Privacy Policy

1. Introduction

HealthTune ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered medical consultation and clinical notes platform.

2. Information We Collect

2.1 Personal Information

• Name, email address, and contact information
• Professional credentials and medical license information
• Account credentials and authentication data
• Billing and payment information

2.2 Healthcare Information

• Clinical notes and medical documentation
• Patient consultation data (anonymized)
• Medical records and health information
• Treatment plans and clinical assessments

2.3 Technical Information

• Device information and IP addresses
• Usage patterns and platform interactions
• Cookies and tracking technologies
• Log files and system analytics

3. How We Use Your Information

• Provide and improve our AI-powered medical services
• Generate clinical notes and medical documentation
• Ensure HIPAA compliance and data security
• Process payments and manage your account
• Communicate with you about our services
• Comply with legal and regulatory requirements
• Enhance platform functionality and user experience

4. HIPAA Compliance

HealthTune is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). We implement comprehensive safeguards to protect Protected Health Information (PHI):

• Administrative safeguards including workforce training and access controls
• Physical safeguards protecting our data centers and equipment
• Technical safeguards including encryption and secure transmission
• Business Associate Agreements (BAAs) with all relevant parties
• Regular security assessments and compliance audits

5. Data Security

We employ industry-leading security measures to protect your information:

• End-to-end encryption for all data transmission and storage
• SOC 2 Type II certified infrastructure
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• Secure data centers with 24/7 monitoring
• Employee background checks and confidentiality agreements

6. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• With trusted service providers under strict confidentiality agreements
• In case of business transfers or acquisitions (with notice)

7. Your Rights

You have the following rights regarding your personal information:

• Access and review your personal information
• Request corrections to inaccurate data
• Request deletion of your information (subject to legal requirements)
• Opt-out of certain communications
• Data portability and export capabilities
• Withdraw consent where applicable

8. Data Retention

We retain your information only as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Healthcare data is retained according to applicable medical record retention requirements, typically 6-7 years from the last patient encounter.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses and adequacy decisions.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: