1. Introduction
This Privacy Policy explains how TAPPHR LLC (“tapPHR,” “we,” “us,” “our”) collects, uses, discloses, and protects information when you use the tapPHR mobile application (the “App”). By downloading, installing, or using the App, you agree to the practices described in this Privacy Policy.
2. Information We Collect
We may collect the following types of information when you use the App:
- Account information: Name, email address, password, and basic profile details.
- Health and audio data: Doctor patient conversation recordings, AI‑generated summaries, notes, and other health‑related information you submit or record through the App.
- AI transcription data: When you use our recording and AI scribe features, we process your audio recordings and the transcribed text to generate visit notes. For this purpose, your audio and its transcript may be sent to a third‑party AI service provider acting on our behalf under a Business Associate Agreement (BAA). This provider is required to use your data only to generate and return the visit note to tapPHR and not for other purposes.
- Device and usage data: IP address, device identifiers, operating system, app version, log data, and interaction data (features used, time and duration of use).
- Payment and transaction data: Information provided by app store providers (such as Apple App Store or Google Play), including purchase identifiers, transaction dates, product details, and subscription status (for example, active plan and renewal dates) for the purpose of validating your purchase, managing your auto‑renewable subscription and free trial, and complying with our financial and tax obligations. We do not receive or store your full payment card number or CVV; this information is handled directly by the app store provider.
- Support communications: Information you provide when you contact us for support or feedback.
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the App and its AI scribing features.
- Generate and display visit summaries and personal health records for you.
- Improve and develop the App, including training and refining our AI models (using de‑identified or aggregated data where possible).
- Communicate with you about updates, security alerts, and support messages.
- To verify your purchase, manage your subscription and free trial, provide access to paid features, prevent fraud, and maintain accurate financial and tax records.
- Comply with legal obligations and enforce our Terms and Conditions.
4. Legal Basis and Consent
Where required by law, we rely on your consent to process your health‑related information, including audio recordings. You may withdraw your consent at any time by stopping use of the App and requesting deletion of your data, subject to legal and contractual limits.
5. Data Sharing and Disclosure
We do not sell your personal information to third‑party advertisers. We may share information as follows:
- Service providers: With third‑party vendors that help us provide infrastructure, storage, analytics, AI transcription and note‑generation, or customer support, under confidentiality, data protection obligations, and, where applicable, Business Associate Agreements (BAAs). These providers are contractually prohibited from using your audio recordings or transcribed text for any purpose other than delivering our contracted services to you and complying with applicable law.
- Healthcare providers (optional): With doctors or clinics you explicitly authorize to receive your summaries or records.
- Legal and safety: When required by law, regulation, court order, or to protect the rights, property, or safety of tapPHR, our users, or others.
- De‑identified data: We may use or share de‑identified or aggregated data that does not identify you personally for analytics, research, or product improvement.
6. Data Security
We use technical and organizational measures to protect your information, including:
- Encryption in transit (e.g., HTTPS) and at rest where appropriate.
- Access controls limit staff access to only what is necessary to perform their jobs.
- Internal policies for data handling, retention, and deletion.
No security measures are perfect, and we cannot guarantee absolute security of your information.
7. Data Retention
We retain your personal information for as long as needed to:
- Provide the App and related services.
- Comply with legal, accounting, or reporting obligations.
- Resolve disputes and enforce our agreements.
You may request deletion of your account and associated data, and we will delete or de-identify your information, unless we are required or permitted to retain certain data by law.
8. Your Rights and Choices
Depending on your jurisdiction, you may have rights regarding your personal information, including:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your account and associated personal information, subject to legal limits.
- Restriction or objection: Object to or restrict certain processing activities where permitted by law.
You can exercise these rights by contacting us using the details in the Contact Us section.
9. Children’s Privacy
The App is not intended for children under 18 without the involvement of a parent or legal guardian. If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete such information.
10. International Users
Your information may be stored and processed in the United States and other countries where we or our service providers operate. These locations may have different data protection laws than your country of residence. Where required, we implement safeguards for cross‑border data transfers.
11. Third‑Party Services
The App may integrate with or contain links to third‑party services (for example, telehealth platforms, cloud storage, or analytics tools). Your use of those services is governed by their own privacy policies, and tapPHR is not responsible for their practices.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top. Material changes will be communicated within the App or by other appropriate means. Continued use of the App after changes take effect means you accept the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, you can contact TAPPHR LLC at the support email or mailing address provided in the App or on our official website.