Privacy & Data Protection

PrivacyPolicy

Your privacy is our top priority. Learn how we collect, use, and protect your personal health information in compliance with HIPAA and other privacy regulations.

Last updated: January 15, 2024
Information We Collect

Personal Information

We collect information you provide directly to us, such as when you create an account, upload medical records, or contact us for support. This includes your name, email address, phone number, and any health information you choose to store.

Usage Information

We automatically collect certain information about your use of our services, including your IP address, browser type, operating system, and usage patterns. This helps us improve our services and ensure security.

Device Information

When you access our services through a mobile device, we may collect device-specific information such as your device identifier, operating system version, and mobile network information.

How We Use Your Information

Service Provision

We use your information to provide, maintain, and improve our services, including storing and organizing your medical records, enabling sharing features, and providing customer support.

Communication

We may use your contact information to send you service-related notifications, security alerts, and updates about our services. You can opt out of non-essential communications at any time.

Security and Compliance

We use your information to detect, prevent, and address technical issues, security threats, and to ensure compliance with applicable laws and regulations, including HIPAA.

Information Sharing

Your Control

You have complete control over who can access your medical records. We only share your health information with individuals or healthcare providers that you explicitly authorize.

Service Providers

We may share limited information with trusted third-party service providers who help us operate our services, such as cloud storage providers and payment processors. These providers are bound by strict confidentiality agreements.

Legal Requirements

We may disclose your information if required by law, such as in response to a valid court order or to protect the rights, property, or safety of MediKeeps, our users, or others.

Data Security

Encryption

All your data is encrypted both in transit and at rest using industry-standard encryption protocols. Your medical records are protected with end-to-end encryption, ensuring that only you and authorized individuals can access them.

Access Controls

We implement strict access controls and authentication measures to prevent unauthorized access to your information. Our employees undergo background checks and receive regular security training.

Regular Audits

We conduct regular security audits and assessments to identify and address potential vulnerabilities. Our security practices are reviewed by independent third-party security firms.

Your Rights

Access and Portability

You have the right to access, download, and export all of your personal information and medical records stored in our system at any time.

Correction and Deletion

You can update, correct, or delete your personal information through your account settings. You can also request deletion of your entire account and all associated data.

Sharing Control

You have complete control over sharing permissions and can revoke access to your medical records at any time. You can also view a log of who has accessed your information.

International Transfers

Data Location

Your data is primarily stored in secure data centers located in the United States. We ensure that all international data transfers comply with applicable privacy laws and regulations.

Safeguards

When we transfer data internationally, we implement appropriate safeguards to protect your information, including standard contractual clauses and adequacy decisions.

HIPAA Compliance

MediKeeps is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). We implement administrative, physical, and technical safeguards to protect your protected health information (PHI) and ensure that your medical records remain private and secure.

Administrative Safeguards

Policies, procedures, and training to protect PHI

Physical Safeguards

Secure facilities and controlled access to systems

Technical Safeguards

Encryption, access controls, and audit logs

Questions About Our Privacy Policy?

If you have any questions about this Privacy Policy or our privacy practices, please don't hesitate to contact us.

Privacy Officer

Contact our dedicated privacy team

privacy@medikeeps.com

Mailing Address

Send us a letter

123 Healthcare Blvd, Suite 100
San Francisco, CA 94105