Spare Health, Inc. ("Spare Health," "Company," "we," "us," or "our") respects your privacy and is committed to safeguarding the information entrusted to us. Patient Pie is a Spare Health patient engagement service and is included within the Services described in this Privacy Policy.
This Privacy Policy explains how we collect, use, disclose, process, store, and protect information through Spare Health websites, software applications, patient portals, mobile applications, artificial intelligence features, scheduling tools, payment systems, Patient Pie patient engagement services, and related services (collectively, the "Services").
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
Spare Health provides Services that help healthcare practices manage scheduling, patient intake, communications, billing, AI-assisted workflows, and related practice operations. We protect patient and practice information, do not sell Protected Health Information or patient medical records, and do not use PHI to train public, shared, or general-purpose AI models.
This Privacy Policy applies to the Services, including Spare Health websites, Patient Pie patient engagement services, related software, systems, and communications.
This Privacy Policy does not apply to third-party providers, healthcare practices, laboratories, pharmacies, insurers, payment processors, telehealth providers, or other third-party services that may interact with the Services.
We may collect information directly from you, from healthcare practices, from integrated systems, and automatically through your use of the Services.
We may collect personal information such as your name, address, email address, phone number, date of birth, emergency contact information, account credentials, and demographic information.
When authorized by healthcare practices using our Services, we may process health information such as medical history, medications, allergies, conditions, symptoms, appointment details, intake forms, laboratory information, treatment information, patient communications, and insurance information.
We may collect or process billing information, membership payment information, transaction records, and subscription information.
Payment card information is generally processed by third-party payment providers and may not be stored by Spare Health.
We may collect practice information such as practice name, provider information, office locations, scheduling information, practice settings, configurations, and administrative account information.
We may automatically collect technical and usage information such as IP address, device information, browser information, operating system, referring pages, activity and usage data, access logs, and performance information.
We use information to provide, maintain, secure, and improve the Services, including service delivery, scheduling, communications, notifications, operations, product improvement, and legal and compliance purposes.
Spare Health may process Protected Health Information ("PHI") on behalf of healthcare providers and healthcare organizations.
Where applicable, Spare Health acts as a Business Associate pursuant to HIPAA and applicable Business Associate Agreements.
Healthcare providers generally remain the legal custodians of patient medical records maintained through the Services.
Spare Health processes PHI only as permitted by applicable law, Business Associate Agreements, service agreements, and customer instructions.
Spare Health does not sell Protected Health Information (PHI) or patient medical records.
Patients seeking access to medical records, record corrections, disclosures, or privacy rights concerning their medical records should contact their healthcare provider directly.
Patients retain rights to their personal information and health information, subject to applicable law and the rights of healthcare providers to maintain medical records.
Healthcare practices own and control the patient information, records, documents, forms, communications, and content they create, upload, or maintain through the Services.
Spare Health owns all rights, title, and interest in its software, source code, algorithms, workflows, platform functionality, product designs, interfaces, analytics methodologies, intellectual property, and service improvements.
Nothing in this Privacy Policy transfers ownership of Spare Health technology or intellectual property to users, patients, or healthcare practices.
Certain Services may include artificial intelligence, machine learning, automation, and workflow-assistance features that support documentation generation, communication drafting, administrative workflows, appointment management, practice operations, and data summarization.
Information submitted through the Services may be processed by these AI features to provide requested functionality.
Healthcare providers remain responsible for reviewing and approving any AI-generated output before reliance on such output for patient care, documentation, billing, coding, prescribing, or clinical decision-making.
Spare Health is committed to protecting patient information and healthcare data.
Spare Health does not use Protected Health Information (PHI) or patient medical records to train public, shared, or general-purpose artificial intelligence models.
Any future customer-specific, private, or de-identified model development will be handled only as permitted by applicable law, customer agreements, Business Associate Agreements, and appropriate privacy safeguards.
We do not sell patient data for AI training.
De-identified information used for analytics, product improvement, or research will be created and maintained in a manner intended to prevent reasonable identification of individual patients, consistent with applicable legal standards.
Spare Health may create, use, analyze, and retain aggregated, anonymized, or de-identified information only when it is not reasonably capable of identifying an individual patient.
We may use such information to improve the Services, develop new products, support research and analytics, measure platform performance, enhance healthcare operations, and generate statistical insights. Such information will not be used to identify individual patients.
We may share information in the following situations.
Information may be shared with healthcare providers, practice staff, administrators, and authorized personnel involved in a patient's care or practice operations.
We may share information with vendors that help us provide the Services, including cloud hosting providers, payment processors, messaging providers, analytics providers, support vendors, and security vendors. These providers are contractually required to protect information appropriately.
Information may be transferred in connection with mergers, acquisitions, asset sales, corporate reorganizations, or financing transactions.
We may disclose information when required to comply with law, respond to legal requests, enforce agreements, protect safety and security, or prevent fraud or abuse.
Users may receive appointment reminders, scheduling updates, membership notices, billing communications, security notifications, and product updates.
Communications may be sent through SMS, email, phone, push notifications, or patient portal messages. Message and data rates may apply.
Where required by law, users may receive SMS, email, or other electronic communications only with appropriate consent and may opt out of non-essential communications as permitted by the communication channel and applicable law.
Communications sent through the Services should not be relied upon for emergency or urgent medical situations.
Electronic messages may not be continuously monitored.
If you are experiencing a medical emergency, call 911 immediately.
Spare Health maintains reasonable administrative, technical, and physical safeguards designed to protect information entrusted to the Services.
These safeguards may include encryption in transit, encryption at rest where appropriate, role-based access controls, authentication measures, audit logging, security monitoring, employee training, vendor risk management, and security assessments.
While we work to protect information, no network, system, website, application, or method of data transmission can be guaranteed to be completely secure.
Accordingly, Spare Health cannot guarantee absolute security.
If Spare Health becomes aware of a security incident involving personal information or Protected Health Information, we will investigate the matter and provide notices as required by applicable law, contractual obligations, and regulatory requirements.
We may use cookies, session identifiers, analytics tools, pixels, and similar technologies to authenticate users, maintain sessions, improve platform functionality, analyze product performance, and enhance the user experience. You may manage cookies through your browser settings.
We retain information as long as reasonably necessary to provide the Services, comply with law, meet contractual obligations, resolve disputes, maintain business records, and protect the security and integrity of the Services. Retention periods may vary based on the nature of the information and applicable legal requirements.
Depending on your jurisdiction, you may have rights relating to access, correction, deletion, portability, restriction of processing, and withdrawal of consent. Certain requests may be subject to legal, contractual, healthcare, or regulatory limitations. For requests relating to medical records, patients should generally contact their healthcare provider directly.
Residents of certain states may have additional privacy rights under applicable state privacy laws. Where required by law, Spare Health will honor applicable rights requests concerning personal information.
We will not discriminate against individuals for exercising privacy rights provided by law.
State privacy rights may vary depending on where you live and the type of information involved, including whether information is regulated as health information, consumer personal information, or another protected category.
The Services are not intended for children under 13 years of age. Information regarding minors may be processed when submitted by parents, guardians, authorized representatives, healthcare providers, or for legitimate healthcare and administrative purposes.
The Services may integrate with electronic health records, laboratories, pharmacies, payment processors, telehealth providers, messaging platforms, and analytics services. Spare Health is not responsible for the privacy practices of third-party services. Users should review the applicable privacy policies of those providers.
We may update this Privacy Policy periodically. Any changes will be reflected by updating the "Last Updated" date. Continued use of the Services following publication of an updated Privacy Policy constitutes acceptance of the revised policy.
For questions regarding this Privacy Policy, please contact:
Spare Health Privacy Team