Privacy Policy
Effective Date: November 11, 2025
Last Updated: November 11, 2025
Welcome to Wyze Health
At Wyze Health Inc. (“Wyze Health,” “we,” “us,” or “our”), we understand that your health information is deeply personal. As a clinical intelligence platform designed specifically for hormone and fertility health providers, we are committed to protecting the privacy and security of all information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI-powered clinical intelligence platform and related services (collectively, the “Services”).
1. Information We Collect
1.1 Information Healthcare Providers Submit
- Patient Health Information: Clinical notes, lab results, imaging data, hormone tracking data, fertility markers, and treatment histories
- Provider Information: Name, credentials, specialty, NPI number, practice information, and contact details
- Practice Data: Scheduling information, billing records, insurance claims data, and operational metrics
1.2 Information from Integrated Sources
- Consumer Health Apps: With proper authorization, we may import data from apps like Flo, Clue, Ovia, and Apple Health
- Electronic Medical Records: Data synchronized from EMR/EHR systems
- Laboratory Systems: Direct lab result imports
- Wearable Devices: Health metrics from connected devices
1.3 Automatically Collected Information
- Usage Data: Features accessed, time spent, workflow patterns
- Voice Data: Audio recordings for transcription (immediately processed and deleted)
- Technical Data: IP address, browser type, device information, and access logs
1.4 AI-Generated Insights
- Pattern Recognition Data: Identified clinical patterns and correlations
- Predictive Models: Risk assessments and treatment recommendations
- Aggregated Analytics: De-identified population health insights
2. How We Use Information
2.1 Primary Uses
- Clinical Decision Support: Providing AI-powered insights for hormone and fertility health diagnosis and treatment
- Documentation Assistance: Automating clinical note generation and maintaining patient records
- Pattern Recognition: Identifying conditions like PCOS, endometriosis, and fertility issues
- Workflow Optimization: Streamlining administrative tasks and improving practice efficiency
2.2 Service Improvement
- AI Training: Using de-identified data to improve our clinical intelligence algorithms
- Product Development: Enhancing features based on usage patterns
- Quality Assurance: Monitoring system performance and accuracy
2.3 Communication
- Clinical Alerts: Critical patient information and urgent notifications
- System Updates: Service announcements and new feature notifications
- Educational Content: Best practices and clinical guidelines
3. HIPAA Compliance
Wyze Health is fully committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA). We:
- Enter into Business Associate Agreements (BAAs) with all covered entities
- Implement administrative, physical, and technical safeguards
- Maintain audit logs of all access to Protected Health Information (PHI)
- Conduct regular security risk assessments
- Provide HIPAA training to all employees
- Report breaches according to HIPAA requirements
4. How We Share Information
4.1 We DO NOT sell patient health information
4.2 Authorized Sharing
We may share information only:
- With Provider Authorization: To other healthcare providers involved in patient care
- For Treatment Purposes: When necessary for patient care coordination
- With Patient Consent: When patients explicitly authorize sharing
- For Legal Compliance: When required by law or valid legal process
- With Service Providers: Under strict contractual obligations and BAAs
4.3 De-identified Data
We may use and share aggregated, de-identified data for:
- Research purposes
- Population health insights
- Industry benchmarking
- Clinical best practices development
5. Data Security
5.1 Technical Safeguards
- Encryption: AES-256 encryption at rest and TLS 1.3 in transit
- Access Controls: Multi-factor authentication and role-based permissions
- Infrastructure: SOC 2 Type II certified cloud infrastructure
- Monitoring: 24/7 security monitoring and intrusion detection
5.2 Administrative Safeguards
- Background checks for all employees
- Regular security training
- Strict access policies
- Incident response procedures
5.3 Physical Safeguards
- Secure data center facilities
- Environmental controls
- Device and media controls
6. Data Retention
- Active Patient Records: Retained for the duration of the provider relationship
- Inactive Records: Archived according to state and federal requirements (typically 7-10 years)
- Voice Recordings: Processed immediately and deleted within 24 hours
- Audit Logs: Retained for 6 years per HIPAA requirements
- De-identified Data: May be retained indefinitely for research and improvement
7. Your Rights
7.1 Under HIPAA, patients have the right to:
- Access their health information
- Request amendments to their records
- Receive an accounting of disclosures
- Request restrictions on uses and disclosures
- Choose how we communicate with them
- File a complaint
7.2 Additional Rights
- Data Portability: Export data in standard formats
- Deletion: Request deletion (subject to legal requirements)
- Opt-out: Decline certain uses of de-identified data
8. AI and Machine Learning
8.1 How We Use AI
- Clinical pattern recognition
- Natural language processing for documentation
- Predictive analytics for treatment outcomes
- Workflow automation
8.2 Human Oversight
- All AI recommendations are reviewed by healthcare providers
- No automated clinical decisions without human validation
- Continuous monitoring of AI accuracy and bias
8.3 Transparency
- Providers can request explanations of AI recommendations
- Confidence scores provided for all predictions
- Regular audits of algorithmic fairness
9. Children's Privacy
Our Services are intended for use by healthcare providers treating patients of all ages. We handle pediatric health information with special care and in compliance with applicable laws.
10. International Data Transfers
Currently, Wyze Health operates exclusively within the United States. All data is stored in U.S.-based data centers.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of material changes via:
- Email notification
- In-platform alerts
- Website announcements
12. Contact Information
For privacy-related questions or concerns:
Privacy Officer
Wyze Health Inc.
Email: info@wyzehealth.com
HIPAA Complaints
You may also file a complaint with the U.S. Department of Health and Human Services: Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201