Privacy Notice · Updated September 16, 2026
Pō a Ao is designed to measure the service without turning medicine questions, personal history, or vulnerability into an advertising profile.
Account registration may collect your name, email address, password hash, optional audience selection, optional phone number, and consent records. Professional applications collect public business information, role, services, location, website, and attestations. Consented provider inquiries collect the contact information and general message you submit.
Only after you allow analytics, Pō a Ao uses a random identifier stored for the browser session to count public page views, top pages, referral hosts, limited campaign tags, resource opens, registration steps, provider activity, consented inquiries, and checkout starts. The site does not use this identifier to identify you across other websites.
Ordinary analytics do not receive Ask the Doc questions, medication names, diagnoses, trauma narratives, incarceration details, contact-form messages, private notes, account or admin page views, IP addresses, advertising identifiers, or browser fingerprints. Do not place sensitive health or justice-history details in a provider inquiry.
Email outreach and SMS outreach are separate, explicit, optional choices that default to off. A phone number is optional and is required only to opt in to SMS outreach. Members can change or withdraw either outreach choice from their account, and a consent history is retained. Existing newsletter choices remain separate. Pō a Ao does not send email or SMS through this setting and delivery is not active.
Public Ask the Doc requests are processed to produce a response and are not sent into ordinary analytics. A saved private workspace may retain a conversation only when that feature is enabled and the member explicitly chooses to save it.
Approved provider profiles contain information intended for public display. Stripe processes card and billing information. Pō a Ao stores subscription identifiers and status but does not receive or store complete card numbers.
Anonymous analytics events are scheduled for deletion after 13 months. Consented provider inquiries expire after 90 days. Account, consent, provider, subscription, audit, and editorial records are retained while needed for the service, legal obligations, safety, dispute resolution, and deletion requests.
You may decline anonymous analytics and reopen Analytics choices from the footer at any time. Members may request access, correction, export, or deletion, subject to legal, fraud-prevention, safety, and recordkeeping obligations.
Pō a Ao uses role-restricted administration, hashed passwords, secure session cookies, database access controls, backups, and audit records. Hosting, database, email, payment, monitoring, and model providers process only the information necessary for their configured services.
Privacy questions, access requests, and deletion requests may be sent to poaaohealing@gmail.com. Include enough information to locate your account, but do not email detailed medical information.