At Kinfolk, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data when you interact with our AI healthcare companion service (the "Service"). Please read this policy carefully.

1. Information We Collect

We collect personal and non-personal information from you when you use the Service. This may include:

• Personal Information: Information you provide directly, such as your name, email address, phone number, and any medical or health-related information you voluntarily share.

• Usage Data: Information related to your use of the Service, including interactions with the AI, timestamps, and logs of your conversations.

• Device Information: Data related to the device you use to access the Service, including device type, operating system, and browser type.

1.1 Health Information Collection

When you use our Service, we specifically collect the following health-related information:

• Physical health data (e.g., height, weight, age, vital signs)

• Health risk factors (e.g., smoking status, diagnosed conditions, pregnancy status)

• Medical history and current conditions

• Medications and allergies

• Symptoms and health concerns

• Treatment history and preferences

• Healthcare provider information

• Insurance information (when provided)

• Assessment results and health recommendations generated by our Service

1.2 Automated Information Collection

We automatically collect certain information through cookies, web beacons, and similar technologies:

• Device identifiers and characteristics

• IP addresses and location data

• Browser and operating system information

• Service usage data and interaction metrics

• Performance data and error logs

• Session duration and preferences

These technologies help us:

• Maintain your login session

• Remember your preferences

• Analyze service usage patterns

• Improve service performance

• Detect and prevent security issues

• Customize your experience

2. How We Use Your Information

We use the information we collect to:

• Provide and improve the Service, including answering your medical-related questions and delivering a personalized experience.

• Monitor the performance of the Service and troubleshoot any issues.

• Communicate with you, including sending updates or notifications about the Service.

• Ensure compliance with legal obligations and to protect the security and integrity of the Service.

3. Data Sharing and Disclosure

We do not sell or rent your personal information. However, we may share your data in the following circumstances:

• With Service Providers: We may share your data with third-party service providers who assist us in operating the Service. These providers are bound by confidentiality agreements and are only allowed to use your data as needed to provide their services.

• For Legal Reasons: We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, subject to the same privacy protections.

3.1 Healthcare Provider Sharing

With your explicit consent, we may share your health information with:

• Your healthcare providers

• Medical specialists you're referred to

• Healthcare facilities involved in your care

• Insurance providers for coverage verification

• Pharmacies for medication management

3.2 HIPAA Compliance

We maintain compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act as a Business Associate. When we provide services through HIPAA Covered Entities:

• We handle your Protected Health Information (PHI) according to HIPAA requirements

• We maintain Business Associate Agreements with Covered Entities

• We implement required security and privacy safeguards

• We only share PHI to the minimum extent necessary

• We maintain audit trails of PHI access and sharing

4. Data Security

4.1 Security Measures

We implement comprehensive security measures including:

• End-to-end encryption for sensitive data

• Multi-factor authentication

• Regular security audits and assessments

• Intrusion detection and prevention systems

• Secure data backup and recovery procedures

• Employee security training and access controls

4.2 Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify you promptly as required by applicable laws

• Provide details about the breach and affected information

• Outline steps we're taking to address the incident

• Provide resources to help protect your information

• Cooperate with law enforcement and regulators as required

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and comply with legal obligations. Once the data is no longer needed, it will be securely deleted or anonymized.

6. Your Rights

Depending on your location and applicable laws, you may have certain rights concerning your personal information, such as:

• Access and Correction: You can request access to the personal information we hold about you and request corrections to any inaccuracies.

• Deletion: You may request that we delete your personal information, subject to certain legal or contractual obligations.

• Data Portability: You may request a copy of your personal information in a structured, machine-readable format.

6.1 State-Specific Privacy Rights

California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect and how it's used

• Request deletion of your personal information

• Opt-out of the sale of your personal information

• Access your personal information

• Receive equal service regardless of privacy choices

Nevada Residents

Nevada law provides additional privacy options, including the right to opt-out of certain data sharing.

Virginia, Colorado, and Connecticut Residents

Additional privacy rights may apply under your state's laws.

7. Children's Privacy

The Service is not intended for use by children under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected information from a child under the age of 18 without verification of parental consent, we will delete that information.

8. International Data Transfers

8.1 Data Storage Locations

We primarily store and process data in the United States. By using our Service, you consent to the transfer of your information to the U.S. and other countries that may have different data protection rules.

8.2 International Data Protection

For international data transfers, we implement appropriate safeguards:

• Standard contractual clauses

• Data protection agreements

• Privacy Shield certification (where applicable)

• Regional data storage where required

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be effective when we post the revised Privacy Policy. Continued use of the Service following such changes constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or how your personal information is handled, please contact us at contact@withkinfolk.com.

11. Additional Information

11.1 Third-Party Services and Links

Our Service may contain links to other websites or services. We are not responsible for their privacy practices. We recommend reviewing their privacy policies before sharing information.

11.2 Healthcare Disclaimers

While we implement robust security measures, please note:

• Our Service does not replace professional medical care

• Always consult healthcare providers for medical decisions

• Emergency medical conditions require immediate professional care

• We cannot guarantee the accuracy of all health information

11.3 Contact Information

For privacy-related matters:

• Email: contact@withkinfolk.com

• Data Protection Officer: contact@withkinfolk.com

Response timeframes:

• General inquiries: 2-3 business days

• Data access requests: 30 days

• Urgent privacy concerns: 24-48 hours