Privacy Policy

Vye Health, Inc. ("Vye Health", "we", "us") operates the websites and services that power individual healthcare practices' public provider websites and patient-acquisition pages. This Privacy Policy describes how we collect, use, and share information from visitors to those provider websites. Where applicable, we handle protected health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA).

Information We Collect

• Information you provide: Contact details (name, email, phone) you submit through a provider website's booking, intake, or inquiry forms.
• Information collected automatically: Standard web-server logs (IP address, user agent, referring URL, page timestamps), and cookies used for session management and anti-fraud protection.
• Analytics: Aggregated, de-identified usage metrics (e.g. which pages get the most visits) used to improve the product. We use advertising pixels (Google Ads, Meta) to measure the performance of our marketing campaigns. These tools may collect anonymized data about site visits for attribution purposes. We do not sell personal information to third parties.

How We Use Information

• To deliver the requested service (e.g. forwarding a booking inquiry to the practice).
• To operate, maintain, and improve the platform.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with applicable legal obligations.

Sharing

We share information with the individual practice you contact through their provider website. We share with infrastructure subprocessors (hosting, email delivery, analytics) only to the extent necessary to operate the service. We do not sell personal information.

SMS / Text Messaging

If you opt in to receive text messages from us (for example, appointment holds, booking confirmations, and visit reminders), we collect your mobile phone number and a record of your consent. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message, or reply HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Protected Health Information & HIPAA Notice

Vye Health Medical Group PA ("Practice") is a covered entity under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations. We are required by law to protect the privacy of your protected health information ("PHI") and to provide you with notice of our legal duties and privacy practices with respect to your PHI. This section describes how we collect, use, and disclose your health information and explains your rights.

What We Collect

PHI may include your name, date of birth, contact information, insurance details, medical history, diagnoses, treatment records, lab results, and payment information related to your care.

How We May Use and Disclose Your PHI

We may use and disclose your PHI without your authorization for the following purposes:

• Treatment – To provide, coordinate, or manage your healthcare and share information with other providers involved in your care.
• Payment – To bill and collect payment for services, process insurance claims, and manage related accounts.
• Healthcare Operations – For quality assessment, compliance, staff training, audits, and other activities necessary to operate our practice.
• As Required by Law – To comply with applicable federal, state, or local legal requirements.
• Public Health Activities – To authorized public health authorities for disease reporting, surveillance, or prevention.
• Health Oversight – To government agencies for audits, inspections, or regulatory activities.
• Legal Proceedings – In response to a valid court order, subpoena, or other lawful process.
• Law Enforcement – In limited circumstances as permitted or required by applicable law.

For any other purpose, we will only use or disclose your PHI with your prior written authorization. You may revoke a written authorization at any time by notifying us in writing; revocation will not affect uses or disclosures already made in reliance on the authorization.

Your Rights Regarding Your PHI

You have the following rights with respect to your PHI:

• Right to Access – You may request a copy of the PHI we maintain about you.
• Right to Amendment – You may request that we correct PHI you believe is inaccurate or incomplete.
• Right to Restrict – You may request restrictions on how we use or disclose your PHI. We are not required to agree to all requests, but will honor any restriction to which we agree.
• Right to Confidential Communications – You may request that we contact you through a specific method or at a specific location.
• Right to an Accounting of Disclosures – You may request a list of certain disclosures we have made of your PHI outside of treatment, payment, and operations.
• Right to Complain – If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer (below) or with the U.S. Department of Health and Human Services, Office for Civil Rights at hhs.gov/ocr. We will not retaliate against you for filing a complaint.

Safeguards

We maintain administrative, physical, and technical safeguards designed to protect your PHI from unauthorized access, use, or disclosure, in accordance with the HIPAA Security Rule.

Contact Our Privacy Officer

For questions about this policy, to exercise your rights, or to file a complaint:
Email: privacy@vyehealth.com

Notice of Privacy Practices

You may also request a full copy of our Notice of Privacy Practices by emailing privacy@vyehealth.com.

Your Choices

You can request access to, correction of, or deletion of the information we hold about you by emailing privacy@vyehealth.com.

Contact

Vye Health, Inc.
455 Market St, Suite 1940, San Francisco, CA 94105
privacy@vyehealth.com