Privacy Policy

Effective Date: January 1, 2026  |  Last Updated: January 1, 2026

BioInsyte, LLC ("BioInsyte," "we," "our," or "us") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, use our platform, or participate in any of our programs.

Please read this policy carefully. By using our services, you agree to the practices described below. If you do not agree, please discontinue use of our services.

1. Information We Collect

1.1 Personal Identification Information

We may collect personal information that you voluntarily provide, including:

• Full name, date of birth, and contact information (email address, phone number, mailing address)
• Account credentials (username and password)
• Insurance information and healthcare provider details
• Demographic information such as race, ethnicity, and preferred language (collected to support health equity research, with your consent)

1.2 Protected Health Information (PHI)

As a healthcare technology company, BioInsyte may collect and process protected health information as defined by HIPAA, including:

• Biometric data transmitted by connected devices (blood pressure, heart rate, weight, oxygen saturation)
• Symptom reports and self-reported health information
• Medical history relevant to pregnancy and maternal health
• Communications with care team members through the platform

1.3 Technical and Usage Data

We automatically collect certain technical information when you use our platform, including:

• IP address, browser type, operating system, and device identifiers
• Pages visited, features used, and time spent on the platform
• Crash reports and performance diagnostics

2. How We Use Your Information

BioInsyte uses collected information to:

• Provide, operate, and improve our maternal health monitoring platform
• Facilitate communication between patients and their care teams
• Detect and alert on health data patterns that may indicate risk
• Comply with legal obligations and HIPAA requirements
• Conduct research and quality improvement activities (with appropriate authorization)
• Respond to inquiries and provide customer support
• Send service-related communications and updates

We do not sell, rent, or share your personal or health information with third parties for marketing or advertising purposes.

3. HIPAA Compliance

BioInsyte operates as a Business Associate under HIPAA when handling Protected Health Information on behalf of covered healthcare entities. We maintain comprehensive HIPAA policies and procedures, including:

• Execution of Business Associate Agreements (BAAs) with covered entities
• Technical, administrative, and physical safeguards for PHI
• Breach notification procedures in accordance with HIPAA requirements
• Minimum necessary standard for PHI access and disclosure

4. How We Share Your Information

We may share your information in the following limited circumstances:

• With your care team: Your treating providers and care coordinators have access to your health data as necessary to provide care.
• With authorized vendors: We use HIPAA-compliant third-party service providers (e.g., cloud hosting, analytics) who are bound by Business Associate Agreements.
• As required by law: We may disclose information when legally required, such as in response to a court order or government request.
• With your consent: We will share information with other parties only if you provide explicit written consent.

5. Data Security

BioInsyte employs industry-standard security practices to protect your information, including end-to-end encryption for data in transit and at rest, role-based access controls, multi-factor authentication, regular security audits and penetration testing, and hosting on HIPAA-compliant AWS infrastructure.

Despite these measures, no system is completely secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorized access to your account.

6. Data Retention

We retain your personal and health information for as long as necessary to provide our services, comply with legal requirements, and fulfill the purposes described in this policy. Health records are typically retained for a minimum of seven (7) years following the end of your participation in our program, or longer where required by applicable law.

7. Your Rights

Depending on your location, you may have the following rights regarding your information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal data, subject to legal and clinical retention requirements.
• Restriction: Request that we limit processing of your information in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.

To exercise these rights, please contact us at privacy@bioinsyte.com.

8. Children's Privacy

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact our Privacy Officer:

BioInsyte LLC
Privacy Officer
Email: info@bioinsyte.com