Privacy Policy

This Privacy Policy applies to individuals globally who use our App and services. By using our services, you acknowledge and agree to the practices described here.

We collect the following categories of information:

2.1. Personal Information

• Name, date of birth, gender, country of residence, contact information
• Account credentials (username and password)

2.2 Health Information

• Medical history, symptoms, diagnoses, medications, allergies, surgeries
• Lifestyle factors (e.g., sleep, nutrition, activity)
• Health updates, treatment adherence, and feedback

2.3 Technical Data

• Device type, operating system, browser type, IP address
• App usage patterns and interaction logs

We only collect information necessary to deliver personalized healthcare support.

Your data is used to:

• Deliver AI-generated personalized health recommendations, summary and Soap notes
• Enable follow-ups and treatment monitoring
• Allow physician review and oversight of AI insights
• Improve our AI models using anonymized data.
• Ensure compliance with medical and regulatory standards

We will process personal data in accordance with:

• Your explicit consent
• The necessity of delivering medical services
• Our legitimate interest in improving services
• Legal obligations under health and data protection laws

We comply with HIPAA, GDPR, and other global data protection frameworks ensuring your data is safe and secure.

We take your privacy seriously. Your data is:

• Never sold or shared with advertisers or unrelated third parties
• Only shared with healthcare providers, organizations, or caregivers that you have explicitly authorized.
• Shared with secure, vetted service providers (e.g., cloud hosting, analytics) under strict confidentiality agreements.

Additionally:

• You control who receives your data.
• We will only share your data with individuals or groups that you have consented to.
• We may use de-identified and aggregated data to train and enhance our AI models, which helps improve health outcomes and system intelligence—without revealing your identity.

All sharing and processing is conducted in compliance with HIPAA standards, ensuring your Personal Health Information (PHI) remains protected.

If your data is transferred internationally, we apply adequate safeguards such as:

• Standard Contractual Clauses (SCCs)
• Encryption and secure storage practices

Your data is treated with the same care regardless of location.

We implement industry-leading security measures:

• End-to-end encryption during transmission and storage
• Strict role-based access and authentication
• Routine security audits and continuous monitoring

Only authorized personnel may access your health information. We design all systems to comply with HIPAA, ISO 27001, and other international standards.

Depending on your location, you may:

• Access or receive a copy of your personal data
• Request updates or corrections
• Delete your data or close your account
• Object to or limit how we process your data
• Withdraw your consent at any time (where consent is the basis for processing)

To exercise these rights, email us at accounts@bostonhealth.ai.

• By providing your mobile phone number during account registration on hamiapp.bostonhealth.ai or careflow.bostonhealth.ai, you expressly consent to receive SMS text messages from Boston Health AI containing one-time passcodes (OTP) for identity verification purposes.
• SMS messages are only sent when you initiate a login or verification request.
• No marketing or promotional messages will be sent via SMS.
• Message and data rates may apply depending on your carrier and plan.
• You may opt out at any time by replying STOP to any SMS message.
• For assistance, reply HELP or contact us at accounts@bostonhealth.ai.
• Opting out of SMS verification may limit your ability to access certain account features that require identity verification.