Last updated: 11 September 2026
Krates is a personal health record reader. It reads the medical records you have already connected on your own device and helps you make sense of them. This policy describes exactly what it does with that information.
Krates has no account server and no cloud sync. Your lab results, conditions, medications, allergies, immunizations, procedures, notes and device metrics are stored only in the app's local database on your iPhone, protected by your device passcode and Apple's file encryption.
Your records are never uploaded, never backed up to us, and never readable by us. Everything you do in the app — what you dismiss, archive, mark as read or type into a chat — stays on your phone.
Deleting the app deletes its database and everything in it.
Krates reads records you have already connected in Apple's Health app, and — if you choose to connect one — directly from a health system's patient API using your own login. It reads; it never writes back.
Apple Health access is granted by you, per record type, on Apple's permission screen. You can withdraw it at any time in Settings › Privacy & Security › Health › Krates.
One feature sends data off your device: the written explanations on insight cards, and the follow-up questions you ask in a chat. These are produced by a large language model, which runs as an external service rather than on your phone. Krates asks about this when you first set it up, on a screen that shows exactly what would be sent. It is on unless you switch it off, and you can switch it off at any time. The app is complete without it — every finding is still computed on your phone, and the app writes the cards itself.
Those requests pass through a small relay we operate, which holds the key to the model service so that no such key has to be shipped inside the app. The relay forwards your request and returns the reply. It does not store your request, does not log its contents, and keeps no record of what was asked. What it does keep is a count of how many requests each device has made, so that one device cannot exhaust the service for everyone; that count is tied to an anonymous device identifier and to nothing about you.
When that happens, Krates sends the minimum needed to write the sentence:
Krates does not send your name, date of birth, address, email, phone number, medical record number, or the name of your provider or clinician. The model receives measurements without an identity attached to them.
The findings themselves are always computed on your device, deterministically, from your own results. The model only puts them into words. If no model is configured, Krates writes the same cards itself and every feature still works.
Data sent for this purpose is not used to train models, and Krates does not send your records anywhere else — no analytics service, no advertising network, no third party of any other kind.
You can turn this off at any time under Profile › Insight wording. With it off, nothing leaves your phone at all.
A profile in Krates can hold a child's record, added by a parent or guardian from records they already hold. The same rules apply to it as to your own.
Krates is published by Lizwise Elv LLC. Because your records stay on your device, the company holds none of them — but it is responsible for the app that reads them, and it is who to write to.
If this policy changes in a way that affects what leaves your device, the change will be described here with a new date above, and called out in the app before it takes effect.