What we can see, and what we can’t.

To type the handwriting, Fhola sends your photos to a reading service. Fhola keeps the photos with the visit so you can compare them with the record. Photos are not end-to-end encrypted, so the reading service and Fhola can see them.

Not end-to-end encrypted

Once a page is typed, the record is locked on your phone before it is saved. Each person’s records have their own key. The reading service sees the text while it reads the page; after that, Fhola stores only the locked version and can’t open it.

Locked: only you and people you choose can open them

Your 12 recovery words can rebuild the key that opens your records. Write them on paper and keep them safe. Never send them to anyone, not even Fhola support.

To make a new phone work without typing the words, Fhola saves your key in your Google or Apple account. Anyone who controls that account could open your records, so protect it with a strong password.

A link or QR code for a doctor expires on its own. You can stop sharing at any time and choose whether the doctor can download a PDF.

Fhola copies what’s written in your health book. It doesn’t give medical advice, check a diagnosis or replace emergency care.