Evidence Health Privacy Policy

1. Who we are

Evidence Health LLC (“Evidence Health,” “we,” “us,” or “our”) is a software company based in Ohio, United States. We build practical software and resources for health, caregiving, and family life.

2. What this policy covers

This Privacy Policy applies to Evidence Health websites, mobile and web applications, and related services that link to this policy (together, the “Services”). This includes Warfarin Companion and other Evidence Health products as they become available.

Some products may provide additional privacy information specific to that product, such as in-app disclosures or app store privacy details. Where that information applies, it supplements this policy.

Warfarin Companion and other health-related Evidence Health products are designed to help you organize and communicate information. They do not diagnose conditions, interpret clinical results, recommend medication doses, or make treatment decisions.

3. Information we collect

Account and contact information

When you create an account or contact us, we collect information such as your name, email address, sign-in credentials or sign-in provider identifier, communication preferences, and the content of messages you send us.

Health information you choose to enter

Health-related products let you voluntarily enter information about your health and care. In Warfarin Companion, this can include INR results, target ranges you record, medication schedules and changes, doses taken or missed, diet or routine changes, symptoms, events such as procedures or illness, clinician instructions you record, questions for your care team, notes, and attachments you add. You decide what to enter. Some features may not work without certain information.

Caregiver relationships

Where the Services offer caregiver features, we collect information needed to connect a user with a caregiver, such as the caregiver’s name and email address, the relationship you describe, invitation status, and the access permissions you grant.

Technical and device information

We collect technical information needed to operate and secure the Services, such as device type, operating system, app version, browser type, IP address, language and time zone settings, crash and error reports, and timestamps of sign-ins and requests.

Subscription and transaction information

If you purchase a subscription, we receive transaction information such as the plan, purchase and renewal dates, trial status, and subscription status. Purchases made through an app store are processed by that store (for example, Apple). We do not receive or store your full payment card number.

Information from others

If another user invites you to be a caregiver or shares a summary with you, we may receive your name and email address from that user.

4. How we use information

We use information to:

• provide the features you request, such as timelines, reminders, reviews, Visit Prep summaries, PDFs, and caregiver access;
• create and secure your account, authenticate you, and prevent fraud and misuse;
• process and manage subscriptions, trials, and promotions;
• respond to your requests and send service messages, such as account, security, and policy notices;
• maintain, troubleshoot, and improve the reliability and usability of the Services, using analytics designed as described in Section 7;
• comply with legal obligations and enforce our Terms of Use.

We use health information you enter to provide the features you use. We do not use it for targeted advertising or advertising profiling.

5. How we share information

Service providers

We use service providers that process information on our behalf to operate the Services, such as cloud hosting, database and authentication, email delivery, crash reporting, customer support, and app store and subscription services. They may use information only to perform services for us and are required to protect it.

Sharing you direct

We share information when you tell us to. For example, if you export, print, email, or otherwise share a Visit Prep summary or PDF, the recipient receives the information included in it. Once you share information outside the Services, its use is governed by the recipient’s practices, not ours.

Caregivers you authorize

If you invite a caregiver, that caregiver can access the information covered by the permissions you grant, until you change or revoke that access.

Legal and safety reasons

We may disclose information if we believe in good faith it is reasonably necessary to comply with law, regulation, legal process, or an enforceable governmental request; to protect the safety of any person; to address fraud, security, or technical issues; or to protect the rights or property of Evidence Health or our users.

Business transfers

If Evidence Health is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will require any successor to honor this policy for the information transferred, or we will notify you and provide choices as required by law.

6. No sale of health information; no health-based advertising

Our health-related products are designed to keep clinical information separate from advertising and general product analytics.

7. Analytics

We may use limited product analytics to understand whether features work and how the Services perform, for example, whether a screen loaded, a feature was used, or an error occurred.

Analytics events are designed not to contain:

• INR values;
• medication names;
• dose values;
• question text;
• notes;
• attachment contents;
• other free-text health information.

8. Retention

We keep information for as long as your account is active or as needed to provide the Services. If you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must keep certain information to comply with legal obligations, resolve disputes, prevent fraud or abuse, or enforce our agreements. Residual copies may remain in backups for a limited period before they are overwritten.

9. Your choices and controls

You can:

• Access the information in your account through the Services, or ask us for a copy;
• Correct information by editing it in the Services or contacting us;
• Export your information where the Services offer export features, or ask us for an export;
• Delete individual entries, or delete your account through the Services or by contacting us.

To make a request, email support@evidencehealth.app. We may need to verify your identity before acting on a request.

10. Caregiver access and revocation

Where caregiver features are available, you control who is invited and what they can see. You can revoke a caregiver’s access at any time in the Services or by contacting us. After revocation, the caregiver will no longer be able to access your information through the Services. Revocation does not retrieve copies of summaries or PDFs that were previously exported or shared outside the Services.

A caregiver who accesses information through the Services must use it only to support the person who granted access, and in line with our Terms of Use.

11. Device and local storage

Our apps may store some information on your device so the Services work quickly and, where supported, offline. Files you export, such as PDFs, are stored wherever you save them. Anyone with access to your unlocked device may be able to see this information, so we recommend using a device passcode and keeping your operating system up to date. Deleting the app may not delete files you exported to other locations.

12. Notifications

If you turn on reminders or notifications, we or your device’s operating system will deliver them. Notification content may appear on your lock screen. You can change notification settings in the app or in your device settings at any time. Notifications are a convenience and are not a substitute for instructions from your healthcare professionals.

13. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit, access controls that limit who can access sensitive information, and authentication requirements for accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your sign-in credentials confidential.

14. Security incidents and breach notification

If we learn of a security incident that affects your personal information, we will investigate, take steps to contain it, and notify you and any applicable regulators as required by applicable law, including, where applicable, the Federal Trade Commission’s Health Breach Notification Rule.

15. HIPAA

This Privacy Policy is not a HIPAA Notice of Privacy Practices.

Evidence Health provides consumer software that you choose to use. Whether the Health Insurance Portability and Accountability Act (HIPAA) applies depends on the relationship and context. In general, when you use our consumer products on your own, Evidence Health is not acting as a HIPAA covered entity or as a business associate of your healthcare provider, and information you enter is governed by this Privacy Policy and other applicable laws. If Evidence Health enters into an agreement with a healthcare organization that makes HIPAA applicable to specific information, that information will be handled as required by HIPAA and that agreement.

When you share a summary with your healthcare provider, the provider’s handling of that information is governed by the provider’s own policies and obligations.

16. Children

The Services are intended for adults and are not directed to children under 13. Accounts are for people who are at least 18 years old (or the age of majority where they live). An adult may use certain features to organize information for a person in their care, including a child, when they have the legal authority to do so. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

17. Privacy rights

Depending on where you live, you may have rights under applicable privacy and consumer health data laws, such as the right to know what personal information we process, to access, correct, or delete it, to obtain a portable copy, to withdraw consent, and to appeal a decision about your request. We will respond to requests as required by applicable law, and we will not discriminate against you for exercising your rights. You may make a request by emailing support@evidencehealth.app. An authorized agent may make a request on your behalf where permitted by law, subject to verification.

18. Third-party services and links

The Services may link to or rely on third-party services, such as app stores, sign-in providers, and websites we link to. Those third parties have their own privacy practices, and this policy does not cover them. We encourage you to review their policies.

19. International users

Evidence Health is based in the United States, and the Services are designed for users in the United States. If you use the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

20. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date. If we make material changes, we will provide notice through the Services or by email before the changes take effect, and we will obtain consent where required by law.

21. Contact us

Evidence Health LLC
Ohio, United States
support@evidencehealth.app