Aponi Health
Privacy Policy
Effective date: to be set at launch. Version: draft 1
Draft. This policy has not yet been reviewed by an attorney. It must be reviewed and approved before launch. For how we handle your medical information specifically, also read our
Notice of Privacy Practices.
The short version
- We collect only what we need to schedule and provide your care.
- We never sell your information, and we do not run advertising or third-party tracking on this site.
- Health information gets the strongest protection: encryption, access controls, and an audit trail of who touched what.
- You can see and export everything we hold about you from your portal, any time.
What we collect
- Account details: your name, email address, and password (stored only as a cryptographic hash).
- Health information you give us: your intake form (health history, medications, allergies, what brings you in), answers you type into the care guide, and appointment details including your reason for visiting.
- Clinical records created by your practitioners: visit notes and, when you consent to recording, a written transcript of the visit. Audio is used only to create the transcript and is not kept.
- Technical basics: a session cookie so you stay signed in, and standard server logs (IP address, time, page requested) kept for security. No analytics trackers, no advertising pixels, no fingerprinting.
How we use it
- Providing and coordinating your care across our practitioners.
- Scheduling: bookings, confirmations, and reminders (you can turn reminders off).
- Running the clinic: billing, quality review, and security monitoring.
- Software assistance for your care team: our care guide and clinical note drafting use artificial intelligence services under strict contracts. Drafts are always reviewed and signed by a licensed practitioner. The care guide is educational and does not diagnose.
Who we share it with
Your information is shared only with: the practitioners involved in your care; service providers that process data on our behalf under written agreements requiring them to protect it (secure hosting, transactional email delivery, speech-to-text transcription, and AI note drafting); and authorities when the law requires it. We never sell personal information, and we never share it for advertising. Our Notice of Privacy Practices describes the legal framework for medical information in detail.
How we protect it
- Encryption in transit for every connection.
- Passwords stored as salted hashes; sessions stored as hashed tokens.
- Role-based access: staff see only the patients in their care, and every access to clinical records is logged.
- Visit audio is processed in memory for transcription and never written to storage.
- Regular encrypted backups and tested restore procedures.
How long we keep it
Clinical records are retained at least as long as California law requires for medical records, even if you close your account. Non-clinical account data is kept while your account is active and deleted or de-identified after closure, except where we must keep it for legal, security, or billing reasons.
Your choices and rights
- View and export your records from the patient portal at any time.
- Ask us to correct information you believe is wrong.
- Turn off appointment reminder emails.
- California residents: medical information is governed by HIPAA and the California Confidentiality of Medical Information Act rather than the CCPA, but we honor the spirit of both. We do not sell or share personal information as those laws define it.
Children
This website and portal are not directed to children under 13, and we do not knowingly collect information from them online. Care for minors is arranged directly with the clinic by a parent or guardian.
Changes
If we change this policy, we will post the new version here with a new effective date, and for significant changes we will tell you in the portal or by email.
Contact
Aponi Health, 548 Willow Lane, San Francisco, hello@aponi.health, (415) 555-0148.