THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
1. Your Rights Over Your Health Information
You have the right to:
- Inspect and copy your PHI within 30 days of request in your preferred electronic format
- Request amendments to incorrect or incomplete PHI with a written response within 60 days
- Receive an accounting of disclosures made in the prior six years
- Request restrictions on how your PHI is used for treatment, payment, or operations
- Request confidential communications through a specific method or location
- Be notified of breaches of your unsecured PHI within 60 days of discovery
- Obtain a paper copy of this Notice at any time
2. How We May Use and Disclose Your Information
2.1 For Treatment
We may use and disclose your PHI to coordinate care among your healthcare providers, care team members, and authorized family caregivers. For example, sharing your vital signs data with your primary care physician to facilitate treatment decisions.
2.2 For Payment
We may use and disclose your PHI to process claims with Medicare, Medicaid, or private insurance carriers, including verifying eligibility for CCM or RPM billing codes.
2.3 For Healthcare Operations
We may use your PHI for quality assessment, clinical outcome measurement, staff training, and other operational purposes necessary to improve care delivery.
2.4 With Your Authorization
Uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke any authorization at any time in writing.
2.5 As Required by Law
We may disclose your PHI when required by law for:
- Public health activities and disease reporting
- Victims of abuse, neglect, or domestic violence
- Health oversight activities and audits
- Judicial and administrative proceedings with valid legal process
- Law enforcement purposes as permitted by HIPAA
- Serious threat to health or safety
3. Your Choices
You can make the following choices about how we use and share your information:
- Family involvement: You choose which family members can see your health data and can revoke access at any time through your account settings
- Marketing: We will never use your PHI for marketing without written authorization
- Data sales: We will never sell your PHI
- Research: De-identified data may be used for research; identifiable data requires your written authorization
- Communication preferences: You can specify how and where we contact you
4. How to Exercise Your Rights
To exercise any of the rights described in this Notice:
- Platform: Account Settings → Privacy & Rights
- Email: privacy@kindlymoments.com
- Phone: 1-800-555-0199 (select option 3)
- Mail: KindlyMoments Health, Inc., Attn: Privacy Officer, 100 Healthcare Way, Suite 400, San Francisco, CA 94105
We will respond to all requests within the timeframes required by HIPAA.
5. Our Responsibilities
- Maintain the privacy and security of your PHI as required by law
- Provide you with this Notice of our legal duties and privacy practices
- Follow the terms of this Notice currently in effect
- Notify you promptly if a breach compromises the privacy of your PHI
- Never use or disclose your PHI for marketing without authorization
- Never sell your PHI
6. Complaints Process
If you believe your privacy rights have been violated, you may file a complaint with:
- KindlyMoments Privacy Officer: privacy@kindlymoments.com or 1-800-555-0199 (option 3)
- U.S. Department of Health and Human Services, Office for Civil Rights: www.hhs.gov/ocr/complaints or 1-877-696-6775
You will not be retaliated against for filing a complaint.
7. Changes to This Notice
We reserve the right to change this Notice at any time. The revised Notice will be posted on our platform and will apply to all PHI we maintain.