a relevant symptom, interaction, contraindication, alternative explanation or record relationship;
give undue weight to an entry or describe a coincidental pattern as meaningful;
fail to identify a pattern that a qualified professional would consider important;
repeat or amplify an error, omission or bias in the user-entered records, local rules, model or underlying training data;
perform unevenly for uncommon conditions, unusual presentations, limited records, different language styles or groups under-represented in model training;
use general healthcare concepts that are inappropriate for the individual's circumstances;
create automation bias, where a user or recipient gives an AI output more weight than it deserves because it appears structured, confident or technically generated; and
produce a different answer when the same or similar information is submitted again.

Pulse cannot examine the user, verify an identity, ask all clinically necessary follow-up questions, confirm entries against NHS or clinician records, access information that was not recorded, or guarantee access to the latest clinical guidance or local service arrangements.

Input accuracy is therefore critical. Incorrect dates, outdated records, duplicate entries, unclear links and incomplete notes can produce a misleading review. Automatically calculated or categorised information, including BMI, durations and relationship strength, can also be affected by inaccurate inputs.

9. Human oversight and automated decision-making

No doctor, pharmacist, nurse or other healthcare professional reviews or approves an individual Pulse response before it is displayed. E-Zap Health personnel do not routinely monitor the user's records or review the output in real time.

The user provides the immediate human review and must decide whether an observation is relevant enough to raise with a qualified professional. A structured, fluent or confident presentation must not be mistaken for accuracy. A clinician who sees a Pulse output must independently verify the underlying information and apply their own professional judgement.

Pulse is not used by E-Zap Health to make a solely automated decision producing legal or similarly significant effects about the user. It does not determine access to employment, insurance, credit, healthcare, benefits or another service. It is not used to create an advertising profile, social score or eligibility decision.

10. Medical safety and appropriate use

Pulse output is healthcare-preparation material, not medical advice. Do not use it to decide whether to seek care, assess urgency, diagnose a condition, interpret a test independently, start or stop treatment, or change medication.

Do not delay seeking professional help because Pulse is unavailable, produces no warning, omits a concern or appears reassuring. The App does not continuously monitor the user, detect deterioration, contact a clinician or summon emergency assistance.

Emergency and urgent care
For a life-threatening emergency in the United Kingdom, call 999. For urgent medical help that is not an emergency, use NHS 111 or the relevant local urgent-care service. Outside the United Kingdom, use the emergency and urgent-care services for the user's location. Do not wait for Pulse.

11. Data protection, retention and user rights

Primary-profile health information submitted to Pulse is special category personal data. E-Zap Health relies on the user’s per-review consent and explicit consent for the processing described in the Privacy Policy. Consent must be freely given, specific, informed and affirmative. The user can decline Pulse without losing the core local record functions. Pulse is not offered for an additional profile, so no additional-profile consent action authorises Pulse processing.

The production written-Pulse and Pulse Body Map services set the Responses API request to store: false and instruct OpenAI not to keep the response as retrievable Responses application data. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. OpenAI may still retain limited customer content in separate security and abuse-monitoring logs, generally for up to 30 days, and may retain limited information for longer where required or permitted by law or needed to address security or abuse. E-Zap Health does not claim that the current Pulse service has zero data retention.

The intentional Pulse payload excludes email, username, Supabase authentication ID and credentials as dedicated fields. Free text may identify a person, and a request reference can be associated under restricted administrative access with separate consent and account records. Pulse information is therefore pseudonymous, not anonymous. E-Zap Health prohibits routine viewing or correlation and uses non-identifying evidence where practicable for technical checks.

Supabase and E-Zap Health may process limited consent, request and usage metadata to authenticate requests, demonstrate the per-request consent action, enforce the rolling limit, protect the service and investigate failures. Consent evidence normally may be kept for up to six years where reasonably necessary for accountability, complaints or legal claims, subject to earlier erasure where required and longer retention for an active legal hold. The consent record does not contain the Pulse health payload, free-text notes or AI response. The current Edge Function is not designed to store the submitted health payload as a Supabase health record.

The production non-retention instruction is a mandatory server-side safeguard. It is verified through source review, deployed-version comparison and controlled fictional testing; a controlled fictional request completed on 10 August 2026 without creating a new retrievable dashboard record. The safeguard is not presented as a user-selectable dashboard preference.

Enabling retrievable response storage would be a material high-risk change and is prohibited unless a documented data-protection impact assessment, lawful-basis and special-category-data review, retention and deletion design, access-control review, transparency update and signed approval are completed before activation.

The Privacy Policy explains lawful bases, retention, transfers, access, erasure, objection, restriction, complaints and the limits of local-data rights. It is available at https://www.ezaphealth.com/privacy-policy/.

12. Operational safeguards and service limits

Current safeguards include:

a profile-access gate that exposes Pulse only for the Primary profile and excludes additional-profile namespaces from payload preparation;
a separate explicit-consent step for each review;
a versioned, server-recorded, short-lived and one-time consent receipt that must be validated before a Pulse payload is sent to OpenAI;
authenticated Supabase session validation and occasional session re-verification;
server-side protection of the OpenAI API credential;
a constrained system prompt and rules prohibiting diagnosis, risk prediction, medication changes, emergency triage and invented facts;
structured-output validation and a required safety-note field;
timeouts, limited retry handling and safe fallback responses;
a payload-size check before an oversized request is sent onward to OpenAI;
a combined standard limit of four completed written Pulse reviews or Pulse Body Map requests in a rolling seven-day period, subject to a documented account exemption or changed service configuration; and
limited logs and usage metadata for security, reliability, fair use and incident investigation.

These controls reduce risk but cannot eliminate model error, provider failure, unauthorised access, security incidents or unsuitable output. A technical control must not be treated as clinical validation.

If a prepared payload exceeds the supported limit, the request is rejected before it is sent onward to OpenAI. The health payload has nevertheless reached the Supabase Edge Function for the size check. No local record is changed unless the user separately chooses to edit or delete it.

13. Accuracy, fairness and responsible review

E-Zap Health aims to constrain Pulse to the recorded evidence and to use calm, non-judgemental language. The instructions prohibit shame, blame, unsupported certainty and invented clinical facts. Those instructions are safeguards, not a guarantee that every output will comply.

Users should critically review the output, compare it with the underlying records and consider whether language relating to age, sex, weight, smoking, alcohol, work, disability or another characteristic appears inaccurate, stereotyped or unfair. A suspected error, unsafe output or discriminatory pattern should be reported to support@ezaphealth.com with no more health information than necessary.

E-Zap Health should monitor incidents and material changes, test foreseeable misuse, review whether data collection remains necessary and proportionate, and reassess the feature when the model, provider, purpose, outputs or user population changes materially.

14. Intended regulatory position

E-Zap Health intends Pulse to operate as a personal record-organisation and healthcare-preparation feature. It is not intended by E-Zap Health to perform a medical purpose such as diagnosis, prevention, monitoring, prediction, prognosis, treatment, alleviation of disease or injury, or patient-specific clinical decision-making.

Regulatory classification depends on the actual intended purpose, functionality, presentation, instructions and promotional claims under the law that applies. This notice does not determine classification, create an exemption or override regulatory requirements. E-Zap Health must reassess the position if functionality or claims materially change.

No statement in this notice should be interpreted as a claim that Pulse is UKCA- or CE-marked as a medical device. Where the App is offered in another jurisdiction, additional AI, consumer, privacy, accessibility or medical-software obligations may apply.

15. Transparency when using or sharing output

The App identifies the feature as Pulse AI and presents the returned material as an AI-generated review. A user who shares, copies or relies on an output should not present it as a clinician-authored report, verified medical record or professional conclusion.

A locally generated appointment-preparation report should not be labelled as a Pulse or AI output. A bilingual report should not be represented as a certified translation or as having been checked by a clinician, pharmacist, translator or interpreter.

Before showing an output to another person, review it for accuracy and unnecessary personal information. A Body Map PDF, saved image or screenshot is a user-controlled local copy. Once copied, photographed, printed, messaged, emailed or otherwise shared, that copy is outside the App's local controls.

16. Changes, accountability and contact

E-Zap Health may change the OpenAI model, prompts, local derivation rules, output format, limits, provider configuration or other feature details for a valid reason, including safety, security, reliability, legal compliance or service improvement. A material change to purpose, data scope or risk must be assessed before deployment and communicated where required.

Questions, suspected errors, safety concerns and privacy requests may be sent to support@ezaphealth.com. General enquiries may be sent to enquiries@ezaphealth.com. These addresses are not medical or emergency services.

A data-protection complaint may also be made to the UK Information Commissioner's Office. Information is available at https://ico.org.uk/make-a-complaint/.

Version 2.5 preserves and consolidates every still-relevant transparency and safety statement carried forward through Version 2.4. It adds the implemented Primary Account and additional-profile boundary, identifies local appointment preparation and insights for additional profiles as non-AI functions, restricts Pulse to the Primary profile, confirms that additional-profile namespaces are excluded from Pulse payload preparation, and records the related profile-access safeguard. It retains the existing AI/non-AI, multilingual, consent, automation-bias, provider-retention and restricted-access disclosures.

E-Zap Health Ltd

Company number: 17138117

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Support: support@ezaphealth.com

General enquiries: enquiries@ezaphealth.com

- Terms of Use- End User License Agreement- Medical Disclaimer- A.I. Disclaimer

Terms of UseUpdated: 24th September 2026

End User License AgreementLast updated: 24th September 2026

Medical DisclaimerLast updated: 24th September 2026

A.I. Transparency Notice & DisclaimerLast updated: 24th September 2026

- Terms of Use
- End User License Agreement
- Medical Disclaimer
- A.I. Disclaimer

Terms of Use
Updated: 24th September 2026

End User License Agreement
Last updated: 24th September 2026

Medical Disclaimer
Last updated: 24th September 2026

A.I. Transparency Notice & Disclaimer
Last updated: 24th September 2026