ZindaExplore Zinda Clinic
☰
Ask ZindaHealth toolsYour guidesLibraryExploreFrameworkCasesOur methodObservatoryChai Shots

Privacy & access

Know what you share.

The public research library is available without an account. Here is how the contact features on this site work.

Clinic contact requests

The clinic form collects your name, email address and permission to contact you, together with the submission time. It submits directly to Google Forms and stores the response in a private Google Sheet in Zinda’s Google Workspace. Workspace Gmail sends an acknowledgment from clinic@zinda.health, and the clinic team follows up about availability and next steps. No research chat or research account details are attached. Clinic inquiries are not sent through Resend and do not subscribe you to Field Notes.

Please do not include symptoms, diagnoses, lab results or medical records. This is a contact request, not medical intake. Reply to clinic@zinda.health to update your details, request access or deletion, or stop follow-up. Inquiry records are retained while handling your request and necessary follow-up.

Research contact and newsletter

General research, collaboration and access requests send the details you enter through Resend to the research team. Use these forms for general inquiries without sensitive health information. Optional Field Notes subscriptions are handled separately by Substack at blog.zinda.health. Manage or unsubscribe through Substack; neither research access nor a contact request creates a newsletter subscription.

Ask Zinda research assistant

Ask Zinda is for adults 18 or older. It explains selected research summaries, published N=1 case literature, and reviewed information about Zinda Clinic and our educational tools. It does not diagnose, interpret your lab results, recommend treatment, or provide medical care. Please ask general research questions without names, contact details, personal symptoms or medical records. AI responses and generated illustrations can be wrong.

Ask Zinda is available at zinda.health/ask. Its sign-in, questions and illustrations connect directly to research.zinda.health, using the same research-access account and necessary session cookie. The main website serves the chat page and its public assets; it does not relay your chat questions.

Email and access

We send an 8-digit code through Resend to verify your email. Codes expire after 10 minutes and are limited to five verification attempts. Your email, verification time, privacy-consent version and access status are stored in a separate research-access area of Supabase. A necessary, HTTP-only session cookie keeps you signed in for up to seven days. This creates research access, not a clinic account or a newsletter subscription.

Questions, answers and illustrations

When you ask a question, the site sends it, up to two recent answered questions for conversational context, and relevant approved summaries to Google Cloud’s Vertex AI service to produce and check an answer. We do not send your account email to the model. Illustrations use fixed, general research concepts, not your question or health details. Zinda does not save conversation text or generated images in its application database or application logs, use them for model training, or send them with a clinic enquiry. The current conversation stays in this page’s memory until you clear it, reload or sign out. A small recent set is displayed; it is not a saved conversation archive.

Google Cloud processes model requests under its service terms and may retain data for service operation, abuse monitoring or legal obligations. Vercel may retain request and security metadata. We do not claim end-to-end zero data retention (ZDR). “No saved chat history” refers to Zinda’s application, not a guarantee that every service provider retains no data. Account and access records are retained as described above. See Google Cloud’s data-governance information.

Limits, retention and deletion

We keep temporary usage counters and hashed network identifiers to protect access and control cost. Expired codes, sessions and counters are removed during routine access activity; inactive research accounts are removed after a year of inactivity during that cleanup. Individual limits are up to 20 research questions and 2 illustrations per day, with shared service limits. Failed generation attempts may count toward a limit. You can sign out, clear the on-page conversation, or delete your research access and all its sessions from the controls below the chat. Deletion removes the active research account; provider logs and backups follow their own retention schedules. Separately submitted clinic enquiries are not deleted by this control.

Site preferences and external services

Your Light, Dark or System appearance choice is stored in this browser. It is not linked to your research account or sent to the clinic. Vercel hosts this site, including the brand fonts. Links to PubMed and Field Notes take you to external services with their own privacy practices.

Questions or deletion requests

Use the contact form to ask about information you submitted or request deletion from our enquiry records. Include the email used for the original request, but no medical details.

Ask Zinda