Privacy Policy

Welcome to Ace Health ("Company," "we," "our," or "us"). We are committed to protecting your privacy and safeguarding your health information.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application and related services (the "Services").

1. Information We Collect

A. Personal Information

We may collect:

• Full name
• Date of birth
• Email address
• Phone number
• Address
• Insurance information (if applicable)
• Emergency contact information

B. Health Information (Protected Health Information - PHI)

Because we operate as a healthcare technology platform, we may collect:

• Medical history
• Symptoms
• Diagnoses
• Prescriptions
• Lab reports
• Audio messages and AI voice call transcripts
• Messages between you and healthcare providers
• Uploaded medical files and documents

C. Technical Information

We may collect:

• Device type
• Operating system
• IP address
• Log data
• App usage data
• Push notification tokens

2. How We Use Your Information

We use your information to:

• Connect you with licensed healthcare providers
• Facilitate AI-assisted voice and messaging features
• Provide medical consultations and communication
• Store and manage your medical records
• Improve app functionality and user experience
• Send appointment reminders and notifications
• Comply with legal and regulatory obligations

3. HIPAA Compliance

If we qualify as a Covered Entity or Business Associate under HIPAA, we comply with applicable HIPAA regulations, including:

• Administrative safeguards
• Technical safeguards
• Physical safeguards
• Encryption of PHI in transit and at rest
• Access controls and audit logs

Healthcare providers using the platform may also be subject to HIPAA and may have separate Notices of Privacy Practices.

For more information about HIPAA, visit the U.S. Department of Health & Human Services website.

4. How We Share Information

A. Healthcare Providers

Doctors, clinics, and authorized medical professionals involved in your care.

B. Service Providers

Cloud hosting providers (e.g., AWS, GCP), analytics providers, and technical vendors who support our operations under strict confidentiality agreements.

C. Legal Compliance

If required by:

• Court order
• Subpoena
• Government request
• Public health reporting obligations

D. Business Transfers

In the event of a merger, acquisition, or asset sale.

5. Data Security

We implement reasonable and industry-standard safeguards, including:

• End-to-end encryption (where applicable)
• TLS encryption
• Role-based access control
• Multi-factor authentication for providers
• Secure cloud infrastructure
• Regular security audits

6. Your Rights (U.S. Residents)

Depending on applicable laws, you may have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion (subject to medical record retention laws)
• Receive a copy of your medical records
• Restrict certain processing
• Withdraw consent where applicable

If HIPAA applies, you may also:

• Request an accounting of disclosures
• Request restrictions on certain disclosures

To exercise your rights, contact us at: contact@ace78.tech

7. Data Retention

We retain health and personal data as required by:

• HIPAA
• State medical record retention laws
• Federal and state healthcare regulations

When no longer required, data will be securely deleted or de-identified.

8. Children's Privacy

Our Services are not intended for children under 13 without parental consent.

If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete such information.

9. Third-Party Services

The app may integrate with:

• Payment processors
• Cloud providers
• Analytics services
• Notification services (e.g., Firebase)

These providers may collect information according to their own privacy policies.

10. AI and Automated Processing

Our platform may use AI systems to:

• Transcribe voice messages
• Assist in symptom intake
• Route inquiries to providers

11. State-Specific Privacy Rights

Residents of certain states (e.g., California) may have additional rights under state privacy laws such as the California Consumer Privacy Act (CCPA), where applicable.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted within the app and updated with a new "Last Updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact: