Privacy Policy
Last updated: June 15, 2026
Who we are
HRTea is operated by HRTea, located at 490 Lakepark Ave, Oakland, CA 94610. You can reach us at [email protected].
This Privacy Policy describes how we collect, use, and share information when you use HRTea (available at HRTea.ai).
Information we collect
HRTea currently has no user accounts. We collect only what is needed to answer your queries and operate the service.
- Search queries. The questions and health topics you type into the search bar. These queries may contain health-related information about you or others.
- IP address. Your IP address is logged automatically by our hosting infrastructure for security and rate-limiting purposes.
- Browser and device information. Standard information sent by your browser, including browser type, operating system, and referring URL.
- Usage data. Which features you use and when (e.g., timestamps of queries).
We do not collect your name, email address, payment information, or any account credentials.
Sensitive health information
Because HRTea is a health research tool, the queries you submit may contain sensitive health information — for example, questions about menopause symptoms, hormone therapy, or specific medical conditions. We treat queries as sensitive by design.
Your queries are not used to build advertising profiles, sold to third parties, or shared with anyone except the service providers listed below who are necessary to process your request.
How we use your information
- To answer your queries. Your query is embedded into a vector representation (via OpenAI) and used to retrieve relevant research passages from our database (via Supabase), then an AI model (via Google Gemini) synthesizes a response.
- To improve the service. Aggregated, non-identifiable usage patterns help us understand which topics are under-served by our source library.
- To maintain security. IP addresses and usage patterns are used to detect abuse, enforce rate limits, and protect the service.
Service providers — who sees your queries
When you submit a query, it passes through the following third-party providers to generate your answer:
| Provider | Purpose | Data shared |
|---|---|---|
| OpenAI openai.com |
Converts your query into a vector embedding for search | Your query text |
| Google (Gemini) google.com |
Generates the answer from retrieved research passages | Your query text + retrieved passages |
| Supabase supabase.com |
Hosts the research database and performs vector search | Query embedding (not the text) |
| Railway railway.app |
Hosts the HRTea application | All HTTP requests including IP and query |
These providers are contractually bound to use your data only to provide the services described above. We do not authorize them to use your data for their own advertising or unrelated purposes.
We do not sell your information
HRTea does not sell, rent, or trade your personal information or query data to any third party for marketing, advertising, or any other purpose. We have no advertising business model.
Data retention
Query logs are retained for up to 90 days for security and debugging purposes, after which they are deleted. IP addresses in server logs follow our hosting provider's standard retention period (typically 30 days). We do not build permanent profiles from your queries.
Security
We use industry-standard measures to protect your information, including encrypted connections (HTTPS), role-based database access controls, and limited staff access to logs. However, no internet service is perfectly secure, and we cannot guarantee absolute security.
Children — minimum age 18
HRTea is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has used HRTea, please contact us at [email protected] and we will take steps to remove the information.
California privacy rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know. You may request information about what personal data we have collected about you.
- Right to delete. You may request deletion of personal data we hold about you, subject to certain exceptions.
- Right to opt out of sale. We do not sell personal information, so no opt-out is required.
- Right to non-discrimination. We will not discriminate against you for exercising any of these rights.
To exercise these rights, contact us at [email protected]. Because we do not collect names or email addresses from users, we may request additional information to verify your identity and locate any data associated with your IP address.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be noted prominently. Your continued use of HRTea after changes are posted constitutes acceptance of the revised policy.
Contact
HRTea
490 Lakepark Ave
Oakland, CA 94610
[email protected]