Unknown Sources LogoUnknown Sources
Back to Home

Unknown Sources Legal Documents

Privacy Policy

Last Updated: May 2, 2025

HIPAA Compliance Statement

Unknown Sources is committed to maintaining compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996. We implement all required administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of protected health information (PHI).

As a Business Associate to covered entities, we maintain HIPAA-compliant Business Associate Agreements (BAAs) and ensure that all PHI is handled in accordance with HIPAA Privacy, Security, and Breach Notification Rules.

Our staff undergoes regular HIPAA compliance training, and we perform routine security assessments to ensure ongoing compliance with all applicable regulations.

Unknown Sources Legal Documents

Privacy Policy

Last Updated: May 2, 2025

1. Introduction

Welcome to Unknown Sources. We are committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our FHIR API query transformation service.

Unknown Sources is built on modern technologies including Next.js 15, React 19, TypeScript, Tailwind CSS 4, and leverages AI capabilities through Anthropic (Claude) and OpenAI. Our infrastructure utilizes Vercel KV for storage, FHIR Healthcare API for healthcare data interfacing, Polar.sh for community features, with Zod for data validation and NileDB for database operations.

2. Information We Collect

2.1 Personal Information

  • Account information (email address, name, professional credentials)
  • Contact information
  • Billing information when you subscribe to premium features
  • Authentication credentials

2.2 Healthcare Queries and Data

  • Natural language healthcare queries you input
  • Generated FHIR API requests
  • Usage patterns and frequency
  • Healthcare data returned from FHIR APIs (when applicable)

2.3 Technical Information

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Log data and analytics
  • Cookies and similar technologies

3. How We Use Your Information

We use your information for the following purposes:

  • Providing and improving our services
  • Converting your natural language queries into FHIR API requests
  • Authentication and account management
  • Communicating with you about service updates
  • Analyzing usage patterns to improve our AI models
  • Ensuring security and preventing fraud
  • Compliance with legal obligations

4. AI Processing and Data Security

Unknown Sources utilizes advanced AI technologies from Anthropic (Claude) and OpenAI to process natural language and generate FHIR queries. When you input healthcare queries:

  • Your queries are processed by our AI systems to generate appropriate FHIR API requests
  • We implement state-of-the-art security measures to protect sensitive healthcare information
  • All data transmission occurs over encrypted connections
  • We maintain audit logs of all processing activities

5. Data Sharing and Disclosure

We may share your information with:

  • Third-party service providers who help us operate our services
  • FHIR Healthcare API providers to fulfill your data requests
  • Legal authorities when required by law
  • Business partners with your explicit consent

We do not sell your personal information to third parties.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Account information is retained until you request deletion. Query history may be retained for improving our AI systems unless you request its deletion.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your personal information
  • Object to or restrict processing of your information
  • Data portability
  • Withdraw consent

To exercise these rights, please contact us at privacy@unknownsources.example.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information during such transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The updated version will be indicated by an updated "Last Updated" date at the top of this document.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at: