Privacy Policy

1. Information we handle

• Account information: your name, work email, phone, role, and organization, and your NPI where you provide one.
• Patient information (PHI): the patient details, documents, and messages your organization puts into a case. We handle PHI only as a business associate, under our Business Associate Agreement and HIPAA.
• Prescriber contact details: a prescriber’s name, office, and fax or phone number from the national NPI registry, and a mobile number only when the prescriber gives it to us themselves to turn on texts.
• Usage information: sign-ins, pages used, and an audit trail of actions on cases, which we keep for security and compliance.

2. How we use it

• To run the service: prepare forms, move cases between the organizations working on them, and deliver messages by fax, text, email, or in the app.
• To keep the service secure, prevent misuse, and meet our legal obligations.
• To improve the service using de-identified data, as described in our Terms (with every personal and patient identifier removed under HIPAA’s Safe Harbor standard).

We never sell personal information or identifiable patient information.

3. Who we share it with

• The organizations on a case, as your organization directs: for example, the doctor’s office, the pharmacy, or a manufacturer program you add to a case.
• Service providers that run parts of the service for us: cloud hosting and storage, AI processing, fax and text message delivery, email delivery, and insurance eligibility checks. They may use the information only to provide those services, and those that handle PHI are bound by business associate agreements.
• When the law requires it, or to protect the rights and safety of patients, users, or Mikey AI.

4. Text messages and mobile numbers

Mikey AI texts a prescriber only to tell them that an organization they work with sent a question about a shared patient, with a secure link to read and answer it. Texts never contain patient information and are never used for marketing. Recipients can reply STOP at any time to stop them, or HELP for help.

Mobile numbers are used only to deliver these care-coordination messages. They are never sold, shared, or used for marketing.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every category of sharing described in this policy and will not be shared with any third parties.

5. Security and retention

Patient information is encrypted in storage and in transit, access is limited to the people and organizations working on a case, and actions on cases are logged. We keep information for as long as your organization’s account is active and as required by law and our Business Associate Agreement, then delete or de-identify it.

6. Your choices

• You can update your account information in Settings, and turn email and device alerts on or off.
• Patients should contact the doctor’s office or pharmacy that holds their information; we support them in answering access and correction requests.
• For any other request, contact us at the address below.

7. Changes

We may update this policy. When we make significant changes we will update the date above and let account holders know.