Privacy Policy

1. Who we are

Predixa Health is the patient-engagement platform operated by Predixa Health, LLC, a California limited liability company.

In this policy, "Predixa Health", "we", "us" and "our" mean Predixa Health, LLC.

• Predixa Health, LLC
• 15333 Culver Dr, Irvine, CA, US
• privacy@predixahealth.com

2. What this policy covers, and what it does not

This policy describes how we handle information collected through this website, predixahealth.com, including any message you send us through it. Section 3 additionally describes how we handle the phone numbers, consent and replies of patients we contact by text message and by phone, and it applies to those patients whether or not they ever visit this website.

Beyond what section 3 sets out, this policy does not cover the protected health information we process on behalf of healthcare providers, health plans and other covered entities who use our platform. When we handle that information we act as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), and our handling of it is governed by our Business Associate Agreement and services agreement with the covered entity. If you are a patient asking how your health information is used more generally, the notice of privacy practices issued by your own provider or health plan is the document that applies to you, and your provider is the right party to contact.

3. Patients: text messages and phone calls

This section is for patients who receive text messages or calls from Predixa Health.

Who is contacting you, and why

Predixa Health has no patients of its own. We contact patients on behalf of the healthcare organization providing their care — a provider, clinic, health plan or care-management program that has engaged us to stay in touch with its patients between visits. In doing so we act as that organization's Business Associate under HIPAA.

Your name and your phone number come to us from that organization, which holds them because you are its patient. That is the only source. We do not buy phone numbers, and we do not obtain them from data brokers, lead lists, or any other outside file.

Your consent to be contacted reaches us one of two ways. Some organizations obtain it themselves — at registration, at intake, or when you enrol in a care program — and pass the record to us with your enrolment. Otherwise we obtain it from you directly, in the form the law requires, before the program begins. Either way a consent stands behind every number we contact, and we keep the record of it.

What we send

• appointment reminders and follow-up instructions;
• reminders that a screening, test, refill or annual visit is due;
• short check-in questions about how you are feeling, which you answer in your own words;
• calls from our care team, which may begin with an automated or recorded voice, when an answer you gave suggests someone should follow up with you.

These messages and calls are about your care. Predixa Health does not send marketing or promotional text messages, and we do not use your phone number to advertise anything, to you or to anyone else.

Your mobile information

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. Mobile opt-in data and consent are not shared with third parties.

Stated in full: every category of information described anywhere in this policy excludes text messaging originator opt-in data and consent, and that information is not shared with any third party. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign.

Two disclosures are needed to deliver a message at all, and they are the only ones we make:

• The healthcare organization providing your care, on whose behalf we are contacting you, and which already holds your information.
• The telecommunications providers that carry the message — our messaging platform and the mobile carriers — strictly in order to deliver it to your phone. They act as our service providers and may not use your information for their own purposes.

Neither is a sale, and neither is sharing for advertising. We disclose your phone number, your consent, and your replies to no one else, except where the law requires it or where it is necessary to protect someone's safety.

Stopping the messages

You can stop at any time, at no cost. Reply STOP to any text message and we will send one confirmation and then nothing further. You do not have to use that exact word: anything that reasonably tells us to stop — in a reply, by email, or said to the person who calls you — will be honoured. Reply HELP or email support@predixahealth.com to reach a person.

Agreeing to messages is never a condition of receiving care, and opting out will not change the care your provider gives you. Opting out of our messages does not stop messages your provider sends you directly; contact them about those.

The full program terms — message frequency, rates, and carrier limitations — are in the SMS and voice section of our Terms of Service.

4. Information we collect

Information you choose to send us

If you contact us through this website or by email, we receive what you send. Where the site offers a contact form, that form asks for your first and last name, your work email address, and optionally your organization, the approximate size of your patient panel, and a description of what you are trying to solve.

Along with a form submission we also record the IP address it came from and the time it was sent. We use these two items to detect and discard automated spam, and they are included in the notification email we receive. If you would rather not have an IP address recorded alongside your message, email us directly instead of using the form.

Patient contact information

Separately from this website, we hold the name, phone number, consent record and message replies of each patient we contact for a healthcare organization. That information reaches us from the organization, not from this site, and section 3 above describes it in full.

Information collected automatically

Our web servers and content delivery network keep access logs. A log entry may contain the IP address of the request, the date and time, the file requested, the HTTP status returned, the size of the response, and the user agent and referring page reported by your browser. We use these logs to operate the site, investigate errors, and identify abusive traffic such as denial-of-service attempts.

What we do not collect

We want to be specific about this rather than vague, because it is unusual:

• No cookies. This website sets no cookies, of any kind, first-party or third-party. There is no cookie banner because there is nothing to consent to.
• No analytics. We run no analytics product. There is no Google Analytics, no tag manager, and no equivalent tool measuring your visit.
• No advertising or tracking technology. There are no advertising pixels, no conversion tags, no session recording, no heatmapping, and no fingerprinting.
• No cross-site tracking. We do not follow you across other websites or apps, and we do not build advertising or behavioural profiles about you.
• No account required. This website has no login, so we hold no username or password for it.

5. Third parties involved in running this site

We keep this list short deliberately. These are the only third parties that receive information as a consequence of your visit:

• Amazon Web Services. The site is hosted on AWS in the United States, and messages sent through the contact form are delivered by Amazon Simple Email Service. AWS processes the data described above as our service provider.
• Google Fonts. Our pages load typefaces from fonts.googleapis.com and fonts.gstatic.com. Your browser makes those requests directly, which necessarily discloses your IP address and user agent to Google. We receive nothing from it, and Google's handling of that request is governed by Google's own privacy policy.
• Google Workspace. Our email is hosted on Google Workspace, so a message you send us is stored in a Google-hosted mailbox.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not disclose it to anyone else except where we are legally required to, or where it is necessary to protect our rights or the safety of others.

All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. The only parties that ever receive it are the ones named in section 3, and only so that a message can reach your phone.

6. How we use information

We use what we collect only to reply to you and continue a conversation you started, to operate and secure the site, to keep records of business enquiries, and to comply with our legal obligations.

Patient contact information is used only to run the care program the patient is enrolled in: to send the messages and place the calls described in section 3, to route a concerning reply to a person who can follow up, and to report back to the healthcare organization on whose behalf we are acting. We do not use it for anything else, and we do not use it to make automated decisions that produce legal or similarly significant effects.

7. How long we keep it

Business correspondence, including contact-form submissions, is kept for as long as we have a reasonable business reason to keep it, and then deleted. Server access logs are retained on a short rolling schedule and then expire automatically. You can ask us to delete correspondence sooner, and we will unless we are required to keep it.

Patient contact information, messages and replies are kept for as long as the healthcare organization's agreement with us requires, and are then deleted or returned to that organization. A record that you opted out is kept for as long as we need it to keep from contacting you again.

8. Security

This site is served over HTTPS only. Form submissions travel over TLS, storage is encrypted at rest, and administrative access to the systems behind the site is restricted and logged. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@predixahealth.com and we will respond within the time the applicable law allows. We may need to verify who you are before acting, and we will not treat you differently for making a request.

California residents. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to know what personal information we collect and how we use and disclose it, to request its correction or deletion, to limit the use of sensitive personal information, and to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. You may use an authorised agent to make a request on your behalf.

If you are in a jurisdiction with comparable rights, including other US states and the EEA or UK, contact us at the same address and we will honour the rights that apply to you.

Patients. You can stop messages and calls at any time as described in section 3, and you never have to give a reason. For anything beyond that — a request to see, correct or delete your health information — your provider is the party that decides it, so ask them; we will act on their instruction. If it is easier to start with us, email support@predixahealth.com and we will pass the request on and tell you we have.

10. Children

This website is aimed at healthcare organizations, not consumers, and it is not directed to children. We do not knowingly collect personal information from children through it. If you believe a child has sent us information, contact us and we will delete it.

Where a care program covers a minor patient, we contact the phone number the healthcare organization gave us on the basis of the consent it obtained from the parent or guardian, and we hold that number under the same terms as any other.

11. Where your information is processed

We operate in the United States and the information described in this policy is processed there. If you visit from outside the United States, you are sending your information to a country whose data-protection laws may differ from those of your own.

12. Changes to this policy

If we change this policy we will update the revision date at the top of this page. Material changes will be described here rather than made silently. Your use of the site after a change means you accept the updated policy.

13. Contact us

Questions about this policy, or about privacy generally, should go to privacy@predixahealth.com, or by post to Predixa Health, LLC, 15333 Culver Dr, Irvine, CA, US.

Your use of this site is also subject to our Terms of Service, including the limitations on liability and the dispute-resolution provisions it contains.